Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf9d11ca-0fbd-410c-9613-434cce4eb8a8.roa
File: cf9d11ca-0fbd-410c-9613-434cce4eb8a8.roa (raw, json)
Hash identifier: 3VB62RTLqaChlSHwByqcbj/pZCYvVhwpuZikL/rwT+k=
Subject key identifier: 2A:F0:3B:DB:B4:2B:8B:38:5D:90:07:AD:B1:67:F1:8E:72:27:C4:32
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 454C0A57243114849A508D2D5C431F1A3F56B7A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf9d11ca-0fbd-410c-9613-434cce4eb8a8.roa
Signing time: Wed 12 Mar 2025 00:20:32 +0000
ROA not before: Wed 12 Mar 2025 00:20:32 +0000
ROA not after: Wed 16 Apr 2025 23:59:59 +0000
asID: 701
IP address blocks: 204.126.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 15:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:4c:0a:57:24:31:14:84:9a:50:8d:2d:5c:43:1f:1a:3f:56:b7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 12 00:20:32 2025 GMT
Not After : Apr 16 23:59:59 2025 GMT
Subject: serialNumber=3ea8569d72db29ad35dec56db61f35e6fbc406a8a3d2e6b3b5fe6231e969e513, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:16:b8:f1:f8:df:b3:4d:fb:41:63:0c:eb:50:
39:b2:2a:92:01:17:71:59:0b:31:e6:df:9e:86:1f:
a0:8d:da:91:c6:65:26:bd:ca:ad:46:6b:fb:3f:b2:
25:06:7d:41:62:33:f0:9e:c2:c6:9b:c8:fa:1a:c7:
42:8a:ed:44:5f:89:ee:53:3e:18:09:5e:dd:cb:a0:
37:4f:a3:3a:f0:e0:dd:62:d8:10:bb:4d:88:54:23:
82:33:72:b1:01:aa:2c:ab:1e:eb:4d:03:29:2d:bf:
49:2d:ae:92:32:65:c9:f1:c7:c2:e3:7d:c6:05:99:
32:56:bd:f8:3c:e4:62:25:24:f9:da:ec:ca:ec:77:
31:dd:2d:19:40:15:de:fb:bb:9e:c4:b1:a2:96:ba:
29:1d:d1:7c:ff:81:aa:19:23:a2:07:03:32:6c:23:
c2:82:62:28:de:37:c4:f9:27:39:bd:63:4f:d9:3a:
59:5f:5e:44:d5:2a:01:1c:e1:18:f6:99:c0:b2:54:
ab:bb:7d:2b:1f:e8:2f:50:45:bc:1c:f5:c2:53:99:
53:19:06:6d:fc:36:a9:0c:36:df:5d:20:48:68:10:
95:8d:ae:90:d4:d4:40:3f:16:96:a0:8a:84:e6:52:
c7:f6:58:6d:92:1a:40:ab:18:1d:f7:1c:4c:93:cf:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F0:3B:DB:B4:2B:8B:38:5D:90:07:AD:B1:67:F1:8E:72:27:C4:32
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cf9d11ca-0fbd-410c-9613-434cce4eb8a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.126.24.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e8:81:37:96:61:05:b1:67:ec:25:3e:75:dc:20:79:0f:03:
30:38:7c:7c:6d:5b:cc:15:4b:8b:f6:99:77:34:f1:a5:53:3b:
89:8d:cb:09:f7:32:68:3f:4b:93:15:68:1b:20:5d:63:3e:a5:
7f:ca:ef:55:b4:fb:de:67:48:1b:a7:e5:28:e4:b7:aa:b6:2f:
06:30:51:84:87:5c:b3:69:cb:7c:bd:5e:7c:a0:cb:41:c3:da:
5f:a3:fc:16:8a:5a:11:a1:39:e2:e0:40:3a:95:f0:64:2c:21:
77:1c:6a:e2:b4:d3:a2:50:eb:d2:aa:2b:bf:9b:28:60:c5:f0:
14:15:32:29:db:81:aa:8b:57:2d:61:30:52:dd:88:3c:6a:03:
5d:6e:f5:8f:07:69:01:00:6f:fd:89:70:68:05:18:04:a8:92:
57:f4:0f:3a:f0:8f:76:67:a3:40:8a:8d:c6:b6:96:ba:87:96:
70:2a:74:d9:ec:23:39:3b:35:a7:a2:5e:7b:a8:81:68:7f:c9:
32:5f:09:4d:5a:93:ea:ad:db:55:48:83:6e:54:f2:10:f9:4d:
c9:d2:b4:a4:df:70:76:d5:8c:b0:92:dc:32:9f:40:47:73:94:
80:dd:29:1f:50:6c:f9:4d:05:97:84:c4:7c:1a:9e:0d:24:39:
7a:1a:75:5b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURUwKVyQxFISaUI0tXEMfGj9Wt6UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzEyMDAyMDMyWhcNMjUwNDE2MjM1OTU5
WjB6MUkwRwYDVQQFE0AzZWE4NTY5ZDcyZGIyOWFkMzVkZWM1NmRiNjFmMzVlNmZi
YzQwNmE4YTNkMmU2YjNiNWZlNjIzMWU5NjllNTEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbFrjx+N+zTftBYwzrUDmyKpIBF3FZCzHm356GH6CN2pHG
ZSa9yq1Ga/s/siUGfUFiM/CewsabyPoax0KK7URfie5TPhgJXt3LoDdPozrw4N1i
2BC7TYhUI4IzcrEBqiyrHutNAyktv0ktrpIyZcnxx8LjfcYFmTJWvfg85GIlJPna
7MrsdzHdLRlAFd77u57EsaKWuikd0Xz/gaoZI6IHAzJsI8KCYijeN8T5Jzm9Y0/Z
OllfXkTVKgEc4Rj2mcCyVKu7fSsf6C9QRbwc9cJTmVMZBm38NqkMNt9dIEhoEJWN
rpDU1EA/FpagioTmUsf2WG2SGkCrGB33HEyTz4NXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKvA727QrizhdkAetsWfxjnInxDIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NmOWQxMWNhLTBmYmQtNDEwYy05NjEzLTQzNGNjZTRlYjhhOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADMfhgwDQYJKoZIhvcNAQELBQADggEBADTogTeWYQWxZ+wlPnXcIHkPAzA4
fHxtW8wVS4v2mXc08aVTO4mNywn3Mmg/S5MVaBsgXWM+pX/K71W0+95nSBun5Sjk
t6q2LwYwUYSHXLNpy3y9Xnygy0HD2l+j/BaKWhGhOeLgQDqV8GQsIXccauK006JQ
69KqK7+bKGDF8BQVMinbgaqLVy1hMFLdiDxqA11u9Y8HaQEAb/2JcGgFGASoklf0
Dzrwj3Zno0CKjca2lrqHlnAqdNnsIzk7NaeiXnuogWh/yTJfCU1ak+qt21VIg25U
8hD5TcnStKTfcHbVjLCS3DKfQEdzlIDdKR9QbPlNBZeExHwang0kOXoadVs=
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:00:42 2025 by rpki-client