Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f88d055f-2a4e-420d-a5d8-fcf7a627868d.roa
File: f88d055f-2a4e-420d-a5d8-fcf7a627868d.roa (raw, json)
Hash identifier: O2M+x2eG2Va9YheAurngyTWcLkoQZA+ZUvRCmxgUtDc=
Subject key identifier: 4C:25:CB:33:1B:F6:57:C2:52:A3:B9:F4:42:53:6A:9D:54:6C:5B:D6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E9A692B07F216E79983CF00265F4E9E7D3B1156
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f88d055f-2a4e-420d-a5d8-fcf7a627868d.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.187.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 17:52:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9a:69:2b:07:f2:16:e7:99:83:cf:00:26:5f:4e:9e:7d:3b:11:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:fc:54:6b:eb:bf:6c:4d:00:6a:b9:15:01:
b1:ed:b8:76:81:68:2e:93:7e:bc:3f:66:d4:43:3b:
22:92:38:f2:e9:bc:80:43:de:c8:ce:78:a3:04:59:
d3:a5:5b:e1:a9:54:a5:ac:09:8b:7c:0a:e9:89:0c:
13:b8:9f:ef:9d:70:83:db:29:84:ca:fd:93:2f:b5:
88:ee:63:cf:63:48:bd:d1:b7:36:74:c6:d9:e8:06:
18:92:17:c0:bd:17:a1:cb:9b:3e:14:03:d0:66:84:
d8:fb:8a:9f:ef:42:97:d2:7a:d4:89:c8:e7:f9:7b:
0f:f2:9d:a7:b6:8f:22:b1:3d:12:c0:ac:ef:26:e7:
76:f3:b4:50:80:ec:f6:c7:1a:11:ad:f6:7a:ff:14:
df:4d:56:3d:79:07:bd:11:a5:a3:26:eb:ec:99:45:
4d:62:f0:d5:1b:fb:89:cc:0e:5a:14:e8:54:4f:9c:
a9:2e:4b:9c:3d:f8:49:3a:aa:26:f7:fd:0f:06:25:
60:eb:59:03:99:4d:3b:97:5b:62:70:4c:90:1d:50:
fb:b4:47:32:0c:15:31:74:db:e3:3b:b0:47:64:be:
67:27:8b:51:18:79:03:d3:9a:cb:31:a2:32:2e:c5:
22:07:57:ac:20:10:8a:87:b9:e1:0d:db:be:b2:ea:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:25:CB:33:1B:F6:57:C2:52:A3:B9:F4:42:53:6A:9D:54:6C:5B:D6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f88d055f-2a4e-420d-a5d8-fcf7a627868d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:dc:76:2a:1c:5f:dd:40:94:40:c5:32:d2:35:fc:14:9f:77:
83:91:0b:df:a9:ee:13:5a:24:f0:64:18:2e:7a:85:3c:b2:90:
da:0f:17:ab:f0:fa:a9:bd:6c:0b:9b:a3:73:4f:3d:ad:fd:77:
a2:ce:07:07:b5:6a:3a:4b:4b:a1:8f:e8:2a:74:08:d6:ef:30:
f6:ee:96:67:9a:74:56:dc:73:f2:d0:78:31:a9:a5:77:b7:97:
1a:ca:19:42:7a:ad:cd:16:f3:ea:8b:ae:0f:09:07:9e:11:e7:
30:29:48:02:04:fb:23:7a:e3:91:81:e8:f4:54:a4:15:ed:30:
12:07:5c:fa:80:9d:e7:fa:9a:64:53:6b:7e:71:93:7b:31:41:
69:cf:37:82:bf:88:30:da:4d:b8:af:1d:6a:2a:16:1a:c1:49:
19:0b:91:c8:88:00:43:91:95:09:a6:87:f4:c7:d4:20:b9:77:
ec:65:54:6e:49:eb:16:9f:f6:98:ed:93:46:cf:e1:3d:c5:6a:
ac:95:b3:0d:89:85:4a:be:6d:ef:2a:d6:c8:22:19:8a:08:77:
4e:dc:f3:40:02:d3:80:ca:b6:01:9d:a1:c1:7e:eb:66:51:9d:
47:43:7f:56:47:71:43:27:ba:b4:c0:0c:5c:94:bf:64:11:df:
5f:eb:30:90
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUHpppKwfyFueZg88AJl9Onn07EVYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTE0MDAwMDAwWhcNMjUwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYzNjNWM1Y2FjYWEwMmJiMmI4MGI1MGYyMTc1MzI3NjI4
OTZkOGEyODc2MzE1YjczMDAyOGMxNjU2MmQzY2UwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqwvxUa+u/bE0AarkVAbHtuHaBaC6Tfrw/ZtRDOyKSOPLp
vIBD3sjOeKMEWdOlW+GpVKWsCYt8CumJDBO4n++dcIPbKYTK/ZMvtYjuY89jSL3R
tzZ0xtnoBhiSF8C9F6HLmz4UA9BmhNj7ip/vQpfSetSJyOf5ew/ynae2jyKxPRLA
rO8m53bztFCA7PbHGhGt9nr/FN9NVj15B70RpaMm6+yZRU1i8NUb+4nMDloU6FRP
nKkuS5w9+Ek6qib3/Q8GJWDrWQOZTTuXW2JwTJAdUPu0RzIMFTF02+M7sEdkvmcn
i1EYeQPTmssxojIuxSIHV6wgEIqHueEN276y6mgDAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUTCXLMxv2V8JSo7n0QlNqnVRsW9YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y4OGQwNTVmLTJhNGUtNDIwZC1hNWQ4LWZjZjdhNjI3ODY4ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQuzANBgkqhkiG9w0BAQsFAAOCAQEADNx2Khxf3UCUQMUy0jX8FJ93g5EL
36nuE1ok8GQYLnqFPLKQ2g8Xq/D6qb1sC5ujc089rf13os4HB7VqOktLoY/oKnQI
1u8w9u6WZ5p0Vtxz8tB4Mamld7eXGsoZQnqtzRbz6ouuDwkHnhHnMClIAgT7I3rj
kYHo9FSkFe0wEgdc+oCd5/qaZFNrfnGTezFBac83gr+IMNpNuK8daioWGsFJGQuR
yIgAQ5GVCaaH9MfUILl37GVUbknrFp/2mO2TRs/hPcVqrJWzDYmFSr5t7yrWyCIZ
igh3TtzzQALTgMq2AZ2hwX7rZlGdR0N/VkdxQye6tMAMXJS/ZBHfX+swkA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:21 2025 by rpki-client