Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/615d3d3b-7f5f-45a5-9039-1574ce68916e.roa
File:                     615d3d3b-7f5f-45a5-9039-1574ce68916e.roa (raw, json)
Hash identifier:          YMxIczHG+1xMiOpESham47hXOyoGqKsG13g8npf//vA=
Subject key identifier:   0E:40:CD:C1:7A:C3:24:85:4E:65:6B:DB:40:53:0E:7B:97:01:79:C4
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5EFFB5A48B0C584EA0DBEAD9B291BE6983D4A020
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/615d3d3b-7f5f-45a5-9039-1574ce68916e.roa
Signing time:             Sat 31 Oct 2026 20:47:22 +0000
ROA not before:           Sat 31 Oct 2026 20:47:22 +0000
ROA not after:            Fri 29 Jan 2027 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:d00::/40 maxlen: 48
Validation:               Failed, certificate revoked on Sat 31 Oct 2026 22:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ff:b5:a4:8b:0c:58:4e:a0:db:ea:d9:b2:91:be:69:83:d4:a0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 31 20:47:22 2026 GMT
            Not After : Jan 29 23:59:59 2027 GMT
        Subject: serialNumber=1f4482dbd8819f8078eaee26c00b10215573e7b9928155b48d784c877bed3ead, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:41:7c:da:09:63:e2:c5:c9:a7:96:b0:71:f0:
                    3f:04:18:c7:39:f7:3c:74:06:5d:c0:21:bc:05:7c:
                    5f:8f:e7:f7:b2:74:b4:ef:e9:95:48:7c:ed:3f:6b:
                    3e:01:e1:09:10:ec:80:c5:a1:a5:5e:c6:7e:f8:36:
                    63:68:f0:14:f9:d1:60:1f:6f:84:90:8c:07:d9:28:
                    3f:2d:0d:10:41:f1:5b:33:d8:7e:d6:3f:39:d2:e2:
                    bb:f4:84:6b:bf:5a:f1:df:a8:e3:0f:28:8a:95:df:
                    42:cd:28:6b:4c:0d:85:4b:ba:27:95:d4:56:18:1b:
                    f8:37:44:95:3d:56:76:be:d7:d6:0d:18:17:c3:dd:
                    e4:5f:40:24:f3:82:ef:18:fc:f1:7c:9c:15:b7:67:
                    fb:52:84:9c:98:e5:85:fa:78:7c:2a:52:77:d7:0c:
                    c7:bb:78:af:96:dd:05:ee:30:f1:22:87:e9:a9:4f:
                    51:a2:10:3a:31:9a:f2:38:3b:c4:41:6d:23:c0:e4:
                    11:75:9d:76:64:ef:5b:ae:54:e7:c6:db:e6:e8:07:
                    80:ec:18:fc:6a:26:01:2c:f4:a2:d5:d0:90:e0:9a:
                    08:01:6f:53:d3:8d:b4:82:8b:ef:41:94:b3:47:ee:
                    46:2f:08:7c:5c:be:fb:9a:98:16:f3:6b:30:da:04:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:40:CD:C1:7A:C3:24:85:4E:65:6B:DB:40:53:0E:7B:97:01:79:C4
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/615d3d3b-7f5f-45a5-9039-1574ce68916e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:43:97:a1:ba:c8:de:cb:fc:0c:0d:89:41:15:dd:37:f1:8c:
         45:d2:34:8f:b7:54:53:d7:6d:64:ed:11:95:c5:fe:a1:5c:c2:
         78:e8:d9:3b:c8:87:e8:25:1b:2d:ac:1c:40:c3:32:0f:1b:50:
         f5:e1:b6:ea:a7:d9:26:21:dd:88:98:bd:59:24:b6:81:bb:40:
         84:23:fa:e3:5e:a1:43:bf:fa:5b:5f:4d:00:81:58:ad:1d:5f:
         77:00:6b:ea:c3:f0:68:30:76:da:ea:55:94:1f:49:0d:7b:56:
         c0:f9:07:12:8a:5c:42:dc:77:e6:73:57:1e:31:7e:28:39:c1:
         c2:95:da:50:33:96:cf:ff:87:09:91:91:34:ed:fa:2e:e1:09:
         44:7d:2f:e3:87:f5:10:d6:cc:8f:54:86:28:51:f5:6c:f2:83:
         fa:99:29:38:58:03:86:a2:f9:50:94:78:11:02:d7:3c:c3:27:
         48:de:e6:a9:c6:a9:29:3d:5a:52:c0:29:a0:d2:bf:8c:12:8c:
         b4:ca:38:72:c5:fc:9b:41:e7:3e:b6:45:7d:3a:94:19:ea:35:
         28:0a:ad:7f:21:cd:1b:7d:76:ed:17:c7:a2:24:3f:42:d2:e1:
         ac:60:b4:79:d1:bf:99:4c:31:c4:f1:8b:c5:59:85:04:61:f6:
         85:52:87:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 02:13:32 2026 by rpki-client