Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62a212fb-6a63-46c6-a1b5-8a90b4b1582c.roa
File: 62a212fb-6a63-46c6-a1b5-8a90b4b1582c.roa (raw, json)
Hash identifier: 0vmY3xmxwotqxAf1P2kO5EUbAIWG1/8yC2efMx6JaJU=
Subject key identifier: 6E:01:9F:3D:AE:C2:CB:8A:09:41:F9:B7:38:1B:07:80:44:1A:6E:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7EF4374E83E1F83A7810CB50F9952F8E47FD91DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62a212fb-6a63-46c6-a1b5-8a90b4b1582c.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 107.150.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 03:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f4:37:4e:83:e1:f8:3a:78:10:cb:50:f9:95:2f:8e:47:fd:91:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:42:23:20:1e:b5:18:6b:a4:b4:13:70:45:
a2:c8:c8:7a:e3:18:5b:1c:8c:4a:3d:88:ad:13:d3:
58:5c:bb:02:bd:23:e1:06:80:0b:54:13:a6:4e:02:
a4:d4:9b:ec:cc:c8:1b:45:3f:e0:45:cb:ff:72:46:
b3:b9:68:a8:ba:15:80:c5:9a:d0:23:25:4b:e5:b0:
ce:0b:86:85:a1:f2:19:ab:11:e4:3c:5d:bf:27:8b:
fe:f4:47:a6:f7:ff:d5:5b:68:bd:5b:59:8d:fc:fe:
65:61:06:b0:81:11:b7:3a:94:af:07:89:ac:21:7f:
1e:e3:a0:fa:28:67:44:c9:be:5b:6c:39:1d:17:60:
b8:08:ac:10:46:d6:e4:2d:1a:04:24:5d:30:84:74:
13:5e:5b:dd:46:8c:de:94:83:d4:1c:dd:b0:9e:3c:
57:86:9c:94:93:9a:1e:e9:8a:99:3e:02:02:34:e4:
6f:b2:31:fc:91:38:ea:7b:17:0d:eb:b6:65:7d:3f:
f8:ab:2f:c1:ec:50:9f:71:e1:f3:73:31:d8:c3:dc:
3a:ef:ce:21:b5:b1:77:49:33:ba:fe:92:d2:7a:17:
d4:ff:18:3a:50:80:10:7a:af:f3:8c:48:fd:f5:4b:
4f:ca:db:a9:c5:14:1a:d4:86:3a:90:ff:02:75:17:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:01:9F:3D:AE:C2:CB:8A:09:41:F9:B7:38:1B:07:80:44:1A:6E:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62a212fb-6a63-46c6-a1b5-8a90b4b1582c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.150.192.0/19
Signature Algorithm: sha256WithRSAEncryption
10:41:a8:b5:6f:ca:c6:d2:0d:1d:5f:5e:76:34:a6:aa:a9:db:
95:cc:68:a2:47:e6:09:db:40:ac:29:67:ac:11:18:fe:3b:9c:
e6:7e:09:91:e3:e1:8f:78:cb:56:1e:6a:14:14:0a:42:27:f2:
8a:63:f7:21:97:b9:2c:a0:b0:72:62:c3:25:29:47:5a:cc:35:
4c:9c:53:4d:8e:a2:73:3d:42:eb:3a:1b:02:82:c3:f0:be:3f:
e3:3d:c9:b5:56:05:be:89:c0:b2:57:5f:26:ec:35:b0:97:b2:
3c:e2:9f:87:c3:85:32:c0:81:05:cb:36:f7:83:be:a3:ce:23:
f8:74:ea:05:61:c8:9b:88:a5:ab:63:c2:62:6c:35:be:ba:0a:
4f:ae:67:51:a5:53:fe:88:c5:3a:54:e7:e0:ce:8c:07:67:6d:
91:b4:7c:67:d2:c5:40:9f:4a:5b:96:b3:6e:27:89:cb:bf:41:
f6:47:82:e4:50:40:1a:90:68:8f:eb:82:9f:0e:0d:2a:c8:33:
ff:8a:b8:cb:96:23:ec:e2:02:91:51:a9:18:e9:59:89:08:27:
0f:fa:41:df:8c:0e:ba:35:9c:73:76:02:68:f9:87:26:10:4b:
a7:c6:ac:f0:2f:0f:7d:d8:e2:23:ee:ac:e2:ca:61:82:c6:f5:
43:c6:d0:9b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfvQ3ToPh+Dp4EMtQ+ZUvjkf9kd0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMzg2ZGQ1OWQ1ODMxZDVhMjhhNDE5MTdiOTllOWMzYTRl
NmUwMzY4ZGFhODVhMTE4OTJkNjUxZDFlODgzMDEyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIv0IjIB61GGuktBNwRaLIyHrjGFscjEo9iK0T01hcuwK9
I+EGgAtUE6ZOAqTUm+zMyBtFP+BFy/9yRrO5aKi6FYDFmtAjJUvlsM4LhoWh8hmr
EeQ8Xb8ni/70R6b3/9VbaL1bWY38/mVhBrCBEbc6lK8Hiawhfx7joPooZ0TJvlts
OR0XYLgIrBBG1uQtGgQkXTCEdBNeW91GjN6Ug9Qc3bCePFeGnJSTmh7pipk+AgI0
5G+yMfyROOp7Fw3rtmV9P/irL8HsUJ9x4fNzMdjD3DrvziG1sXdJM7r+ktJ6F9T/
GDpQgBB6r/OMSP31S0/K26nFFBrUhjqQ/wJ1F805AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbgGfPa7Cy4oJQfm3OBsHgEQabjswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYyYTIxMmZiLTZhNjMtNDZjNi1hMWI1LThhOTBiNGIxNTgyYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVrlsAwDQYJKoZIhvcNAQELBQADggEBABBBqLVvysbSDR1fXnY0pqqp25XM
aKJH5gnbQKwpZ6wRGP47nOZ+CZHj4Y94y1YeahQUCkIn8opj9yGXuSygsHJiwyUp
R1rMNUycU02OonM9Qus6GwKCw/C+P+M9ybVWBb6JwLJXXybsNbCXsjzin4fDhTLA
gQXLNveDvqPOI/h06gVhyJuIpatjwmJsNb66Ck+uZ1GlU/6IxTpU5+DOjAdnbZG0
fGfSxUCfSluWs24nicu/QfZHguRQQBqQaI/rgp8ODSrIM/+KuMuWI+ziApFRqRjp
WYkIJw/6Qd+MDro1nHN2Amj5hyYQS6fGrPAvD33Y4iPurOLKYYLG9UPG0Js=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:08 2025 by rpki-client