Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1d7a31e-a539-4928-9873-d74220431496.roa
File: b1d7a31e-a539-4928-9873-d74220431496.roa (raw, json)
Hash identifier: 0J95xF/+fcelvDqWKH1z19zKuABce1gJeLjZtF+MGUI=
Subject key identifier: 66:34:82:FE:65:92:7C:AF:3D:CA:54:C0:FB:F0:BE:FE:9A:0F:89:F5
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 412F37FCD8EEEDCDF897EE7B781AF834CCEC80D8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1d7a31e-a539-4928-9873-d74220431496.roa
Signing time: Mon 28 Apr 2025 15:23:26 +0000
ROA not before: Mon 28 Apr 2025 15:23:26 +0000
ROA not after: Mon 02 Jun 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Apr 2025 15:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:2f:37:fc:d8:ee:ed:cd:f8:97:ee:7b:78:1a:f8:34:cc:ec:80:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 28 15:23:26 2025 GMT
Not After : Jun 2 23:59:59 2025 GMT
Subject: serialNumber=4882fc144ddcc691daf954b0ae0c802b5f92e101b50d92e5ced161c8c622650f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4b:ca:be:06:d5:4d:d2:91:cf:25:f7:5d:20:
a7:3b:ce:dd:97:31:c8:82:99:65:04:f7:56:4c:9d:
ea:de:42:40:d2:39:86:6f:61:2d:f9:8a:d0:09:10:
1f:91:a6:af:d7:64:f0:2f:16:80:91:9b:f0:3f:98:
0c:ea:66:cb:27:db:f0:82:fe:6d:93:6a:36:6b:75:
1d:8f:b6:26:ed:c3:1e:bc:c4:a8:8b:b9:1a:86:42:
e7:d2:6a:cd:2c:e4:97:51:8f:01:47:ca:00:eb:7a:
69:16:a5:da:d8:c1:ad:a4:37:46:37:39:b2:79:a3:
63:d7:aa:94:a3:ab:f7:a9:aa:d6:f7:14:c4:f8:99:
f8:8a:18:41:81:91:7e:be:96:59:67:0a:a6:34:cd:
b0:5d:f6:ec:a0:7a:99:c7:0d:60:ac:5f:90:ca:cf:
80:e7:44:53:ae:1c:bb:f8:ac:44:a7:ef:4e:ef:4c:
d0:78:cc:de:c5:28:3f:cf:91:db:14:98:7f:c3:4f:
59:81:a6:b8:dc:ed:8e:10:be:fc:47:e4:30:dc:5a:
5c:a5:4f:0a:2e:ac:50:02:b7:e0:f0:c9:25:fa:dc:
06:9a:01:4b:ce:e1:81:8e:bb:9e:b3:fe:71:7e:ad:
35:54:39:e8:13:a4:81:ea:ee:2e:0c:24:98:b1:e9:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:34:82:FE:65:92:7C:AF:3D:CA:54:C0:FB:F0:BE:FE:9A:0F:89:F5
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b1d7a31e-a539-4928-9873-d74220431496.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:3e:14:3a:e3:2e:2d:45:3e:e1:20:65:58:48:c7:40:61:2d:
5a:7f:ec:3d:f7:cb:ac:fe:b7:68:5f:a0:95:65:93:a8:29:84:
93:65:7b:bf:49:fd:05:70:0e:61:07:b8:e4:ab:5d:be:b3:b9:
ca:d7:c9:f9:96:87:54:ae:b5:f1:74:21:99:0b:89:89:d3:00:
25:ba:6b:36:47:30:d9:7f:b5:73:1e:15:3a:9b:66:2e:88:6e:
78:f3:47:87:6b:3c:f5:3a:c9:33:12:a1:77:6d:ec:89:07:22:
0d:c9:2c:a4:22:29:a8:ac:e7:c6:00:2a:83:86:56:2a:a2:f1:
87:9e:31:ff:e8:bf:3c:be:56:9a:f8:2b:7b:0a:2b:c0:c2:c6:
82:b5:68:dc:ff:af:ce:2c:9d:99:02:44:c8:9a:68:27:ae:66:
79:88:a2:38:72:5a:1e:d8:b8:69:61:e8:83:ce:a4:a1:20:b5:
c1:bb:53:6a:f9:4e:06:48:91:07:51:c9:22:b6:0a:e4:e6:bb:
15:e9:96:9e:3c:e4:11:26:16:04:49:7f:bd:f0:fc:94:d5:77:
9c:2d:46:0a:a1:d3:30:9e:1e:51:ec:66:b7:bf:2e:ec:91:c9:
e4:6c:9e:9d:9c:51:ce:47:fe:9d:49:81:f8:91:b6:96:d6:25:
0e:73:dc:ca
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQS83/Nju7c34l+57eBr4NMzsgNgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDI4MTUyMzI2WhcNMjUwNjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0ODgyZmMxNDRkZGNjNjkxZGFmOTU0YjBhZTBjODAyYjVm
OTJlMTAxYjUwZDkyZTVjZWQxNjFjOGM2MjI2NTBmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDeS8q+BtVN0pHPJfddIKc7zt2XMciCmWUE91ZMnereQkDS
OYZvYS35itAJEB+Rpq/XZPAvFoCRm/A/mAzqZssn2/CC/m2TajZrdR2Ptibtwx68
xKiLuRqGQufSas0s5JdRjwFHygDremkWpdrYwa2kN0Y3ObJ5o2PXqpSjq/epqtb3
FMT4mfiKGEGBkX6+lllnCqY0zbBd9uygepnHDWCsX5DKz4DnRFOuHLv4rESn707v
TNB4zN7FKD/PkdsUmH/DT1mBprjc7Y4QvvxH5DDcWlylTwourFACt+DwySX63Aaa
AUvO4YGOu56z/nF+rTVUOegTpIHq7i4MJJix6VOZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZjSC/mWSfK89ylTA+/C+/poPifUwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2IxZDdhMzFlLWE1MzktNDkyOC05ODczLWQ3NDIyMDQzMTQ5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAFY+FDrjLi1FPuEgZVhIx0BhLVp/
7D33y6z+t2hfoJVlk6gphJNle79J/QVwDmEHuOSrXb6zucrXyfmWh1SutfF0IZkL
iYnTACW6azZHMNl/tXMeFTqbZi6IbnjzR4drPPU6yTMSoXdt7IkHIg3JLKQiKais
58YAKoOGViqi8YeeMf/ovzy+Vpr4K3sKK8DCxoK1aNz/r84snZkCRMiaaCeuZnmI
ojhyWh7YuGlh6IPOpKEgtcG7U2r5TgZIkQdRySK2CuTmuxXplp485BEmFgRJf73w
/JTVd5wtRgqh0zCeHlHsZre/LuyRyeRsnp2cUc5H/p1JgfiRtpbWJQ5z3Mo=
-----END CERTIFICATE-----
Generated at Sat May 10 19:27:43 2025 by rpki-client