Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b8c7d75e-fde6-418e-a423-dbf400262e8f.roa
File: b8c7d75e-fde6-418e-a423-dbf400262e8f.roa (raw, json)
Hash identifier: yaKxDbU9i9nhGNyiJMnKtAemmkk1xOEWZ5RPfU/qfBo=
Subject key identifier: 3B:95:D1:69:46:2D:FA:BF:3D:65:4C:C7:B6:0F:08:40:14:CD:C0:A5
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 6E501B987C6A0FB01AA68ACEE87B00899ED519AA
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b8c7d75e-fde6-418e-a423-dbf400262e8f.roa
Signing time: Sun 18 Oct 2026 04:47:17 +0000
ROA not before: Sun 18 Oct 2026 04:47:17 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 18 Oct 2026 06:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:50:1b:98:7c:6a:0f:b0:1a:a6:8a:ce:e8:7b:00:89:9e:d5:19:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Oct 18 04:47:17 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=8888c4b5d63402bf3c926d732d87b0052bf52bd57d06c2674f346a968db4dcb8, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:cc:c4:a7:64:78:18:2a:8f:c2:b9:7c:3b:
5b:82:74:cf:a3:44:f5:39:a1:6e:d9:97:af:a6:99:
f8:fe:89:cf:2d:5e:22:90:a0:21:08:fa:10:e9:e6:
5f:a0:13:08:fe:ef:b6:0a:ba:4b:e1:05:ff:02:5a:
f7:93:cc:ce:9d:06:57:67:c6:00:0b:1e:b5:73:78:
d0:2b:4c:8b:95:e2:8d:01:f5:99:b3:17:aa:61:34:
c4:7e:6b:a4:36:23:b7:12:23:b3:f1:dd:d4:6a:ed:
d6:b6:cf:8c:e1:7f:3f:ad:de:f9:5a:f0:73:57:cd:
d4:22:16:53:f2:26:5f:a3:8e:38:96:a9:9c:9a:d5:
81:2f:17:9e:fc:a0:7b:a3:9f:ba:48:ae:ea:7f:86:
2c:5a:ac:f6:c7:ff:d3:2b:63:c1:58:3a:94:cb:5b:
e9:f5:36:6f:9c:0c:43:6c:58:30:5d:bd:28:ad:1e:
22:77:f4:09:90:c7:85:d6:7a:2c:43:fb:3b:4c:2c:
ed:8e:fd:c7:01:4c:eb:f2:ba:c5:61:f1:8b:86:f0:
b1:7d:ac:59:6c:72:ea:95:6f:94:15:40:5a:ab:8f:
a3:00:0b:9b:f9:7e:3d:17:86:29:44:da:d3:94:55:
45:c9:32:f9:bf:b2:ee:93:62:2e:af:32:0c:6a:d7:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:95:D1:69:46:2D:FA:BF:3D:65:4C:C7:B6:0F:08:40:14:CD:C0:A5
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b8c7d75e-fde6-418e-a423-dbf400262e8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
a3:79:de:ba:4a:4a:b4:84:10:16:c2:91:48:24:b8:6f:d2:d4:
d9:b7:ae:52:ff:1c:f2:f3:77:78:4c:ff:f6:10:06:7b:dc:be:
de:a1:de:50:20:e0:45:3d:5e:5c:e2:36:81:30:15:42:7a:a9:
2e:63:ff:52:31:f3:43:fe:54:a7:9b:ff:a1:5a:7b:42:ba:8a:
eb:47:ab:3a:5d:aa:cf:4b:2b:6d:9e:54:a1:51:5c:3a:9b:43:
5f:bb:bf:bc:91:20:21:e5:42:0e:4c:a5:59:d7:5b:bd:b8:ac:
ba:aa:1d:22:9b:a9:22:c3:77:98:8a:a2:e7:b8:db:8f:9c:26:
bb:79:b3:0e:9d:c5:82:2f:b1:bd:ad:75:b4:c1:dc:d0:25:45:
31:de:e0:15:32:f7:81:29:09:ea:15:c2:47:03:f6:bb:46:bf:
7f:e6:aa:1c:ec:a0:d8:25:25:c5:87:0d:d0:0a:b1:d4:2f:b2:
7a:ef:8a:4d:bc:0b:3a:c1:f1:f8:58:59:75:55:db:4b:d3:2f:
ad:93:9f:5e:3f:8e:43:f4:0c:f6:8b:88:f7:26:45:51:e4:94:
6b:c7:44:0d:c6:7b:7c:c1:93:6e:5a:a5:a1:78:76:49:af:5c:
c3:f4:5d:50:d9:a2:db:2a:71:dd:56:6f:1b:43:0f:35:51:6d:
91:97:6b:92
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUblAbmHxqD7AaporO6HsAiZ7VGaowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDE4MDQ0NzE3WhcNMjcwMTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ODg4YzRiNWQ2MzQwMmJmM2M5MjZkNzMyZDg3YjAwNTJi
ZjUyYmQ1N2QwNmMyNjc0ZjM0NmE5NjhkYjRkY2I4MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC14czEp2R4GCqPwrl8O1uCdM+jRPU5oW7Zl6+mmfj+ic8t
XiKQoCEI+hDp5l+gEwj+77YKukvhBf8CWveTzM6dBldnxgALHrVzeNArTIuV4o0B
9ZmzF6phNMR+a6Q2I7cSI7Px3dRq7da2z4zhfz+t3vla8HNXzdQiFlPyJl+jjjiW
qZya1YEvF578oHujn7pIrup/hixarPbH/9MrY8FYOpTLW+n1Nm+cDENsWDBdvSit
HiJ39AmQx4XWeixD+ztMLO2O/ccBTOvyusVh8YuG8LF9rFlscuqVb5QVQFqrj6MA
C5v5fj0XhilE2tOUVUXJMvm/su6TYi6vMgxq1/+1AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUO5XRaUYt+r89ZUzHtg8IQBTNwKUwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2I4YzdkNzVlLWZkZTYtNDE4ZS1hNDIzLWRiZjQwMDI2MmU4Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmBZzADTANBgkqhkiG9w0BAQsFAAOCAQEAo3neukpKtIQQFsKRSCS4b9LU
2beuUv8c8vN3eEz/9hAGe9y+3qHeUCDgRT1eXOI2gTAVQnqpLmP/UjHzQ/5Up5v/
oVp7QrqK60erOl2qz0srbZ5UoVFcOptDX7u/vJEgIeVCDkylWddbvbisuqodIpup
IsN3mIqi57jbj5wmu3mzDp3Fgi+xva11tMHc0CVFMd7gFTL3gSkJ6hXCRwP2u0a/
f+aqHOyg2CUlxYcN0Aqx1C+yeu+KTbwLOsHx+FhZdVXbS9MvrZOfXj+OQ/QM9ouI
9yZFUeSUa8dEDcZ7fMGTblqloXh2Sa9cw/RdUNmi2ypx3VZvG0MPNVFtkZdrkg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 12:45:03 2026 by rpki-client