Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a540be13-eeae-4fea-a7f7-356dca931d44.roa
File: a540be13-eeae-4fea-a7f7-356dca931d44.roa (raw, json)
Hash identifier: 8UXovw6DbIgdIm226vQbJxlc47fbPoYTzsTRBanLllY=
Subject key identifier: 3E:68:6F:31:97:5E:1B:74:8C:26:77:0F:8F:ED:C9:6E:44:E9:19:5F
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 1471DFB8EA95D20C8DDB18A5EF0C824D2A9ED4E1
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a540be13-eeae-4fea-a7f7-356dca931d44.roa
Signing time: Sun 18 Oct 2026 04:47:17 +0000
ROA not before: Sun 18 Oct 2026 04:47:17 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 Oct 2026 06:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:71:df:b8:ea:95:d2:0c:8d:db:18:a5:ef:0c:82:4d:2a:9e:d4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Oct 18 04:47:17 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=e79911c494e0a23e507a42ea1f7e3b3fb85e1d004f9806a16de32a2c0fc6c42b, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:34:76:8d:76:96:3e:54:cc:d2:15:71:d7:
e9:af:13:3e:d4:18:94:ec:cc:c4:45:8f:6b:e0:ee:
4d:51:1f:d9:06:68:61:3d:9d:2e:ee:42:08:27:c5:
84:b3:8f:1c:cc:ae:0d:42:d4:0c:12:3d:1a:79:69:
45:8a:77:8a:2b:90:ff:d3:d2:38:d0:8c:35:8f:d6:
11:37:76:72:95:7c:cd:f6:63:08:01:46:58:11:8c:
b9:1f:41:3c:6b:db:ba:2a:96:78:b4:07:df:bc:4f:
d0:8a:12:52:87:58:eb:a1:77:09:6e:e4:cc:ff:3d:
a8:7a:f6:44:79:eb:2b:53:f9:bf:aa:32:de:9b:1f:
80:41:91:a1:d5:02:ff:60:87:5f:77:7c:b1:37:59:
0e:0e:86:ba:74:da:f1:ad:90:01:ce:d9:ea:d4:3e:
d6:cf:c3:81:68:0c:49:b8:d8:8c:0e:64:2d:b3:0d:
9f:b0:1e:03:5b:11:03:58:6b:34:2a:cb:45:27:d9:
43:33:6e:a6:5a:38:62:56:91:4e:fa:94:06:ed:b8:
e0:d9:fb:91:13:c2:63:5a:23:12:dc:16:4c:2c:f0:
b6:d0:04:b8:13:dc:ef:95:15:4b:ef:05:29:07:f8:
c3:aa:2e:c2:f0:8f:21:b5:e8:e5:d7:a7:8f:da:38:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:68:6F:31:97:5E:1B:74:8C:26:77:0F:8F:ED:C9:6E:44:E9:19:5F
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a540be13-eeae-4fea-a7f7-356dca931d44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
9d:7d:1e:d3:51:cb:2f:cd:01:bb:9d:9d:27:bb:5d:c9:f1:4b:
5e:54:9d:91:c2:36:db:e9:a3:a2:58:d1:10:d2:b7:85:34:3f:
cd:40:52:9f:3c:09:57:1e:b5:62:86:2f:8b:39:87:d4:cd:29:
c5:47:8b:82:47:a9:65:14:d5:fe:89:ce:30:ba:3e:02:01:02:
be:b1:3b:69:d6:6f:e1:00:39:bf:a6:34:25:1c:ad:1e:19:29:
af:90:46:e7:1d:14:25:2a:cf:d7:a8:8e:d4:e6:6d:9e:e5:5a:
e8:d7:8b:60:f1:4b:f4:9a:db:13:02:a4:1f:cb:90:33:6c:d8:
63:89:d0:1b:79:e9:b8:44:31:3b:85:f3:85:fe:35:5b:f4:33:
4b:ec:a5:7f:4b:9d:eb:2c:55:19:64:1e:e1:ff:7e:24:5f:96:
1d:03:fd:d3:7d:c8:4b:cb:09:08:34:87:f0:6f:17:27:a2:6a:
1f:a1:db:17:2b:cc:15:80:cd:b1:c5:6d:61:c6:23:7e:b7:cc:
be:55:14:76:9d:a9:d9:08:29:fe:80:c4:06:d4:ff:f1:d9:b5:
01:cd:b9:1d:ea:8f:b2:2f:80:84:d3:0f:84:05:9b:f9:0d:98:
ff:d7:95:db:f9:b2:17:c9:d9:b5:9b:29:f0:ae:ae:b5:5c:44:
3e:b7:47:60
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUFHHfuOqV0gyN2xil7wyCTSqe1OEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDE4MDQ0NzE3WhcNMjcwMTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNzk5MTFjNDk0ZTBhMjNlNTA3YTQyZWExZjdlM2IzZmI4
NWUxZDAwNGY5ODA2YTE2ZGUzMmEyYzBmYzZjNDJiMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4PTR2jXaWPlTM0hVx1+mvEz7UGJTszMRFj2vg7k1RH9kG
aGE9nS7uQggnxYSzjxzMrg1C1AwSPRp5aUWKd4orkP/T0jjQjDWP1hE3dnKVfM32
YwgBRlgRjLkfQTxr27oqlni0B9+8T9CKElKHWOuhdwlu5Mz/Pah69kR56ytT+b+q
Mt6bH4BBkaHVAv9gh193fLE3WQ4Ohrp02vGtkAHO2erUPtbPw4FoDEm42IwOZC2z
DZ+wHgNbEQNYazQqy0Un2UMzbqZaOGJWkU76lAbtuODZ+5ETwmNaIxLcFkws8LbQ
BLgT3O+VFUvvBSkH+MOqLsLwjyG16OXXp4/aOFF7AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUPmhvMZdeG3SMJncPj+3JbkTpGV8wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2E1NDBiZTEzLWVlYWUtNGZlYS1hN2Y3LTM1NmRjYTkzMWQ0NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmBZzADTANBgkqhkiG9w0BAQsFAAOCAQEAnX0e01HLL80Bu52dJ7tdyfFL
XlSdkcI22+mjoljRENK3hTQ/zUBSnzwJVx61YoYvizmH1M0pxUeLgkepZRTV/onO
MLo+AgECvrE7adZv4QA5v6Y0JRytHhkpr5BG5x0UJSrP16iO1OZtnuVa6NeLYPFL
9JrbEwKkH8uQM2zYY4nQG3npuEQxO4Xzhf41W/QzS+ylf0ud6yxVGWQe4f9+JF+W
HQP9033IS8sJCDSH8G8XJ6JqH6HbFyvMFYDNscVtYcYjfrfMvlUUdp2p2Qgp/oDE
BtT/8dm1Ac25HeqPsi+AhNMPhAWb+Q2Y/9eV2/myF8nZtZsp8K6utVxEPrdHYA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 12:44:40 2026 by rpki-client