Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b574f50-1c0d-49fa-bf34-3085f11462d7.roa
File: 2b574f50-1c0d-49fa-bf34-3085f11462d7.roa (raw, json)
Hash identifier: 563N5PiWRjhbS8PeArzHgQNgAPq0r1ei1EBxtQgxa9o=
Subject key identifier: 4C:52:02:69:63:19:F0:53:82:0C:CC:77:93:C9:69:44:B8:71:11:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4DC6C91EFB0E77D0A0239CFEDAB4565BEDD4004B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b574f50-1c0d-49fa-bf34-3085f11462d7.roa
Signing time: Tue 15 Sep 2026 07:52:52 +0000
ROA not before: Tue 15 Sep 2026 07:52:52 +0000
ROA not after: Mon 14 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 1.178.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Sep 2026 09:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c6:c9:1e:fb:0e:77:d0:a0:23:9c:fe:da:b4:56:5b:ed:d4:00:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 15 07:52:52 2026 GMT
Not After : Dec 14 23:59:59 2026 GMT
Subject: serialNumber=9b276c75c2fe2ae4aa83f31fcd79995d36d5b8b4807ddec6b908b3053c25b508, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:79:dd:37:db:07:15:0a:a8:07:ab:0a:62:
58:f4:52:e9:b2:ef:72:53:f5:d5:32:99:95:7f:de:
dc:f1:0a:24:5c:d8:32:bb:1c:b3:ff:42:47:84:aa:
1a:1c:1e:b8:1e:96:71:3e:0b:4a:61:c2:b3:dd:da:
50:ff:5c:26:ac:b2:48:31:22:5a:83:89:ad:78:ff:
d4:62:ac:42:11:c1:6c:ec:98:d1:22:60:fb:23:de:
37:8f:11:76:9a:05:ff:73:0e:20:eb:28:3f:be:57:
da:75:82:aa:7d:c8:86:46:6f:f9:88:2a:6d:cd:5d:
ba:4a:16:fc:af:79:4b:90:0e:9f:60:20:e1:af:65:
1c:aa:2a:0e:64:f1:33:04:38:66:95:2b:07:c8:82:
11:b6:55:16:d2:36:61:8f:9f:85:c3:5d:b8:a0:10:
ce:72:ed:34:b7:2e:78:65:8f:8d:5a:3f:5d:33:aa:
15:5c:e3:f4:3e:10:da:db:e1:57:11:1f:49:2d:d1:
28:dc:1d:d3:a5:cc:77:5f:d2:c6:d0:ef:fc:8d:b7:
13:50:65:f5:85:c5:ca:cd:82:64:a1:d3:90:18:01:
82:5a:5f:83:b2:ff:6b:81:3d:28:5d:ec:a2:b5:c6:
84:80:49:74:d4:de:d0:e1:6a:c4:10:74:56:3b:7d:
bd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:02:69:63:19:F0:53:82:0C:CC:77:93:C9:69:44:B8:71:11:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2b574f50-1c0d-49fa-bf34-3085f11462d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.86.0/24
Signature Algorithm: sha256WithRSAEncryption
70:bf:a4:a5:8b:7f:2b:44:18:dd:ae:2a:3a:1f:c8:3d:4c:80:
68:9f:ed:c0:f5:d9:c5:7a:1f:a6:16:7a:c9:8b:80:a4:32:bd:
30:f8:ae:01:a8:e0:d1:dc:71:30:4a:35:65:10:13:5d:81:79:
02:97:77:45:46:a9:5c:30:07:35:d7:de:f2:ba:e7:e9:71:1c:
d5:74:e8:5b:8f:1b:87:ad:ea:ab:d7:a4:65:73:e9:20:8d:c8:
b9:d7:dc:66:fb:00:8a:2b:93:35:61:f7:01:3a:6e:05:61:ca:
2d:af:d4:86:c0:54:26:c1:9b:3e:a7:d4:2c:22:70:0c:14:64:
06:c8:cd:21:d1:00:2b:70:23:26:ef:9b:87:58:12:08:23:a6:
ae:7c:ab:60:42:bd:c5:69:84:07:e1:2e:16:2e:7b:36:7f:d6:
fa:e8:94:a4:0b:14:21:71:b8:53:69:22:e8:42:ca:f9:d7:03:
f5:27:a5:60:c1:9b:d3:e1:47:f6:80:10:7c:1f:1d:8e:cb:d1:
a5:1f:59:1e:b6:f5:ee:34:98:83:d9:d5:16:2b:58:2c:49:d1:
9e:32:47:7c:6f:41:86:95:32:32:1e:39:9b:a0:c8:f6:33:fb:
9f:59:f6:d8:b1:e6:d3:33:4e:62:4b:10:5a:9f:d2:6c:54:18:
59:fb:65:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:53:50 2026 by rpki-client