Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b01c218c-5877-43f9-b3f6-d3596406a1dc.roa
File: b01c218c-5877-43f9-b3f6-d3596406a1dc.roa (raw, json)
Hash identifier: j6+68KyWJgooDKQ00H7Y+9HChUgOLalbs3fSwtO6C2Q=
Subject key identifier: DC:9E:2C:7F:F1:C1:21:59:DE:7E:FB:4D:C7:1E:1A:3D:5A:03:A8:BA
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 522D68C6939406C67F4D1DA18B4372B7321301CE
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b01c218c-5877-43f9-b3f6-d3596406a1dc.roa
Signing time: Fri 01 May 2026 14:10:48 +0000
ROA not before: Fri 01 May 2026 14:10:48 +0000
ROA not after: Thu 30 Jul 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 May 2026 15:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:2d:68:c6:93:94:06:c6:7f:4d:1d:a1:8b:43:72:b7:32:13:01:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 1 14:10:48 2026 GMT
Not After : Jul 30 23:59:59 2026 GMT
Subject: serialNumber=53ecf59d7567e96720caabd64727fc8d2aa5d7b05ca8ea8b6776e739580139e5, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:35:76:85:9d:8d:ea:ce:6e:bc:8d:ae:2d:
34:b8:e9:78:74:e8:9d:54:02:61:7a:c4:6a:5e:f4:
b5:5d:5e:41:ad:0f:6d:53:0b:7a:cf:9e:86:3b:77:
e4:92:aa:7e:88:4b:e2:98:8f:f9:b6:f9:f4:97:0e:
40:cc:17:29:d2:04:2e:9d:0e:43:8e:2a:39:0b:cc:
bb:f0:3c:2a:7d:80:e5:6a:9a:e6:c3:4a:a4:4b:2d:
6d:51:1f:34:58:60:43:2c:a3:1a:11:6f:96:9f:a0:
0c:46:bd:36:3c:e3:f4:ef:e5:e8:5d:a2:4b:10:4c:
43:cf:90:d3:78:d7:68:ec:98:44:8d:0b:12:fa:5f:
1d:f7:e8:6f:c1:dc:4d:29:c0:ae:26:fd:5a:55:24:
f5:75:b9:27:43:30:09:8d:45:b3:6b:78:93:e6:49:
26:5f:e8:61:1f:ce:ff:1b:0d:88:20:85:a2:46:b5:
75:42:bc:3b:51:af:31:2d:16:9e:d8:c9:c9:c7:91:
7c:bd:fa:60:c6:db:f1:48:a2:5f:59:a8:11:68:62:
44:65:6f:58:37:92:d5:1d:fd:63:b4:46:16:f7:dc:
f2:87:22:e7:59:3a:c2:99:4e:9c:82:fd:96:1b:4b:
b3:9c:bc:98:ee:7a:8d:60:46:d1:6f:4f:14:84:18:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9E:2C:7F:F1:C1:21:59:DE:7E:FB:4D:C7:1E:1A:3D:5A:03:A8:BA
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b01c218c-5877-43f9-b3f6-d3596406a1dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
54:47:19:f1:7f:21:85:e8:37:96:24:70:e0:50:79:0d:97:16:
49:e0:49:5a:95:50:a6:51:1b:a0:7e:b7:d3:8f:84:33:78:da:
05:ad:8a:24:07:f3:3b:3b:5d:97:03:6c:60:18:46:06:23:3b:
c2:ab:5f:f2:6d:db:3a:d6:91:02:be:4c:f5:73:51:d5:4e:a3:
2c:69:90:ed:5f:8a:2c:b3:ad:2a:18:2b:56:b6:f9:fa:13:22:
bc:b2:c1:96:20:0f:4f:f6:41:19:f4:a8:f4:d3:e3:0a:3b:fe:
61:34:60:11:e5:e5:b7:9c:98:1a:04:6a:46:9c:6c:95:07:62:
7e:a2:b3:63:95:4b:f9:ef:ae:7a:94:2a:07:77:25:7b:9c:4c:
3c:9f:07:86:45:5d:43:4b:40:3b:7c:e2:37:a4:3e:4c:8e:b6:
61:07:af:5d:77:0e:a9:bc:79:5c:4b:cf:b4:37:c7:85:a6:54:
b4:d3:41:19:f5:34:93:3c:43:19:c2:2f:af:9c:b0:b4:2d:d9:
c4:9e:a4:0d:ca:7f:0b:d9:5f:53:85:a1:66:b3:9c:10:65:08:
18:7b:3a:01:30:1c:ec:22:b1:30:2f:5a:9b:bc:e9:02:fe:2a:
49:9f:0e:28:10:4a:aa:34:98:64:a2:1d:47:4e:7f:59:d4:42:
e8:47:8b:26
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 1 17:07:36 2026 by rpki-client