Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1274c48c-bc97-48b2-9788-337a1a86405c.roa
File: 1274c48c-bc97-48b2-9788-337a1a86405c.roa (raw, json)
Hash identifier: k/TKH1OQrJO4RV3+dN9mDav5tvNNys6stibiYblWF8o=
Subject key identifier: D5:29:13:5B:02:76:33:C6:8B:61:D2:4C:9F:55:E6:16:94:0A:AF:19
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 747F6B1A6B783C8D27A97D7910A43A30D979794C
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1274c48c-bc97-48b2-9788-337a1a86405c.roa
Signing time: Tue 20 May 2025 18:00:23 +0000
ROA not before: Tue 20 May 2025 18:00:23 +0000
ROA not after: Tue 24 Jun 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 04 Jun 2025 22:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:7f:6b:1a:6b:78:3c:8d:27:a9:7d:79:10:a4:3a:30:d9:79:79:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: May 20 18:00:23 2025 GMT
Not After : Jun 24 23:59:59 2025 GMT
Subject: serialNumber=7fa4d2f6b359a0ffb6278709545b7c53743e39096d5853f77992868dbd4c46e9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:80:70:42:6f:52:43:dd:ac:51:cc:3f:61:
c3:d7:06:33:25:c6:e2:8b:e2:74:78:ab:a0:4d:c9:
eb:3c:d0:65:27:48:79:a6:d9:a3:c3:c1:86:40:a8:
5c:54:5f:bf:13:78:51:ca:97:3d:99:00:e6:66:cf:
8b:61:97:a0:f1:95:74:43:0f:e4:ef:6f:5b:ac:cb:
f6:98:bf:90:38:1d:7b:d3:8e:da:1e:d6:dd:7d:11:
ee:1a:e4:b9:34:29:e1:19:cf:c3:ef:16:e9:c4:c2:
cd:2f:a0:13:65:96:79:c5:72:17:b7:44:ad:9b:b0:
1f:07:b3:36:75:29:ac:7d:2a:5f:28:0d:16:57:ac:
db:a6:08:5a:71:82:8a:e8:84:88:ab:9a:e2:13:37:
a7:eb:af:47:9c:d7:78:c7:7f:00:82:cc:d0:77:f0:
dd:62:b4:e4:53:46:78:c9:d1:da:3b:77:4d:55:a3:
6a:2c:29:6a:35:07:4f:68:63:48:ba:7e:91:53:3a:
43:e4:fe:b3:f1:84:ca:17:28:4b:4f:fe:26:ca:6a:
d0:14:32:04:bb:1c:05:5e:bf:0a:05:17:f5:04:1a:
2f:93:94:42:88:dd:ab:5f:c3:e2:bd:91:01:1f:7e:
96:fa:b8:cf:0d:c6:81:27:c0:e8:3f:fd:5d:bc:71:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:13:5B:02:76:33:C6:8B:61:D2:4C:9F:55:E6:16:94:0A:AF:19
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/1274c48c-bc97-48b2-9788-337a1a86405c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.60.0/22
Signature Algorithm: sha256WithRSAEncryption
56:e8:4d:62:47:0c:21:d2:0d:72:0f:09:9e:57:67:33:3e:36:
81:d3:03:1d:ad:72:6b:dc:fd:85:83:b9:2f:d3:46:7b:fa:15:
8f:25:04:4f:8c:42:91:ad:46:13:46:03:9f:06:5e:32:94:3b:
9a:9c:69:9a:1e:13:ea:28:fd:3f:b6:98:b1:ca:42:59:01:df:
6f:42:a2:d9:2b:a3:0c:2b:e6:07:bc:1a:52:f4:46:e2:13:05:
2c:43:1e:86:c9:9f:c3:a4:a2:90:17:1a:33:52:eb:c4:b4:7f:
e0:47:06:2b:74:af:24:03:a6:22:b3:fa:b5:65:e5:37:f7:c8:
cb:21:a1:ef:26:37:65:ef:4e:1f:4c:08:e2:c2:1e:58:ac:21:
c6:a0:19:f0:9b:71:c5:aa:db:56:d1:98:97:d8:bc:64:e3:7e:
dc:cb:48:39:5e:66:b5:c6:1f:6b:e8:11:ae:db:3b:8e:4c:cf:
1a:1a:ea:8d:63:a9:67:1f:0a:2b:8a:b8:c0:bd:14:67:09:40:
5a:f2:e2:c3:ff:f2:41:66:69:ef:70:c7:5e:60:8e:da:06:80:
85:a4:70:79:8f:7d:42:d7:04:b9:2b:4f:68:3e:4c:ee:93:db:
96:92:50:76:1c:49:23:63:04:f6:99:6c:ee:10:8e:a1:2f:eb:
e8:d7:aa:99
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdH9rGmt4PI0nqX15EKQ6MNl5eUwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTIwMTgwMDIzWhcNMjUwNjI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZmE0ZDJmNmIzNTlhMGZmYjYyNzg3MDk1NDViN2M1Mzc0
M2UzOTA5NmQ1ODUzZjc3OTkyODY4ZGJkNGM0NmU5MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCT+YBwQm9SQ92sUcw/YcPXBjMlxuKL4nR4q6BNyes80GUn
SHmm2aPDwYZAqFxUX78TeFHKlz2ZAOZmz4thl6DxlXRDD+Tvb1usy/aYv5A4HXvT
jtoe1t19Ee4a5Lk0KeEZz8PvFunEws0voBNllnnFche3RK2bsB8HszZ1Kax9Kl8o
DRZXrNumCFpxgorohIirmuITN6frr0ec13jHfwCCzNB38N1itORTRnjJ0do7d01V
o2osKWo1B09oY0i6fpFTOkPk/rPxhMoXKEtP/ibKatAUMgS7HAVevwoFF/UEGi+T
lEKI3atfw+K9kQEffpb6uM8NxoEnwOg//V28cfILAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1SkTWwJ2M8aLYdJMn1XmFpQKrxkwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzEyNzRjNDhjLWJjOTctNDhiMi05Nzg4LTMzN2ExYTg2NDA1Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIjYDwwDQYJKoZIhvcNAQELBQADggEBAFboTWJHDCHSDXIPCZ5XZzM+NoHT
Ax2tcmvc/YWDuS/TRnv6FY8lBE+MQpGtRhNGA58GXjKUO5qcaZoeE+oo/T+2mLHK
QlkB329Cotkrowwr5ge8GlL0RuITBSxDHobJn8OkopAXGjNS68S0f+BHBit0ryQD
piKz+rVl5Tf3yMshoe8mN2XvTh9MCOLCHlisIcagGfCbccWq21bRmJfYvGTjftzL
SDleZrXGH2voEa7bO45Mzxoa6o1jqWcfCiuKuMC9FGcJQFry4sP/8kFmae9wx15g
jtoGgIWkcHmPfULXBLkrT2g+TO6T25aSUHYcSSNjBPaZbO4QjqEv6+jXqpk=
-----END CERTIFICATE-----
Generated at Fri Jun 6 05:30:19 2025 by rpki-client