Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49a7951e-2f58-4de4-8f31-2ec454240c6e.roa
File: 49a7951e-2f58-4de4-8f31-2ec454240c6e.roa (raw, json)
Hash identifier: TKOb1AVdjZafEFsSdUMpS1TJeEdL7sEcFc+AGaciN7Q=
Subject key identifier: AA:B3:E7:40:78:9F:7B:00:36:D1:29:FA:0F:31:E6:68:21:07:FE:D4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 429F518C8A3D55FA2D75DF303DAB75A4A0F030CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49a7951e-2f58-4de4-8f31-2ec454240c6e.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 142.4.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 18:38:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:9f:51:8c:8a:3d:55:fa:2d:75:df:30:3d:ab:75:a4:a0:f0:30:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:66:38:2a:4e:99:ab:58:67:a4:05:e4:95:6f:
71:88:dc:6b:5b:43:74:b0:6d:fa:ae:80:d0:72:e6:
db:63:48:18:40:a0:5c:59:fd:c3:56:df:c1:b0:a6:
81:ba:45:06:00:ca:20:b2:b0:7e:fc:0d:9e:01:02:
d0:d7:bc:7c:c1:fe:73:22:52:a6:84:e9:45:36:0e:
cb:83:39:53:2b:67:40:53:16:11:3e:73:2b:cb:ac:
c1:f5:95:7e:4d:25:1d:4e:42:ef:09:42:c6:fb:c9:
d9:1c:35:2b:b0:2f:b5:bc:6c:00:93:27:17:ad:53:
18:80:5d:2c:8f:70:03:c7:b9:e4:a7:86:38:c8:b4:
7e:87:6c:4f:66:07:84:68:45:82:31:d0:76:98:b4:
6e:c8:4a:6e:3f:2e:8d:2f:37:c5:7c:9d:ce:b2:43:
72:bd:d1:0c:c9:d0:ef:1b:76:89:79:2c:ce:f0:8b:
4f:cb:48:88:40:74:29:81:32:4f:d4:78:d4:84:a7:
9a:28:02:ff:ab:05:4a:b2:cb:79:cc:9d:e4:bc:ea:
24:0b:5b:fd:06:8b:62:c1:60:93:8d:91:16:ff:84:
f9:6c:89:3b:04:a6:6a:51:9a:a4:0d:6b:94:12:bc:
e8:6d:7c:05:35:75:34:2a:32:33:75:85:14:1b:1f:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B3:E7:40:78:9F:7B:00:36:D1:29:FA:0F:31:E6:68:21:07:FE:D4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49a7951e-2f58-4de4-8f31-2ec454240c6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.4.164.0/24
Signature Algorithm: sha256WithRSAEncryption
46:13:f1:4f:3a:4e:3b:0f:41:fc:80:71:c9:f8:be:08:01:30:
4c:77:54:fd:35:6d:17:a2:f8:c4:b6:a5:1b:97:5d:10:eb:f5:
e9:21:42:9e:cf:b7:9f:05:dc:71:c0:01:6f:ba:7b:4c:bc:d0:
78:49:25:65:a0:01:4c:32:be:ff:7f:b5:df:0f:b1:2c:ae:f2:
09:65:74:22:73:53:63:8d:2d:d0:42:fc:cd:12:51:79:5d:94:
d7:7d:aa:aa:9c:5d:5a:0a:6e:cb:12:b4:55:54:34:2b:18:e9:
c9:4c:db:f0:19:5e:fe:4c:80:0b:82:ee:54:4e:86:cd:87:1c:
4c:af:25:51:73:8f:9e:97:6d:d0:b4:1e:51:40:c5:b4:8b:4c:
1c:42:c0:a3:2b:83:95:0f:68:b9:78:18:ce:fc:ae:97:62:9d:
39:28:54:f5:f7:96:57:c6:2c:b9:3f:2b:40:4b:69:e7:de:13:
dd:65:af:cb:3a:ce:5e:e9:2f:fd:98:93:d4:b2:58:18:4c:99:
f1:41:c6:2b:73:fb:c1:17:b8:64:93:36:e0:46:bb:2f:49:ac:
e8:cb:65:2f:1e:94:8a:18:64:45:f8:ba:3c:a6:b2:be:03:ad:
81:8c:08:7e:cc:a0:a6:d6:ad:36:a0:e3:af:f3:fc:00:0a:ec:
6f:5d:45:6b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQp9RjIo9Vfotdd8wPat1pKDwMMswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmODY3N2U1NzRkNDhhMjllYjE5ZjYyMzNiODBjZWFhYWYw
MjNmMWM2Yjc3MGEwZjdhNzZkNmM3M2FkYTRkODEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDzZjgqTpmrWGekBeSVb3GI3GtbQ3SwbfqugNBy5ttjSBhA
oFxZ/cNW38GwpoG6RQYAyiCysH78DZ4BAtDXvHzB/nMiUqaE6UU2DsuDOVMrZ0BT
FhE+cyvLrMH1lX5NJR1OQu8JQsb7ydkcNSuwL7W8bACTJxetUxiAXSyPcAPHueSn
hjjItH6HbE9mB4RoRYIx0HaYtG7ISm4/Lo0vN8V8nc6yQ3K90QzJ0O8bdol5LM7w
i0/LSIhAdCmBMk/UeNSEp5ooAv+rBUqyy3nMneS86iQLW/0Gi2LBYJONkRb/hPls
iTsEpmpRmqQNa5QSvOhtfAU1dTQqMjN1hRQbHziTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqrPnQHifewA20Sn6DzHmaCEH/tQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ5YTc5NTFlLTJmNTgtNGRlNC04ZjMxLTJlYzQ1NDI0MGM2ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACOBKQwDQYJKoZIhvcNAQELBQADggEBAEYT8U86TjsPQfyAccn4vggBMEx3
VP01bRei+MS2pRuXXRDr9ekhQp7Pt58F3HHAAW+6e0y80HhJJWWgAUwyvv9/td8P
sSyu8glldCJzU2ONLdBC/M0SUXldlNd9qqqcXVoKbssStFVUNCsY6clM2/AZXv5M
gAuC7lROhs2HHEyvJVFzj56XbdC0HlFAxbSLTBxCwKMrg5UPaLl4GM78rpdinTko
VPX3llfGLLk/K0BLaefeE91lr8s6zl7pL/2Yk9SyWBhMmfFBxitz+8EXuGSTNuBG
uy9JrOjLZS8elIoYZEX4ujymsr4DrYGMCH7MoKbWrTag46/z/AAK7G9dRWs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:54 2025 by rpki-client