Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e1cbe4e4-3320-41a7-b8c2-8589ad042630.roa
File: e1cbe4e4-3320-41a7-b8c2-8589ad042630.roa (raw, json)
Hash identifier: GhYQWydI4uaX5N9HCQxGvCKgbjdvn/SVTJNQsnscLnc=
Subject key identifier: CE:4E:03:C5:0D:65:89:16:79:E4:39:D2:35:15:DB:BD:D8:5D:71:8E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 046E0E4276AAC23E2AD0BD16F1B41D036951C79E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e1cbe4e4-3320-41a7-b8c2-8589ad042630.roa
Signing time: Wed 16 Apr 2025 04:43:18 +0000
ROA not before: Wed 16 Apr 2025 04:43:18 +0000
ROA not after: Wed 21 May 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 05:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6e:0e:42:76:aa:c2:3e:2a:d0:bd:16:f1:b4:1d:03:69:51:c7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Apr 16 04:43:18 2025 GMT
Not After : May 21 23:59:59 2025 GMT
Subject: serialNumber=7a2b691c8b2419c67ab1e1a6a93b7823e80e9baf321d649f250058861864667c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:4d:35:6a:c3:ec:0d:6f:40:d6:b1:72:fd:
f1:fc:dc:91:f0:f0:e9:86:90:b9:a3:f8:f8:20:ec:
d8:07:02:18:1b:de:dc:ad:8b:2f:1a:22:44:78:38:
68:ff:d8:9e:f7:44:d9:ba:a2:92:ac:8a:0b:3f:ef:
d6:a0:19:f7:9f:17:9a:a5:ed:03:1e:69:db:46:b8:
06:33:26:44:90:a1:b9:9b:13:ba:95:90:83:db:25:
35:33:32:a8:67:47:5e:3e:dd:ce:68:d1:64:30:b2:
8e:a7:1d:bd:fc:ca:a9:3d:06:4f:84:5d:87:cc:3c:
6a:96:a8:bc:a3:75:e7:56:21:08:81:ea:cb:0c:78:
a5:26:48:8f:b3:08:49:67:0d:37:21:f9:44:90:c5:
9e:8d:40:55:8e:48:30:fc:46:87:cf:06:18:99:20:
65:a0:13:d6:62:63:50:74:53:07:76:9d:18:b0:6a:
b9:69:3e:5b:ce:a2:a9:f2:c4:6b:27:9d:f7:43:7c:
a1:4d:03:56:71:48:af:b7:5a:f8:5e:d4:01:7a:17:
0e:0a:03:f8:81:4a:aa:cd:d4:92:c2:20:44:1e:10:
bf:c0:a4:38:ff:44:0c:c0:85:0c:67:0a:19:af:5e:
52:23:08:4e:3f:90:7a:ce:96:7a:3a:07:a9:f3:b6:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4E:03:C5:0D:65:89:16:79:E4:39:D2:35:15:DB:BD:D8:5D:71:8E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e1cbe4e4-3320-41a7-b8c2-8589ad042630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8f:7f:f7:50:1b:b0:d8:93:e5:df:9b:37:fe:8e:08:20:0c:
a5:1a:af:a5:49:84:d4:20:82:be:c1:16:d9:25:53:06:78:f4:
97:47:84:66:71:84:9f:d5:9c:92:1d:51:1b:00:b7:2b:aa:e2:
ae:5a:4d:f2:3d:70:84:74:fc:97:41:89:c0:47:35:2a:d3:a1:
c0:fa:66:a5:69:c8:f1:59:f3:50:e8:6b:c7:52:3d:ec:8d:b6:
9a:6e:cb:70:18:2c:36:ab:65:96:e7:1d:14:c8:20:31:13:98:
4c:d4:d5:d9:dc:9e:6a:06:b4:7e:f8:ce:84:71:ab:4e:e2:a2:
a9:68:74:65:ed:6b:ca:34:31:07:ec:bb:67:fd:f2:a7:4d:dc:
f0:b6:9c:6f:b8:d9:ac:74:a0:2d:f0:2a:3d:0f:c2:2f:0e:22:
16:b4:e6:5e:83:3d:cf:21:d2:a1:cf:a2:ad:7c:a8:df:79:dc:
76:7d:39:d1:0b:65:48:ec:ed:47:d3:1b:a9:e3:00:46:ec:3c:
05:35:a0:b6:b4:ab:31:40:22:80:88:47:fa:85:0e:1f:11:52:
9f:a4:fa:ad:98:91:e4:99:45:b6:41:3a:7a:c2:b1:cc:0f:92:
f2:5a:01:a7:09:d9:76:2c:ee:cb:24:a4:55:02:04:12:98:ca:
c6:1a:94:41
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBG4OQnaqwj4q0L0W8bQdA2lRx54wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwNDE2MDQ0MzE4WhcNMjUwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A3YTJiNjkxYzhiMjQxOWM2N2FiMWUxYTZhOTNiNzgyM2U4
MGU5YmFmMzIxZDY0OWYyNTAwNTg4NjE4NjQ2NjdjMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBVk01asPsDW9A1rFy/fH83JHw8OmGkLmj+Pgg7NgHAhgb
3tytiy8aIkR4OGj/2J73RNm6opKsigs/79agGfefF5ql7QMeadtGuAYzJkSQobmb
E7qVkIPbJTUzMqhnR14+3c5o0WQwso6nHb38yqk9Bk+EXYfMPGqWqLyjdedWIQiB
6ssMeKUmSI+zCElnDTch+USQxZ6NQFWOSDD8RofPBhiZIGWgE9ZiY1B0Uwd2nRiw
arlpPlvOoqnyxGsnnfdDfKFNA1ZxSK+3Wvhe1AF6Fw4KA/iBSqrN1JLCIEQeEL/A
pDj/RAzAhQxnChmvXlIjCE4/kHrOlno6B6nztrBnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzk4DxQ1liRZ55DnSNRXbvdhdcY4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2UxY2JlNGU0LTMzMjAtNDFhNy1iOGMyLTg1ODlhZDA0MjYzMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJCPf/dQG7DYk+Xfmzf+jgggDKUa
r6VJhNQggr7BFtklUwZ49JdHhGZxhJ/VnJIdURsAtyuq4q5aTfI9cIR0/JdBicBH
NSrTocD6ZqVpyPFZ81Doa8dSPeyNtppuy3AYLDarZZbnHRTIIDETmEzU1dncnmoG
tH74zoRxq07ioqlodGXta8o0MQfsu2f98qdN3PC2nG+42ax0oC3wKj0Pwi8OIha0
5l6DPc8h0qHPoq18qN953HZ9OdELZUjs7UfTG6njAEbsPAU1oLa0qzFAIoCIR/qF
Dh8RUp+k+q2YkeSZRbZBOnrCscwPkvJaAacJ2XYs7sskpFUCBBKYysYalEE=
-----END CERTIFICATE-----
Generated at Fri May 9 02:53:07 2025 by rpki-client