Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b5982ff5-0c73-46f4-aec9-f4d15312474b.roa
File: b5982ff5-0c73-46f4-aec9-f4d15312474b.roa (raw, json)
Hash identifier: SQGMGIqA6FgfVzZFzifZqkHQBhu+PhA/UEp+O9fYHQg=
Subject key identifier: BC:73:71:2E:F2:BD:D2:B3:64:65:A3:09:B1:95:B8:A9:11:9D:65:E3
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4E89BD92606554AB80A9059AEB5B753A8965B30C
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b5982ff5-0c73-46f4-aec9-f4d15312474b.roa
Signing time: Thu 28 May 2026 18:40:54 +0000
ROA not before: Thu 28 May 2026 18:40:54 +0000
ROA not after: Wed 26 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 28 May 2026 19:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:89:bd:92:60:65:54:ab:80:a9:05:9a:eb:5b:75:3a:89:65:b3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 28 18:40:54 2026 GMT
Not After : Aug 26 23:59:59 2026 GMT
Subject: serialNumber=aadc7323f36a842df677dede9dedb6ce72f7e34863e32a9af78df1b55a6f7088, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:29:36:eb:80:43:c4:4a:c3:7a:84:c4:e2:
8b:8b:04:9d:9b:08:f6:97:4c:f5:48:47:5a:45:ee:
16:cf:35:10:8b:f8:06:b4:b5:14:db:3c:b1:34:de:
30:93:ae:52:32:70:1a:6c:71:4d:a1:0e:42:1a:fa:
68:a2:76:0c:8d:20:77:25:2d:04:b7:77:82:7d:98:
92:ff:0e:23:8d:31:a1:65:fb:b7:9b:01:29:fc:78:
e1:45:e7:5e:50:6c:2c:f6:8b:d7:3a:5a:9b:0e:29:
a4:70:c9:d9:19:92:c7:78:ee:d7:67:56:ea:c0:3a:
99:1a:59:10:dc:2b:c4:b6:ef:b4:ae:04:45:30:64:
8f:6e:7a:bb:0b:53:f0:09:47:ed:ca:df:bd:9a:fb:
71:d8:fc:bb:9b:46:6c:8a:89:90:fc:c7:b3:16:89:
85:99:2c:10:40:aa:2c:53:3b:75:d2:26:c3:39:02:
a9:ba:61:31:a7:d4:21:79:c9:44:11:e2:da:7f:a4:
41:80:6f:56:8e:bc:a8:3d:9f:ef:87:4e:eb:48:01:
13:fe:40:10:46:bb:70:73:ce:54:6e:2e:01:c4:8b:
ac:d3:1a:42:42:45:ba:78:29:cf:43:17:2c:c0:ea:
e6:d4:14:1c:67:7d:37:19:1a:10:14:43:6f:fa:e6:
fb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:73:71:2E:F2:BD:D2:B3:64:65:A3:09:B1:95:B8:A9:11:9D:65:E3
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b5982ff5-0c73-46f4-aec9-f4d15312474b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
81:cd:d2:29:73:8f:c5:7d:c0:ad:60:66:20:52:29:62:62:61:
1b:78:fa:3f:c9:34:80:89:27:3e:94:1c:c1:44:57:86:f4:e6:
f4:2e:47:09:9c:67:dc:04:e7:1f:42:13:1c:fa:16:77:a2:7f:
24:60:4f:af:af:e1:75:ad:b5:0a:07:b2:d4:dd:f3:e7:9b:51:
2e:69:ad:47:5d:c4:8b:bd:5a:d4:92:2d:67:41:0d:dc:ce:90:
e5:ed:c7:64:c6:74:44:29:59:48:d1:b7:1e:19:e3:ca:b2:35:
31:d9:e1:14:05:7d:d2:6a:b6:e0:ae:72:32:62:54:4b:68:94:
2d:bb:e7:ed:c5:3e:00:08:6c:9f:6c:dc:4f:a6:9e:e8:29:21:
35:9a:d3:b2:e4:48:b7:5d:e8:5e:74:14:39:de:87:21:db:75:
ec:e8:16:b8:ce:77:66:37:ad:1e:41:24:38:cf:ad:e9:81:10:
96:81:41:fb:4b:e9:bc:1c:76:10:34:ce:9b:2e:72:45:75:06:
3b:9f:88:6d:2e:24:3c:ea:e0:0a:9c:d1:f9:12:6d:b2:1f:9f:
8a:dd:47:2c:d4:7c:b4:b1:88:0b:5f:36:b4:73:ab:66:e8:06:
64:ee:4d:c2:06:1a:87:9a:15:71:80:f6:d8:df:8f:28:08:c5:
2d:cb:da:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 28 21:28:35 2026 by rpki-client