Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/016f09d3-d2ff-4c1b-a72b-01ee36d00322.roa
File: 016f09d3-d2ff-4c1b-a72b-01ee36d00322.roa (raw, json)
Hash identifier: M/mbemUnI2G2vUL7gMRoYoabxfynlmtUW91E64L40P0=
Subject key identifier: 1B:87:AE:1B:42:5A:7D:52:54:0B:71:3A:0B:89:80:62:94:0F:BE:97
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 44072E47CC85281AB78FF176C19CF11436117C8E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/016f09d3-d2ff-4c1b-a72b-01ee36d00322.roa
Signing time: Wed 28 Oct 2026 17:03:38 +0000
ROA not before: Wed 28 Oct 2026 17:03:38 +0000
ROA not after: Tue 26 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:4300::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 Oct 2026 19:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:07:2e:47:cc:85:28:1a:b7:8f:f1:76:c1:9c:f1:14:36:11:7c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 28 17:03:38 2026 GMT
Not After : Jan 26 23:59:59 2027 GMT
Subject: serialNumber=b0ed0cc0a2b80e3668d24fb8f5f2ea6a88013131529ad09ca916b91f4af24b91, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:1d:18:ac:77:74:e8:e5:08:35:e1:c4:e4:
d6:e7:96:6e:da:eb:71:37:f8:80:4d:8f:15:e5:ef:
09:61:7e:e3:2e:91:d2:db:c4:4a:9f:ff:22:0a:9c:
4a:74:3a:63:86:a2:e5:91:db:a7:cd:f8:ba:5d:11:
71:13:b5:bf:c9:0b:39:b7:41:c4:14:f4:c7:c0:67:
53:2b:ea:0e:48:f9:a9:fb:9b:ce:45:6d:c8:2d:04:
de:ac:f8:7b:ab:24:56:f8:02:54:69:a0:be:8c:41:
10:db:f4:91:ac:9f:66:30:42:8d:70:e1:f2:86:57:
34:42:e7:cc:a1:13:c4:21:f5:3d:6d:63:25:5a:6e:
7e:58:fc:cb:ed:f6:41:41:71:f4:6e:f0:b5:65:6b:
29:44:ea:bf:f2:5e:2b:7f:6d:cf:d0:17:af:1a:cf:
b7:fc:2b:04:c4:f4:82:88:3d:a7:1e:0e:a7:5b:72:
16:f5:00:a2:78:7c:5d:70:ee:27:da:cc:37:32:25:
2f:3b:c6:e3:67:36:59:ab:14:d2:52:06:ae:b2:fc:
c0:d9:f4:ea:8c:1e:5a:a0:0a:27:ad:70:05:3a:f1:
a7:4a:b8:a1:b2:3c:d7:8a:07:a1:24:d3:d6:67:f9:
82:f8:6f:b2:21:de:6f:c3:a3:1b:35:20:c5:ed:bb:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:87:AE:1B:42:5A:7D:52:54:0B:71:3A:0B:89:80:62:94:0F:BE:97
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/016f09d3-d2ff-4c1b-a72b-01ee36d00322.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:4300::/40
Signature Algorithm: sha256WithRSAEncryption
8b:0f:7e:a3:ca:e2:41:ed:2f:1d:2c:10:4a:04:a9:30:e6:06:
5e:71:90:97:8e:ef:11:52:e9:00:83:5d:6d:e2:de:57:55:37:
ab:51:58:e9:2b:29:85:ca:1f:76:55:72:92:78:66:b6:1c:57:
a1:c2:7b:21:3d:d9:07:3f:7b:5a:13:6e:0c:c7:e4:35:7f:98:
84:46:1f:c0:65:ad:7e:d0:a2:11:25:5a:2b:fd:5c:1a:a8:18:
7c:96:13:8e:13:9e:d0:d5:bf:78:90:27:ef:6b:e8:95:14:d8:
0f:8d:2d:e0:33:1d:36:7a:be:c6:5d:aa:27:de:ec:03:4d:db:
af:65:f7:f7:c6:f2:f1:33:4c:22:05:e8:1a:d0:72:de:ef:8d:
bc:ad:7a:d3:a5:85:60:e1:ba:a8:c0:5e:b7:70:fb:07:4c:6c:
35:8d:95:53:60:4e:5b:c2:e1:ea:c4:ed:0b:19:f5:65:48:87:
2e:16:be:87:93:be:7e:17:0d:12:97:f1:9b:66:99:e2:8c:94:
90:c0:58:01:c6:d9:b1:15:8c:4f:29:f0:d3:db:8e:c7:71:d6:
cf:50:64:f0:e4:2e:98:02:84:96:50:9b:cb:a5:00:99:00:1d:
0f:5b:dc:a4:51:f4:21:24:c0:51:68:be:44:d7:12:cb:b4:da:
e3:b5:3a:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 1 12:57:43 2026 by rpki-client