Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8ae9b78f-8d20-4cf9-9d0e-89a404d7aa66.roa
File: 8ae9b78f-8d20-4cf9-9d0e-89a404d7aa66.roa (raw, json)
Hash identifier: FoSxVB891OdfQWmz0AQ67GqjnysAhsxm0VcbETbeY80=
Subject key identifier: F6:03:39:BF:9C:28:8A:0C:02:D3:75:19:C4:5C:93:EC:EE:16:E5:07
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 19727E4743820EC827E91C585ABCD47F8ABF1BC4
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8ae9b78f-8d20-4cf9-9d0e-89a404d7aa66.roa
Signing time: Thu 18 Sep 2025 21:41:59 +0000
ROA not before: Thu 18 Sep 2025 21:41:59 +0000
ROA not after: Thu 23 Oct 2025 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Sep 2025 22:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:72:7e:47:43:82:0e:c8:27:e9:1c:58:5a:bc:d4:7f:8a:bf:1b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Sep 18 21:41:59 2025 GMT
Not After : Oct 23 23:59:59 2025 GMT
Subject: serialNumber=8ff38b801b728327f63f6a8dc6ef92a3b2ed3f48b3ede511708b2cb4e5350fdd, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:61:38:1d:93:28:59:59:93:15:7d:73:99:8d:
0d:03:aa:a3:bc:50:35:4b:0f:c9:e2:bb:32:ac:ed:
33:52:0c:d4:b6:9b:78:51:75:4e:b5:6b:e3:4f:78:
b6:2d:33:54:0d:d3:99:3c:10:26:7b:df:c8:7c:c9:
44:a5:c6:18:33:fd:f3:40:e5:03:47:e9:7c:80:44:
4f:f0:46:85:5d:28:51:82:38:a2:96:0e:43:e2:a6:
90:be:9a:46:31:ce:3b:e3:45:cd:60:f1:49:d5:9a:
69:39:76:e2:4a:a5:6b:75:d3:d0:ce:f0:05:10:0c:
ee:09:a7:93:50:e9:a9:9f:85:7a:1e:e5:05:94:63:
8f:1e:9c:e6:7f:29:02:cc:94:14:4a:dc:ee:bf:af:
7a:78:b4:8a:f4:a0:5f:d0:f3:fa:cf:81:77:3f:0d:
92:33:21:28:d8:1d:18:b3:e5:1b:e5:db:c6:42:19:
ce:21:9f:fe:b8:94:6e:4c:47:4d:81:9e:3a:1a:ae:
27:ad:e8:0f:0c:09:7d:dc:ac:dd:a3:f0:59:55:c7:
f9:fe:0a:64:7d:3c:5a:49:a0:8c:dd:78:8c:0b:0c:
ee:bb:45:98:90:d9:a9:4e:15:3b:8c:25:41:4c:c2:
9a:d5:b3:6f:ec:74:d6:14:e8:38:f5:e1:75:96:2a:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:03:39:BF:9C:28:8A:0C:02:D3:75:19:C4:5C:93:EC:EE:16:E5:07
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8ae9b78f-8d20-4cf9-9d0e-89a404d7aa66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
20:92:f7:b0:93:57:74:b9:c5:8d:f3:ca:43:b4:03:78:57:74:
4d:31:a2:40:df:a2:d1:0a:3d:1d:ee:92:60:12:e2:a1:54:2d:
49:fe:48:f1:d8:50:08:03:04:5f:61:10:e7:4a:00:63:0c:88:
fa:ac:28:c9:f3:72:d3:e1:fe:1f:1d:d0:ae:16:61:6a:83:9c:
49:93:24:67:44:53:26:fe:50:1f:91:7a:cf:b6:d4:1a:2f:f5:
d3:60:a1:43:ce:b7:80:ab:4a:47:e3:ad:f8:b7:4e:3a:c8:1b:
0d:29:47:0c:c0:a4:01:a2:4e:e0:7e:1e:14:3f:a1:52:ad:21:
ac:fc:e9:57:1c:3f:1b:2e:18:f0:9d:55:7b:5e:81:63:e6:50:
c7:f5:e0:2d:96:38:f5:b1:63:96:28:ba:66:0c:f4:a6:0c:7c:
f2:e5:26:fd:60:8b:d2:36:0b:80:1d:26:3e:a1:ff:75:5b:5e:
43:a8:bb:52:df:8d:a5:f0:bd:67:10:4f:b3:fe:5a:10:be:14:
cd:a2:ea:ed:89:6c:97:bb:cf:9b:35:83:16:83:15:75:24:09:
d9:69:ae:10:7f:07:a4:a7:5c:cb:ad:51:56:ff:5b:9e:8e:60:
45:3d:07:a6:88:0b:95:f2:8c:82:6c:f9:ad:80:17:99:01:de:
8e:d2:e2:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 19 00:12:01 2025 by rpki-client