Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbefe411-d6b0-4a3c-b0c9-b414170fb39b.roa
File: bbefe411-d6b0-4a3c-b0c9-b414170fb39b.roa (raw, json)
Hash identifier: FkJeksbdJblw2l9Uo08bLAWUQ2gARyxgEVpM6FoO7sU=
Subject key identifier: 94:12:F5:00:7D:47:48:7F:6D:4D:53:20:8E:9C:E0:DE:13:A3:2F:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 298469F1D5C0312E8CFF0C17CBFB35EDCA6D5965
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbefe411-d6b0-4a3c-b0c9-b414170fb39b.roa
Signing time: Sun 15 Feb 2026 00:10:07 +0000
ROA not before: Sun 15 Feb 2026 00:10:07 +0000
ROA not after: Sat 16 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.19.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Feb 2026 21:37:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:84:69:f1:d5:c0:31:2e:8c:ff:0c:17:cb:fb:35:ed:ca:6d:59:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 15 00:10:07 2026 GMT
Not After : May 16 23:59:59 2026 GMT
Subject: serialNumber=f720aed3b701762cf3331255a5ed02af6d2bc48e65a2730e4f6992c2aad95e98, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:cf:22:2c:f5:cb:81:ad:0d:ed:cf:d9:be:
71:4a:ad:12:2f:b5:4a:e9:4f:ed:52:73:04:b2:11:
06:e8:4a:50:9a:e0:79:bd:30:df:21:3b:4b:c4:84:
42:ad:7e:e6:78:33:a0:40:69:10:d0:f7:31:4e:0a:
93:3e:49:e3:e7:b6:d7:2c:44:a7:57:bd:d3:85:c4:
51:27:3c:b2:a0:0f:4c:bd:b0:3a:43:e5:c5:69:0e:
4e:1c:35:5c:ff:87:2a:f0:28:61:2d:50:64:9b:b2:
40:d2:4f:12:b6:10:de:a1:8f:59:00:78:55:23:7f:
c8:2c:a1:80:c7:70:9a:bd:0e:9a:6e:f5:3e:0c:20:
f7:d2:39:8d:1f:3a:58:6f:2e:96:06:0f:a4:69:a5:
73:b8:d3:7c:af:58:73:51:e6:13:5c:da:42:6a:dd:
85:a5:30:97:fd:c8:70:49:3b:6e:ec:50:86:e0:a4:
ae:11:89:85:c0:3a:8c:e0:0d:1a:60:f0:1a:58:51:
ff:ca:ea:21:8a:f7:ff:da:3c:69:93:ec:6f:67:57:
07:d4:aa:ca:80:a3:6e:d8:51:e8:2b:c4:e6:c6:8a:
f3:e7:9b:eb:82:5a:fc:8c:2f:39:24:27:e3:bb:4d:
49:aa:ea:f1:af:3d:ad:ac:86:5f:66:0a:66:8d:ca:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:12:F5:00:7D:47:48:7F:6D:4D:53:20:8E:9C:E0:DE:13:A3:2F:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbefe411-d6b0-4a3c-b0c9-b414170fb39b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:6b:c0:5c:97:65:5e:23:2b:22:f6:ae:b9:f2:dd:c3:71:24:
47:a7:88:a2:e1:de:f3:aa:28:b8:99:78:9c:ba:74:14:82:65:
b8:37:34:da:60:aa:0b:6a:4f:e1:c5:d6:1e:ac:c3:18:e8:86:
67:2f:d1:f7:1d:45:38:41:b2:51:97:c4:9a:6b:af:4b:e9:f9:
e5:22:b3:bc:40:da:96:cd:bf:20:6c:fa:97:f1:9e:6a:45:b3:
bc:de:f2:19:f3:96:0b:42:08:1d:c4:c9:d0:d5:57:df:b0:ad:
39:0d:6c:de:3d:ee:9d:3c:cb:08:74:61:6f:a7:70:86:37:9f:
a8:36:f5:9e:6c:c4:6a:99:cd:ba:de:cc:3c:3a:d3:5e:47:5d:
d8:47:72:6f:b9:16:91:2e:ad:d6:02:a6:7e:31:fa:02:22:f1:
7d:cb:eb:83:5f:15:6f:f2:7b:da:a4:af:58:35:31:a6:7a:e9:
13:bc:71:49:30:1c:34:23:ba:05:df:e0:b8:cd:b2:a9:4f:a7:
cf:95:69:3a:47:8b:5f:1f:76:8b:fb:33:cd:d7:65:92:21:fd:
56:c7:20:f7:03:26:5f:e7:23:00:66:f3:68:a0:04:1d:f8:e5:
f3:36:b5:fc:c7:d5:46:78:08:dd:50:0f:05:8f:98:94:66:3d:
76:aa:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 10:11:22 2026 by rpki-client