Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e6c76cf-418f-4505-b031-4fd0f3eff2dc.roa
File: 4e6c76cf-418f-4505-b031-4fd0f3eff2dc.roa (raw, json)
Hash identifier: +EBTtrgbXYT87e2cGOued8viVkGqK5kQxN7PqYc8Mag=
Subject key identifier: E6:8F:F3:D0:A0:0D:7A:D9:84:BD:B4:C3:C0:94:D7:B6:7C:37:F9:56
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 48DB7430F32F70EE981A5DD773F3038BF6794313
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e6c76cf-418f-4505-b031-4fd0f3eff2dc.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.226.0.0/15 maxlen: 15
Validation: Failed, certificate revoked on Fri 31 Jan 2025 20:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:db:74:30:f3:2f:70:ee:98:1a:5d:d7:73:f3:03:8b:f6:79:43:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:52:b1:6d:c2:88:11:a8:0d:f6:93:9e:fd:
89:62:d4:9a:c4:e2:1d:0e:4c:bd:f9:9f:4f:6b:88:
c9:3a:96:cb:4f:8a:b6:49:97:ec:46:06:08:06:f8:
2f:dd:c1:f6:7e:70:74:62:70:87:3b:42:0a:03:6c:
46:c0:68:d9:62:aa:1f:b4:e6:f7:1e:aa:71:b8:f9:
25:09:1c:91:60:80:c5:59:2f:44:98:17:27:2a:45:
11:6f:a7:b7:fd:d3:e2:cd:ed:09:8b:25:22:1c:54:
ab:b8:f5:45:19:a1:29:51:eb:0f:75:c9:7e:bf:2a:
78:c8:9f:5a:a0:04:a7:ab:37:29:af:74:e6:e9:a5:
7a:2d:bf:06:9b:4a:07:81:9c:bf:bd:18:6c:a0:96:
d2:51:00:8a:ef:d8:0d:4c:53:88:b0:98:01:44:b2:
e3:87:1e:f0:fb:71:5a:b8:8c:82:d3:eb:46:d1:18:
0b:7a:3b:31:8e:44:08:e9:78:f1:aa:16:ef:07:77:
00:9a:7d:67:b0:02:4f:ef:96:e7:7f:ec:41:60:0f:
35:09:35:2d:4f:f5:d5:1f:97:f8:66:c1:0b:0a:ca:
7e:81:76:c1:b2:3e:8b:34:fa:d3:6e:ed:65:d8:38:
cd:89:a8:2f:cd:1b:c7:fd:a0:f8:fd:61:e6:0d:aa:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8F:F3:D0:A0:0D:7A:D9:84:BD:B4:C3:C0:94:D7:B6:7C:37:F9:56
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e6c76cf-418f-4505-b031-4fd0f3eff2dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.226.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7a:8f:35:00:ff:d4:7e:76:05:7a:ec:20:35:c6:d2:99:b3:af:
9d:2a:6e:f8:6d:40:b0:2c:68:00:32:d4:65:13:ef:35:b5:8c:
a9:61:42:04:f8:3d:45:2c:97:db:94:25:e6:08:9f:8e:84:24:
34:1b:74:0d:98:5a:d3:6a:d0:37:d6:a5:fd:7b:fb:2c:e8:19:
76:38:24:c3:56:94:bd:c8:d9:e7:83:d1:fb:0c:e6:b7:c5:79:
c8:02:77:bd:c4:1f:e5:7a:c2:73:35:f4:6d:b3:8e:49:a1:cd:
5e:06:21:ba:db:62:4c:75:9e:07:e5:53:df:46:a0:1b:56:70:
2c:4a:7a:da:61:3b:59:4f:38:ab:7b:9e:31:5d:32:38:8c:b2:
04:50:f2:d4:54:47:94:ef:c4:d6:83:9c:a6:a3:51:8d:26:e8:
46:c2:d7:48:ee:8f:c6:bb:73:96:35:6b:01:dc:ed:97:d9:50:
af:d3:86:76:ef:7b:c2:d6:aa:22:61:41:53:ab:47:a5:4d:1f:
de:70:b9:84:4a:1e:9e:cb:fe:2c:93:b0:91:d2:9b:22:ce:ae:
1c:3f:0d:b6:4e:fd:46:7e:0b:ed:6d:7f:8f:5f:73:38:5b:a1:
b5:2d:54:92:f5:fc:4c:a9:fb:56:30:3c:1a:67:62:ed:bc:98:
75:42:0c:b0
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUSNt0MPMvcO6YGl3Xc/MDi/Z5QxMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ODU0OGNmMDI2YzQwYmE5ZWY2NWVmZWM4OGE4ZjFjYjMw
ZWFkYThhYjRhYjdhNWY1Nzg1M2Q3NmIwMzJiMGM0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3hlKxbcKIEagN9pOe/Yli1JrE4h0OTL35n09riMk6lstP
irZJl+xGBggG+C/dwfZ+cHRicIc7QgoDbEbAaNliqh+05vceqnG4+SUJHJFggMVZ
L0SYFycqRRFvp7f90+LN7QmLJSIcVKu49UUZoSlR6w91yX6/KnjIn1qgBKerNymv
dObppXotvwabSgeBnL+9GGygltJRAIrv2A1MU4iwmAFEsuOHHvD7cVq4jILT60bR
GAt6OzGORAjpePGqFu8HdwCafWewAk/vlud/7EFgDzUJNS1P9dUfl/hmwQsKyn6B
dsGyPos0+tNu7WXYOM2JqC/NG8f9oPj9YeYNql7ZAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU5o/z0KANetmEvbTDwJTXtnw3+VYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzRlNmM3NmNmLTQxOGYtNDUwNS1iMDMxLTRmZDBmM2VmZjJkYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwE24jANBgkqhkiG9w0BAQsFAAOCAQEAeo81AP/UfnYFeuwgNcbSmbOvnSpu
+G1AsCxoADLUZRPvNbWMqWFCBPg9RSyX25Ql5gifjoQkNBt0DZha02rQN9al/Xv7
LOgZdjgkw1aUvcjZ54PR+wzmt8V5yAJ3vcQf5XrCczX0bbOOSaHNXgYhuttiTHWe
B+VT30agG1ZwLEp62mE7WU84q3ueMV0yOIyyBFDy1FRHlO/E1oOcpqNRjSboRsLX
SO6PxrtzljVrAdztl9lQr9OGdu97wtaqImFBU6tHpU0f3nC5hEoensv+LJOwkdKb
Is6uHD8Ntk79Rn4L7W1/j19zOFuhtS1UkvX8TKn7VjA8Gmdi7byYdUIMsA==
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:44:46 2025 by rpki-client