Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/938f6c1c-a31a-4ef4-9479-94ea4f9bf9c9.roa
File: 938f6c1c-a31a-4ef4-9479-94ea4f9bf9c9.roa (raw, json)
Hash identifier: TniZ5NdI7eQ1vhWKP7r1GCSWSjD04d/JekqwK0/1KwU=
Subject key identifier: 08:73:9E:89:A6:F0:CE:45:68:0C:E0:E0:88:5F:FF:8D:02:3D:51:DE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 15CAEC01A8836EB42CAD835A5365DA3A227F39D7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/938f6c1c-a31a-4ef4-9479-94ea4f9bf9c9.roa
Signing time: Fri 31 Jan 2025 00:00:00 +0000
ROA not before: Fri 31 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Mar 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.194.0.0/15 maxlen: 15
Validation: Failed, certificate revoked on Fri 31 Jan 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:ca:ec:01:a8:83:6e:b4:2c:ad:83:5a:53:65:da:3a:22:7f:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 31 00:00:00 2025 GMT
Not After : Mar 7 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:a3:52:5b:c9:c5:3d:c0:8b:ee:4f:6b:56:
35:e5:b6:65:12:7c:d9:9d:ed:72:17:7a:0b:66:5b:
61:7d:48:eb:04:5b:c6:c6:f4:95:44:bd:d3:f2:25:
94:a5:11:65:75:d3:0d:85:85:49:b6:90:bc:97:02:
94:ba:ce:33:9f:1c:09:2a:07:ea:e2:41:e6:f2:e4:
3b:31:a6:a6:ce:68:79:b1:0d:7e:c0:43:12:80:6f:
37:4d:b4:b4:35:f8:33:76:46:92:18:5f:e4:89:27:
78:38:78:22:99:4b:49:1a:65:21:c0:59:ec:81:80:
1a:98:cd:db:16:0e:9d:e5:00:22:24:07:03:d4:8e:
dd:1c:30:fc:6b:19:cc:a4:ad:56:e5:d1:28:69:13:
c6:c5:53:43:32:6d:b8:98:43:a5:c7:17:2e:21:61:
ed:f4:06:f0:bb:c9:1e:64:c5:02:9c:16:e1:f2:d5:
ae:68:6e:ba:e1:ef:2f:55:38:d9:8c:0e:9d:c6:74:
81:c7:8a:1e:2c:b2:75:ef:16:34:94:85:00:04:e1:
9c:62:99:2f:a3:cb:44:0f:28:20:89:f0:2a:d4:28:
38:05:61:8a:73:fd:10:79:82:28:75:37:61:1d:2b:
4b:9e:c9:5b:6e:5a:6e:c1:40:c1:71:4e:c7:43:36:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:73:9E:89:A6:F0:CE:45:68:0C:E0:E0:88:5F:FF:8D:02:3D:51:DE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/938f6c1c-a31a-4ef4-9479-94ea4f9bf9c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.194.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9c:e8:be:62:91:ef:e8:22:b9:d6:db:68:6f:e5:26:85:9f:30:
e5:4c:16:bd:65:9c:6c:cd:76:ff:1e:b8:c2:71:50:b4:c5:31:
84:77:7e:88:f3:28:cd:33:f9:1f:66:ee:3b:e0:13:40:1e:6d:
15:60:cd:cf:2e:35:be:f9:1f:11:9e:73:9c:4b:9d:ca:98:42:
5a:da:be:46:96:67:38:42:bb:55:dd:33:ba:65:2b:fc:c7:e9:
e4:7b:bc:89:6a:57:93:29:be:db:48:60:6c:71:8e:0e:68:53:
af:81:0e:5e:d1:ad:91:1b:31:65:fe:d1:82:39:62:98:b4:6d:
ee:01:19:18:12:2a:6f:3e:ff:b4:fe:a4:f5:bf:49:e6:a4:15:
1f:7f:60:78:6b:b1:69:e2:09:58:ea:a3:80:26:08:1a:3b:86:
60:8d:54:b6:f4:23:41:7c:4a:05:fb:d0:57:1b:58:bb:4f:9f:
7c:09:62:c0:8c:06:f9:f5:4e:f0:5d:5e:af:d9:43:bc:88:c7:
b9:f7:6b:1c:7b:e3:5e:8d:a1:13:71:ba:43:a2:94:7e:bd:70:
f0:63:16:69:72:00:24:4d:95:a6:c3:41:dd:93:5f:cd:f3:ca:
ba:2a:49:cd:2f:93:4b:66:fd:7a:88:8a:c0:e1:fe:7c:86:0c:
75:1a:f4:45
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUFcrsAaiDbrQsrYNaU2XaOiJ/OdcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwMTMxMDAwMDAwWhcNMjUwMzA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMDU5MDg2NDRjY2FhM2NmY2FiYzIyYjZjMjQ0Y2E3MWNm
ZjgyYzEzZWQ0YTc3NjQ5YWU1MTBkYTA2YzMzZmY5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCro6NSW8nFPcCL7k9rVjXltmUSfNmd7XIXegtmW2F9SOsE
W8bG9JVEvdPyJZSlEWV10w2FhUm2kLyXApS6zjOfHAkqB+riQeby5DsxpqbOaHmx
DX7AQxKAbzdNtLQ1+DN2RpIYX+SJJ3g4eCKZS0kaZSHAWeyBgBqYzdsWDp3lACIk
BwPUjt0cMPxrGcykrVbl0ShpE8bFU0MybbiYQ6XHFy4hYe30BvC7yR5kxQKcFuHy
1a5obrrh7y9VONmMDp3GdIHHih4ssnXvFjSUhQAE4ZximS+jy0QPKCCJ8CrUKDgF
YYpz/RB5gih1N2EdK0ueyVtuWm7BQMFxTsdDNh8fAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUCHOeiabwzkVoDODgiF//jQI9Ud4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzkzOGY2YzFjLWEzMWEtNGVmNC05NDc5LTk0ZWE0ZjliZjljOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwE2wjANBgkqhkiG9w0BAQsFAAOCAQEAnOi+YpHv6CK51ttob+UmhZ8w5UwW
vWWcbM12/x64wnFQtMUxhHd+iPMozTP5H2buO+ATQB5tFWDNzy41vvkfEZ5znEud
yphCWtq+RpZnOEK7Vd0zumUr/Mfp5Hu8iWpXkym+20hgbHGODmhTr4EOXtGtkRsx
Zf7RgjlimLRt7gEZGBIqbz7/tP6k9b9J5qQVH39geGuxaeIJWOqjgCYIGjuGYI1U
tvQjQXxKBfvQVxtYu0+ffAliwIwG+fVO8F1er9lDvIjHufdrHHvjXo2hE3G6Q6KU
fr1w8GMWaXIAJE2VpsNB3ZNfzfPKuipJzS+TS2b9eoiKwOH+fIYMdRr0RQ==
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:53:32 2025 by rpki-client