Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c0b0acd-66b0-4e15-89bb-02bb8c5b6e22.roa
File: 5c0b0acd-66b0-4e15-89bb-02bb8c5b6e22.roa (raw, json)
Hash identifier: iGWt5ZO/1EI+r2G7B3odnEzWHj/LDDB0n/mIsl9ERcw=
Subject key identifier: 49:C5:8C:77:3D:DC:9A:29:4A:13:46:EC:EC:94:CA:1D:D1:EE:0F:A2
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 20373409BFAEE6F2A468D2FAB607595E11129F4E
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c0b0acd-66b0-4e15-89bb-02bb8c5b6e22.roa
Signing time: Mon 03 Nov 2025 03:41:23 +0000
ROA not before: Mon 03 Nov 2025 03:41:23 +0000
ROA not after: Mon 08 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Nov 2025 04:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:37:34:09:bf:ae:e6:f2:a4:68:d2:fa:b6:07:59:5e:11:12:9f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Nov 3 03:41:23 2025 GMT
Not After : Dec 8 23:59:59 2025 GMT
Subject: serialNumber=f0dfa6e2ba070bb4b8a3f3486d6121ce62ec907191222b589c9ffccebb2ae0a3, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ba:ab:e9:3c:b7:42:5a:ee:22:6c:a4:90:60:
b1:a4:bb:50:80:e8:36:3a:42:77:99:94:50:c7:09:
62:e4:2a:b7:cc:83:17:20:27:5e:e5:cc:4f:fe:e7:
b2:ec:ac:8c:48:4c:4b:e4:9a:af:fc:f1:4f:aa:2b:
b7:7e:20:87:29:c7:67:db:5d:c9:c0:25:33:16:34:
fd:06:1a:02:90:a5:2d:29:dc:79:51:08:30:9a:27:
54:cf:40:fc:b8:85:cb:9d:53:1e:86:03:85:48:57:
77:8d:29:0a:1d:90:83:f3:14:22:a3:9a:05:b4:5a:
6b:d8:da:3f:34:10:97:3a:74:73:74:6a:ec:27:4f:
2d:bc:60:bf:27:51:ec:8d:13:aa:78:2d:ec:97:3c:
7c:a6:45:82:54:26:40:c2:f1:7d:5d:d8:31:0b:fb:
d6:5f:da:c1:a8:18:4e:f2:8e:0c:9a:6f:9a:16:11:
4e:73:f0:4a:38:81:b5:d2:8e:69:40:97:8d:59:1d:
a3:24:78:da:18:f8:ce:0d:8c:19:98:1e:43:9e:cd:
6c:86:10:68:26:79:b5:4c:83:c4:05:41:1b:8e:e3:
f4:e2:ac:37:0f:e6:1a:75:74:c6:07:1a:4e:72:12:
2d:7b:d7:2c:b5:b2:f2:87:c0:52:12:79:02:66:4a:
ae:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C5:8C:77:3D:DC:9A:29:4A:13:46:EC:EC:94:CA:1D:D1:EE:0F:A2
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5c0b0acd-66b0-4e15-89bb-02bb8c5b6e22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
2a:a1:02:90:c1:b5:8b:fc:c6:be:47:a9:2e:25:8a:17:b8:38:
85:44:5b:10:5c:5e:2f:df:fa:ea:c3:fb:8d:c6:e4:44:10:e3:
26:6a:1e:a9:ee:cc:3c:49:4d:30:f9:57:1d:a1:2f:12:d7:6f:
fb:49:0d:d4:ce:df:86:b9:8e:ef:9d:5b:48:5f:ae:e5:a9:fd:
3e:e5:40:7c:75:4e:4d:b7:cb:b9:3a:8d:03:95:ad:34:f6:43:
bb:8d:51:c9:07:15:01:97:59:8b:9e:0b:42:11:36:08:a6:6e:
e1:a8:07:fd:47:e0:67:6c:af:7b:83:c9:59:94:bc:cc:64:32:
d4:cd:7d:fa:a5:72:fd:4d:0b:21:0f:a7:b0:14:d5:63:16:03:
87:43:cc:86:3a:de:1e:55:83:0a:08:ba:da:8e:44:dc:3f:93:
50:21:ba:1c:8b:26:67:65:3a:44:76:58:4a:fe:2d:86:d0:66:
7a:81:70:9d:68:38:5d:56:5b:3a:c8:b1:37:09:c0:14:3f:5c:
b9:b3:c0:68:d4:67:50:47:f7:38:30:ca:61:a9:b6:6e:a6:d4:
31:d6:3e:24:16:de:10:fa:35:8c:98:e5:d0:4c:14:d6:17:f8:
fd:e8:bb:fd:1e:8b:7e:fb:d5:50:ae:80:86:6a:54:0e:41:0a:
56:c0:2d:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 3 11:18:30 2025 by rpki-client