Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c72696b9-6cf0-4116-8e6d-2aff3df14876.roa
File: c72696b9-6cf0-4116-8e6d-2aff3df14876.roa (raw, json)
Hash identifier: eVu6fPM6AbVZWXhKnI2Dc/eiIW3htO0rWNM2Od3vqWY=
Subject key identifier: 79:9E:B0:F6:A6:91:D9:BF:6D:5E:E7:2F:76:B1:76:D8:6D:7E:E8:E4
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 6AF87FE547E7D2E5921ED17C5200E935288BAA9C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c72696b9-6cf0-4116-8e6d-2aff3df14876.roa
Signing time: Tue 11 Aug 2026 23:17:09 +0000
ROA not before: Tue 11 Aug 2026 23:17:09 +0000
ROA not after: Mon 09 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f1:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Aug 2026 00:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f8:7f:e5:47:e7:d2:e5:92:1e:d1:7c:52:00:e9:35:28:8b:aa:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 11 23:17:09 2026 GMT
Not After : Nov 9 23:59:59 2026 GMT
Subject: serialNumber=db40d63d53f38a42af4d07660f5d057c73bf7d8bde9c37be763638d4a26b0f8e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:9c:64:69:05:cc:8d:f8:e6:2e:c0:a8:dc:
68:3a:9f:60:d5:d5:77:f6:05:2c:2b:69:2e:84:58:
09:95:9c:5a:f2:79:d1:56:24:80:7d:b2:fa:3f:c2:
cd:64:58:6a:b0:6a:56:46:7a:57:74:a3:e8:32:1a:
bc:1f:2b:36:3c:84:74:58:3a:13:37:0c:da:24:7a:
78:76:f9:ae:aa:df:9c:5d:b6:a8:c1:49:2f:d0:79:
9b:5e:0f:82:b8:b0:86:bd:0e:77:1d:13:d6:b2:c3:
62:26:cd:9e:7e:03:6b:fb:33:75:77:93:0c:43:6b:
ea:e9:76:2c:e3:f9:98:a6:da:d6:39:27:f8:a3:42:
8d:af:74:3b:0d:7e:49:c2:5f:f3:cd:fd:dd:69:85:
e1:83:f0:e8:76:3f:b7:f1:b0:31:a1:f2:2a:36:c6:
28:1d:10:cf:41:8b:09:e3:2f:22:cb:d7:c4:6c:bd:
25:15:20:0c:92:ed:28:67:84:cc:e8:02:e6:13:24:
b1:ff:30:36:f0:84:20:ed:37:1d:76:cd:96:d7:8c:
de:9f:95:6c:a3:ba:d4:5d:e9:5b:b7:d5:67:c8:07:
21:3e:cb:f9:e0:eb:03:90:22:da:72:8b:a0:59:b6:
3c:39:30:40:19:c7:56:46:d5:bf:36:5b:9c:6f:05:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9E:B0:F6:A6:91:D9:BF:6D:5E:E7:2F:76:B1:76:D8:6D:7E:E8:E4
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c72696b9-6cf0-4116-8e6d-2aff3df14876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f1:10::/48
Signature Algorithm: sha256WithRSAEncryption
81:d5:61:c4:ed:b8:0e:99:8a:2b:92:cf:0b:10:fc:ae:b5:91:
02:c9:6e:33:89:d2:74:0b:90:0e:27:ab:19:eb:63:4f:5c:8f:
bc:a4:63:56:a9:92:0e:43:9b:e4:77:ca:b3:80:aa:97:b6:9e:
4e:a6:e6:42:38:fe:42:cd:3d:05:4d:fe:0d:6e:78:23:67:e3:
96:99:42:24:72:70:1f:79:14:cf:9b:e5:dc:6d:2f:13:55:f6:
a1:19:c1:27:33:d4:bb:99:e0:8a:a9:f4:09:45:7c:01:e1:ae:
94:7a:76:ac:82:57:c9:ca:c3:1e:09:85:68:54:4a:39:65:a4:
2f:71:49:34:c1:b3:64:99:ba:98:68:e0:1e:f0:10:7e:96:30:
f8:2a:3d:37:56:f6:ca:df:f0:5e:2f:52:58:49:99:c6:82:23:
b6:b4:73:54:77:13:53:ac:f0:96:2c:d0:86:53:42:5f:f9:ec:
d2:57:bd:ed:60:8f:2e:30:fe:26:fa:24:a3:49:a5:11:30:3c:
3a:37:8b:5c:2e:71:a2:7c:e7:58:3c:9d:f7:b0:56:4b:74:73:
52:ac:85:41:d6:2b:8d:60:b0:fc:63:17:d4:69:dc:73:b2:fb:
c4:d4:42:7a:29:b1:6e:4c:cd:8c:f8:4b:19:6c:bd:d2:11:c8:
4b:f9:db:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 12 02:49:28 2026 by rpki-client