Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9636aa82-d0d4-4b45-918e-5973b533cb33.roa
File: 9636aa82-d0d4-4b45-918e-5973b533cb33.roa (raw, json)
Hash identifier: 9BsInOV7RXSKJrWuFh7eRihA2RRXMX5tBDiET0V2FrQ=
Subject key identifier: 70:A9:A5:2B:C2:24:99:6A:39:05:B0:3B:BD:A0:94:88:E2:3B:13:1F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FDFC471DD7646846DA0A4A581DD45F2AE40BD09
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9636aa82-d0d4-4b45-918e-5973b533cb33.roa
Signing time: Tue 10 Feb 2026 00:31:42 +0000
ROA not before: Tue 10 Feb 2026 00:31:42 +0000
ROA not after: Mon 11 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 32.192.0.0/12 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Feb 2026 21:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:df:c4:71:dd:76:46:84:6d:a0:a4:a5:81:dd:45:f2:ae:40:bd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 10 00:31:42 2026 GMT
Not After : May 11 23:59:59 2026 GMT
Subject: serialNumber=216ef95595db696b16d9fa453f6910c43f752586d478ebb56387db73ec807074, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f5:f2:86:34:23:90:94:b6:89:30:7b:29:39:
b2:2b:40:01:79:ba:99:c3:18:0b:17:f8:8b:5e:69:
e6:f1:1b:cc:9d:da:cf:eb:ab:8e:e6:77:e9:70:0c:
fd:3c:86:76:23:8e:2e:c8:52:cc:02:a9:4f:9f:d2:
f1:94:6f:0f:b0:79:1e:c2:92:a7:8d:7d:a8:10:d1:
3a:32:0a:83:80:90:89:33:94:a9:4f:0f:09:80:1e:
8d:90:d4:08:fc:d6:b5:af:62:32:0a:4a:0f:9c:fa:
39:69:6b:a2:a0:a0:b6:8c:da:3d:08:7f:48:32:b6:
72:c0:1d:24:7c:2c:52:43:74:87:a2:e8:33:23:f8:
bf:63:f8:44:28:4e:96:bf:06:72:2e:ed:7c:a0:46:
f8:8e:8b:1d:30:e0:9e:ec:7d:fb:86:85:f6:ea:c5:
b5:86:3c:1f:38:4f:53:90:f1:7e:36:01:62:0e:ea:
b3:7f:7c:57:3f:50:13:7f:c0:b8:4f:23:c2:7e:9b:
8b:08:96:f9:5f:bb:7e:3d:6e:6a:f9:ca:11:53:49:
39:49:5f:23:80:49:2b:8e:93:d2:4d:1d:b0:1a:9e:
99:7b:9a:d0:26:96:a7:64:6a:e3:51:86:dc:9e:df:
3d:e1:90:c7:c6:51:93:38:e2:48:cc:44:9c:8f:2f:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A9:A5:2B:C2:24:99:6A:39:05:B0:3B:BD:A0:94:88:E2:3B:13:1F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9636aa82-d0d4-4b45-918e-5973b533cb33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
32.192.0.0/12
Signature Algorithm: sha256WithRSAEncryption
4e:b6:d6:31:4c:a5:05:00:8f:4e:fb:4d:85:2a:a8:15:b9:97:
67:35:15:84:db:e6:16:b9:54:a5:5c:9e:a1:14:62:89:a2:54:
8a:65:eb:a3:0b:36:91:0c:62:02:a2:5e:a5:a8:4b:35:e4:91:
bb:72:37:71:51:36:7e:eb:35:01:8c:c7:f7:95:f7:9d:ff:89:
5f:a3:dd:91:94:8c:47:01:fb:06:0e:cf:fb:93:3b:dd:e8:1b:
b1:11:d1:2a:07:d9:27:00:15:f6:5a:ec:5a:7a:5e:a7:4b:47:
4c:5a:0d:6d:d3:e4:6c:37:f9:ee:55:6e:35:7e:58:69:a0:0c:
df:46:5f:ba:72:ad:2c:ac:66:dd:63:c4:a6:d1:8c:d7:ce:2c:
19:2a:7e:bf:90:45:1e:07:1e:c9:39:75:bb:f8:14:96:27:ff:
0d:1e:ae:6b:09:34:8f:cc:f2:c4:94:d4:aa:ca:2e:02:bf:9a:
d0:39:d5:b7:d2:14:b6:e9:4a:8d:9f:61:a9:49:d8:af:b4:d0:
1b:13:34:16:66:25:f6:6b:e9:6b:a3:0c:64:b0:e6:be:85:70:
1c:be:f5:b9:66:96:e1:21:9b:bc:19:e8:6e:10:c0:7e:6d:68:
fc:67:0e:a3:71:60:23:e7:c5:97:a6:06:9e:cb:a7:9e:47:cb:
c8:f2:f2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:07:16 2026 by rpki-client