Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/27fd3370-8ae4-4c9a-b32b-618216e2a0d4.roa
File: 27fd3370-8ae4-4c9a-b32b-618216e2a0d4.roa (raw, json)
Hash identifier: 5c422gMnBWamzQaalwrW40cJVujDrgjltAk0A3A9McU=
Subject key identifier: 42:64:AD:6E:5A:AF:3D:CC:48:14:9C:60:FD:F0:21:6C:11:C5:D4:EC
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 2EB50B6EB40A0CEE6EB7C67E57AA75A12E1C2D1D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/27fd3370-8ae4-4c9a-b32b-618216e2a0d4.roa
Signing time: Fri 17 Jul 2026 05:10:38 +0000
ROA not before: Fri 17 Jul 2026 05:10:38 +0000
ROA not after: Thu 15 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 17 Jul 2026 06:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b5:0b:6e:b4:0a:0c:ee:6e:b7:c6:7e:57:aa:75:a1:2e:1c:2d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jul 17 05:10:38 2026 GMT
Not After : Oct 15 23:59:59 2026 GMT
Subject: serialNumber=463abf7bed50e25216254c5b00db87858fea706a48a538937eccbef4b3d96851, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:7f:51:5a:f1:68:6c:31:21:33:4b:5b:ec:
6a:d1:b7:fb:7e:a0:28:88:a8:31:ab:20:a1:b7:63:
11:c5:02:01:4f:4e:4d:59:54:79:36:da:4f:1b:67:
6d:be:92:26:26:cc:1e:f3:1c:0d:ef:c7:bc:2b:ce:
60:9e:78:b4:43:7d:43:89:21:5c:7d:8c:2b:aa:95:
3d:d8:59:bd:c0:84:2a:e1:df:56:ec:19:c8:7d:00:
e7:39:a1:49:db:84:af:cd:cf:d1:80:79:2b:db:24:
22:25:9b:89:f5:93:57:9d:62:13:cd:e8:00:f4:ac:
1e:c2:dd:5d:a7:5f:ac:8d:e0:7e:50:25:5d:95:f3:
02:03:1f:0b:ed:d3:1d:24:24:d7:52:85:de:bb:6b:
c6:fd:e3:ab:d1:e6:5e:95:d7:bb:27:ff:b8:0a:ca:
4b:9e:c8:58:e8:ae:66:26:a5:71:34:5b:d4:c3:58:
71:37:59:c0:a6:ca:d2:0d:7a:90:19:df:fa:8f:8e:
69:12:f2:b7:4c:d3:4d:a5:5e:12:5f:e1:6f:ea:bf:
b1:05:24:1e:ea:90:15:2f:21:0a:d2:69:66:06:96:
49:02:9e:f1:e7:98:d3:45:97:3a:1a:50:8e:0c:9c:
bd:5e:8c:5a:a6:d1:52:6f:25:34:d0:64:7f:25:41:
7f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:64:AD:6E:5A:AF:3D:CC:48:14:9C:60:FD:F0:21:6C:11:C5:D4:EC
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/27fd3370-8ae4-4c9a-b32b-618216e2a0d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
96:04:65:68:6b:6d:0e:bb:81:c1:a6:50:12:39:32:c5:80:c1:
1b:9c:fa:50:ed:28:40:35:15:8a:ed:30:27:a8:75:64:c8:2f:
85:8e:cd:9b:b4:0b:1e:2f:f6:33:bb:0e:74:1f:98:f7:5b:46:
c6:22:cd:a6:12:26:ac:33:cd:73:69:3b:4a:74:a3:f4:d2:cd:
35:92:3a:06:89:19:26:37:d6:2f:0d:69:f8:3d:13:69:6e:0c:
2a:cc:50:c5:81:bb:69:ea:63:19:dd:ca:49:e5:dd:c6:b3:1c:
77:56:7c:73:1d:e0:cb:de:c0:e8:0c:9a:2c:31:02:70:89:ec:
5e:a7:49:af:5f:1b:0a:4c:06:27:5b:5e:dc:c8:07:d3:0c:d8:
e4:07:66:0b:b0:55:b6:a6:59:8d:65:c8:dc:7c:b8:33:ce:9a:
ac:9f:9d:dd:82:40:83:aa:a3:f5:4d:6e:4f:2e:3e:50:b0:db:
d7:11:53:0f:90:0b:4c:57:15:37:a9:33:09:1e:6f:94:44:98:
eb:ea:a6:d5:5a:1d:58:f8:53:50:3d:fa:30:17:91:da:ff:1e:
a8:09:f6:23:20:5e:52:87:d7:58:1e:39:0f:48:16:29:93:0b:
2a:c5:04:d2:9d:db:e1:16:63:e6:9a:da:7b:30:4b:9f:41:82:
c1:cb:3d:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 17 07:32:59 2026 by rpki-client