Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/937af010-076f-479b-9c64-69c6b12b6f74.roa
File: 937af010-076f-479b-9c64-69c6b12b6f74.roa (raw, json)
Hash identifier: gB425n4OiUn6udRaUDJsnDU86Nkhz+LLUvMTXpl8hKQ=
Subject key identifier: 91:9E:FB:66:4D:FE:F9:1B:72:4D:CE:FA:00:11:E8:4D:91:3B:31:EB
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7AEC9C304959F4817AA79ECB341F0A6C2D05F76B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/937af010-076f-479b-9c64-69c6b12b6f74.roa
Signing time: Sun 13 Apr 2025 04:18:18 +0000
ROA not before: Sun 13 Apr 2025 04:18:18 +0000
ROA not after: Sun 18 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Apr 2025 04:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ec:9c:30:49:59:f4:81:7a:a7:9e:cb:34:1f:0a:6c:2d:05:f7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 13 04:18:18 2025 GMT
Not After : May 18 23:59:59 2025 GMT
Subject: serialNumber=5baa9b3763bbf9708699e4c4db3f98715761068f82629c755d05b4bf12138640, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:40:f3:f4:fe:2e:74:9d:c1:1c:29:7c:02:
6f:81:1d:9f:0b:4f:99:63:15:95:df:9d:d4:04:7c:
a1:8b:a5:f2:ae:6b:67:22:ec:73:4d:7c:df:cd:4d:
a4:50:b9:ff:14:7e:43:af:fe:7f:e6:60:be:70:34:
e5:8e:00:3e:97:ae:24:89:ef:11:5a:b5:0b:4a:ae:
4d:86:a6:25:ca:9e:06:03:9e:65:da:f7:fd:e1:9e:
a0:4a:69:b0:3b:11:a3:8f:c6:18:81:5d:7f:94:02:
1a:c2:0c:0c:fd:1d:4c:40:12:9d:e4:49:0e:93:1b:
90:dd:16:25:a6:69:db:a1:aa:e6:66:34:7c:cf:fb:
c5:6b:4c:cc:19:ef:25:a2:6f:a5:4a:06:e2:2c:4d:
f3:d8:28:dc:b3:e4:d6:9d:82:04:21:f7:41:3c:b8:
be:c4:e3:c8:69:b3:45:3a:61:c7:ce:98:ed:99:51:
8e:8f:f4:0b:ec:b2:c8:49:8e:c6:5d:99:e7:81:1d:
de:60:8b:f7:67:04:2d:46:6b:70:bc:43:b4:10:25:
35:80:59:ad:e9:39:e8:bb:e2:e8:a3:e0:e4:8a:bd:
23:b3:ed:96:9b:c4:76:8a:5b:a7:0a:df:5e:fa:ee:
e0:7f:30:09:62:ee:d1:b1:61:12:cb:96:29:6f:97:
02:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9E:FB:66:4D:FE:F9:1B:72:4D:CE:FA:00:11:E8:4D:91:3B:31:EB
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/937af010-076f-479b-9c64-69c6b12b6f74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0d:f9:4d:2e:4b:57:09:56:f5:da:b2:88:87:28:e4:d0:3e:
26:8b:f5:6e:35:cf:94:d8:50:5c:33:d5:c4:b9:f0:ac:a4:e1:
e0:f3:53:c1:d2:94:63:7a:c1:8c:cc:41:7d:87:8c:8b:c6:1f:
40:b2:73:62:bd:be:62:87:79:bc:aa:48:0e:64:20:cd:2f:86:
a8:20:2a:17:7e:88:74:29:ad:19:9c:6c:24:d5:08:0a:66:cb:
cd:64:09:af:67:d7:f6:4d:11:c7:a4:2e:94:ce:0e:8d:a4:b2:
f7:4f:a2:ad:ed:9c:95:cd:d2:a9:6d:b9:b0:08:83:e6:57:ec:
11:7e:19:47:4c:c8:b2:85:62:16:10:3b:36:8a:d2:e9:3a:cf:
bb:e8:c4:4f:96:24:1c:5f:fe:45:62:f2:79:03:f7:ae:9b:de:
53:48:cf:0a:8b:6f:ed:16:ed:23:90:ba:4e:08:ad:e7:7d:d5:
b1:af:0b:9e:c0:54:7c:30:f2:92:b4:12:80:8a:dc:a4:77:14:
29:55:76:23:cf:5f:17:3e:86:40:ae:06:86:cd:db:3b:cd:ab:
0f:b8:f1:12:31:e0:40:7b:2b:74:d4:17:f4:f1:c3:a4:53:f5:
6b:7b:61:f9:0b:42:a1:fc:2c:49:f6:6f:be:a7:88:6f:2a:84:
a9:c3:3b:7b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeuycMElZ9IF6p57LNB8KbC0F92swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDEzMDQxODE4WhcNMjUwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1YmFhOWIzNzYzYmJmOTcwODY5OWU0YzRkYjNmOTg3MTU3
NjEwNjhmODI2MjljNzU1ZDA1YjRiZjEyMTM4NjQwMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNzUDz9P4udJ3BHCl8Am+BHZ8LT5ljFZXfndQEfKGLpfKu
a2ci7HNNfN/NTaRQuf8UfkOv/n/mYL5wNOWOAD6XriSJ7xFatQtKrk2GpiXKngYD
nmXa9/3hnqBKabA7EaOPxhiBXX+UAhrCDAz9HUxAEp3kSQ6TG5DdFiWmaduhquZm
NHzP+8VrTMwZ7yWib6VKBuIsTfPYKNyz5NadggQh90E8uL7E48hps0U6YcfOmO2Z
UY6P9AvssshJjsZdmeeBHd5gi/dnBC1Ga3C8Q7QQJTWAWa3pOei74uij4OSKvSOz
7ZabxHaKW6cK31767uB/MAli7tGxYRLLlilvlwLLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkZ77Zk3++RtyTc76ABHoTZE7MeswHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzkzN2FmMDEwLTA3NmYtNDc5Yi05YzY0LTY5YzZiMTJiNmY3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADUN+U0uS1cJVvXasoiHKOTQPiaL
9W41z5TYUFwz1cS58Kyk4eDzU8HSlGN6wYzMQX2HjIvGH0Cyc2K9vmKHebyqSA5k
IM0vhqggKhd+iHQprRmcbCTVCApmy81kCa9n1/ZNEcekLpTODo2ksvdPoq3tnJXN
0qltubAIg+ZX7BF+GUdMyLKFYhYQOzaK0uk6z7voxE+WJBxf/kVi8nkD966b3lNI
zwqLb+0W7SOQuk4Ired91bGvC57AVHww8pK0EoCK3KR3FClVdiPPXxc+hkCuBobN
2zvNqw+48RIx4EB7K3TUF/Txw6RT9Wt7YfkLQqH8LEn2b76niG8qhKnDO3s=
-----END CERTIFICATE-----
Generated at Sat May 10 10:43:56 2025 by rpki-client