Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/85cd5ea1-da73-4bd1-b353-e23665794846.roa
File: 85cd5ea1-da73-4bd1-b353-e23665794846.roa (raw, json)
Hash identifier: SAnChzePIS5k9djR6eH6Rjm93b9hNlA8Dkc/qcKNN9s=
Subject key identifier: DA:54:78:EF:F4:D9:37:63:C4:5B:4C:60:0A:A0:DB:D9:C8:AD:75:61
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 7C2745CCC7EC05DEEF3245B769C1420DF5DFA63C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/85cd5ea1-da73-4bd1-b353-e23665794846.roa
Signing time: Wed 26 Mar 2025 22:23:18 +0000
ROA not before: Wed 26 Mar 2025 22:23:18 +0000
ROA not after: Wed 30 Apr 2025 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 22:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:27:45:cc:c7:ec:05:de:ef:32:45:b7:69:c1:42:0d:f5:df:a6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Mar 26 22:23:18 2025 GMT
Not After : Apr 30 23:59:59 2025 GMT
Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:ce:0b:40:c1:77:86:eb:a5:b4:4d:b7:8a:
68:e3:f6:b2:ed:e3:19:88:6c:19:5d:93:84:4c:b5:
7d:1d:e0:78:97:7d:69:d0:f4:46:7c:47:00:02:bb:
25:78:95:12:0c:8c:73:5a:ab:2f:43:d7:8f:25:cc:
d2:36:2c:ac:79:52:ef:57:d7:e2:cd:0a:e6:2a:89:
5a:d2:1c:d0:a5:15:3a:53:10:aa:33:c5:da:9f:e1:
d8:01:94:e1:63:fe:07:90:1b:ef:06:46:4f:c8:23:
d9:9f:60:aa:f1:63:5c:95:e9:f4:9e:19:e2:f0:9f:
a9:80:68:7d:a2:06:2d:5b:c7:97:40:a0:d6:64:00:
bb:a5:d9:3a:74:d0:33:b8:f7:7b:70:b6:6c:64:85:
dc:f0:79:58:a8:95:90:35:e2:73:75:a5:2f:7e:5e:
c1:31:3a:f3:db:e5:e7:45:7f:e0:06:99:4d:21:ee:
1a:39:20:2a:e9:f5:a9:d4:ed:87:d3:ac:5d:6a:df:
8e:26:e9:b1:6c:b7:8c:ef:0e:06:63:ea:5b:5e:a7:
ef:be:3d:90:70:cc:75:52:30:2a:3b:f4:4f:b3:f0:
2e:6f:60:ad:a5:81:9e:85:b3:03:5b:f0:5b:2d:ec:
ff:ce:7d:e2:b7:f4:f2:01:ae:be:2d:9d:79:c8:4d:
dd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:54:78:EF:F4:D9:37:63:C4:5B:4C:60:0A:A0:DB:D9:C8:AD:75:61
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/85cd5ea1-da73-4bd1-b353-e23665794846.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6b:d4:88:aa:05:29:83:76:17:99:f1:ef:34:08:63:df:61:
87:87:b6:a4:f8:0f:8c:94:8d:56:22:cf:cd:a8:73:fe:ba:bc:
27:ee:37:02:27:a3:b9:62:1e:f0:22:17:23:ae:1f:df:ce:8a:
44:1d:5b:1c:25:b9:3a:b6:d9:46:e3:c5:41:78:e1:27:a6:e0:
58:25:cb:1f:87:96:e9:f0:9e:6c:e1:1f:42:d6:15:8a:98:c6:
12:b0:cc:57:e3:37:e9:c7:2d:d7:6d:f1:5d:c4:56:a1:d7:84:
d4:38:cf:ef:19:43:a9:0a:53:57:77:e0:90:54:ee:08:e3:21:
6b:25:4a:ac:31:90:06:9f:f7:18:f4:e2:c1:3f:6c:36:ae:68:
f3:30:86:cb:22:cf:8b:f6:0d:88:d1:17:6a:ce:d9:83:97:10:
89:1b:ca:52:f6:03:c8:e1:3c:c7:24:18:bd:62:22:cf:0a:ab:
3a:ce:5a:ba:56:2b:1b:f3:3c:5f:a6:1c:13:a8:d6:8a:78:fc:
42:ab:2d:4c:9d:a0:a6:9c:e3:fb:3f:d8:3a:f0:08:4c:db:63:
b3:db:7a:01:75:8b:fc:60:53:fe:6d:a1:ad:fb:6b:98:c8:51:
ae:2c:b8:07:13:32:ce:af:e8:53:05:16:2e:43:28:b9:47:e5:
cf:f7:d3:13
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfCdFzMfsBd7vMkW3acFCDfXfpjwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMzI2MjIyMzE4WhcNMjUwNDMwMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZjIyNjZmZGZmNWUyNmUxODhlMzdmODllYzEwNDQ3MDdl
NWE4NDBhMzBjZmU0YTNhZmJhY2NjMDQ0Y2ZkOGE5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxFc4LQMF3huultE23imjj9rLt4xmIbBldk4RMtX0d4HiX
fWnQ9EZ8RwACuyV4lRIMjHNaqy9D148lzNI2LKx5Uu9X1+LNCuYqiVrSHNClFTpT
EKozxdqf4dgBlOFj/geQG+8GRk/II9mfYKrxY1yV6fSeGeLwn6mAaH2iBi1bx5dA
oNZkALul2Tp00DO493twtmxkhdzweViolZA14nN1pS9+XsExOvPb5edFf+AGmU0h
7ho5ICrp9anU7YfTrF1q344m6bFst4zvDgZj6ltep+++PZBwzHVSMCo79E+z8C5v
YK2lgZ6FswNb8Fst7P/OfeK39PIBrr4tnXnITd2hAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2lR47/TZN2PEW0xgCqDb2citdWEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzg1Y2Q1ZWExLWRhNzMtNGJkMS1iMzUzLWUyMzY2NTc5NDg0Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAF9r1IiqBSmDdheZ8e80CGPfYYeH
tqT4D4yUjVYiz82oc/66vCfuNwIno7liHvAiFyOuH9/OikQdWxwluTq22UbjxUF4
4Sem4Fglyx+HlunwnmzhH0LWFYqYxhKwzFfjN+nHLddt8V3EVqHXhNQ4z+8ZQ6kK
U1d34JBU7gjjIWslSqwxkAaf9xj04sE/bDauaPMwhssiz4v2DYjRF2rO2YOXEIkb
ylL2A8jhPMckGL1iIs8KqzrOWrpWKxvzPF+mHBOo1op4/EKrLUydoKac4/s/2Drw
CEzbY7PbegF1i/xgU/5toa37a5jIUa4suAcTMs6v6FMFFi5DKLlH5c/30xM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:33:11 2025 by rpki-client