Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4692e646-0a85-4f77-8d67-f9e8c77adb5f.roa
File: 4692e646-0a85-4f77-8d67-f9e8c77adb5f.roa (raw, json)
Hash identifier: x5KapP3tncp8VCb5+OSsfAhPAy8FHIZsFTxWpYR1ido=
Subject key identifier: 9F:E1:FC:15:54:F8:69:3E:5D:E3:D9:1D:23:76:A0:6E:16:44:13:AC
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 71BCFD8C0EAA32D2A56913E3F168996EC57B3E35
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4692e646-0a85-4f77-8d67-f9e8c77adb5f.roa
Signing time: Fri 01 May 2026 14:10:49 +0000
ROA not before: Fri 01 May 2026 14:10:49 +0000
ROA not after: Thu 30 Jul 2026 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 May 2026 15:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:bc:fd:8c:0e:aa:32:d2:a5:69:13:e3:f1:68:99:6e:c5:7b:3e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 1 14:10:49 2026 GMT
Not After : Jul 30 23:59:59 2026 GMT
Subject: serialNumber=42ea2a7dbe014f91af832462d2e5d891f5508ea39ae5688ec64c1cc46be1efe5, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d8:de:9e:b9:0a:de:fd:cf:ea:75:9b:53:7b:
f0:4b:69:9e:ff:a8:dd:80:f4:ad:40:50:c8:f9:ab:
85:7c:43:bf:55:5e:2f:48:45:33:79:ab:97:4a:54:
17:4d:fd:d3:df:07:70:81:5e:ec:05:15:4d:d3:dc:
ca:63:09:fc:1c:28:0a:6a:a7:88:1b:17:97:ce:a2:
31:17:32:28:2c:38:dd:57:aa:ff:cf:74:15:8e:38:
37:12:92:37:7d:f9:10:09:0c:7d:58:7a:37:b6:0a:
7a:66:f7:d7:2e:01:90:c4:c8:26:49:c0:11:9a:11:
b3:e8:7a:12:0f:d3:c3:b3:55:9f:ae:80:4b:73:dd:
ef:fa:85:46:6a:64:f0:90:86:70:10:5d:67:ef:cb:
38:f6:d2:5d:8f:a7:7d:46:29:63:dc:b7:ec:d4:2e:
97:17:90:2f:c4:9e:d9:2a:0d:9e:0a:aa:0f:4c:72:
02:98:6e:d5:de:10:59:a1:af:91:f1:d3:4b:90:f7:
2a:a5:46:87:fd:f8:22:aa:7f:8a:96:7b:24:8e:10:
92:0c:5f:18:8d:e8:74:a1:1a:e5:fc:4a:f9:83:8b:
61:42:35:52:9c:6e:1c:78:41:fb:52:57:24:20:df:
12:36:2a:9b:3b:b3:23:3b:cf:16:47:91:91:0c:9f:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E1:FC:15:54:F8:69:3E:5D:E3:D9:1D:23:76:A0:6E:16:44:13:AC
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4692e646-0a85-4f77-8d67-f9e8c77adb5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
20:1e:9c:74:de:27:fc:8a:d9:29:10:f5:01:23:6c:06:35:bb:
7f:93:06:b8:dd:ef:b3:89:2c:1f:4e:f8:78:f4:53:f0:2c:05:
a4:a1:80:77:89:a8:a7:e0:03:e6:fa:c8:07:c4:95:37:71:d6:
00:d7:9b:84:9f:f6:8f:e5:79:7e:88:07:fd:96:bb:c0:3d:10:
62:47:84:a7:d8:e0:ff:8d:56:e0:c1:20:9c:fd:3f:45:5d:a6:
80:dc:0a:94:59:d9:e1:35:4f:5f:b9:75:6f:df:cc:6e:fd:52:
cb:3f:f5:a0:9c:e7:51:2d:d6:db:07:22:0c:e1:58:67:42:47:
6d:26:8b:ec:35:f0:d1:63:89:54:7a:fb:23:f1:ef:c9:f3:f4:
19:b2:a7:77:22:70:8e:9f:a1:9b:3b:a2:a0:45:76:b7:7b:d4:
70:39:19:b0:90:77:f3:55:b1:6f:dd:fb:e4:de:22:ea:19:42:
70:10:a0:d2:a0:ae:87:5d:41:e7:b0:d9:0b:8b:c7:18:98:0e:
72:f3:98:4c:bb:8b:eb:42:10:01:ab:f7:ec:62:7c:71:9a:52:
ae:59:9d:ef:b1:74:73:3c:1d:9a:1b:ba:49:24:34:d0:1c:f8:
3d:38:20:4d:f5:84:c6:55:f3:3f:32:07:ec:b6:56:d3:b0:62:
30:78:16:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 1 17:08:25 2026 by rpki-client