Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c5f04d32-5d17-4ad6-8ec5-00fe066dda65.roa
File: c5f04d32-5d17-4ad6-8ec5-00fe066dda65.roa (raw, json)
Hash identifier: mk2+BXuB47nX6Lqswr4hSqHd4GvAysto+SsOlY3+U44=
Subject key identifier: 4C:49:34:D8:EE:D6:4D:FE:30:21:EE:24:4A:71:B8:B1:04:12:70:54
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4A90E6A540A07D674558F7969BE94068883E1015
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c5f04d32-5d17-4ad6-8ec5-00fe066dda65.roa
Signing time: Thu 17 Sep 2026 14:47:24 +0000
ROA not before: Thu 17 Sep 2026 14:47:24 +0000
ROA not after: Wed 16 Dec 2026 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Sep 2026 16:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:90:e6:a5:40:a0:7d:67:45:58:f7:96:9b:e9:40:68:88:3e:10:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Sep 17 14:47:24 2026 GMT
Not After : Dec 16 23:59:59 2026 GMT
Subject: serialNumber=8636d0f0b892871a5844f74436309537fb2d4b83e14395d10d7443e0e2d44989, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:ca:1c:8d:2c:7a:03:a5:4a:c2:53:2f:67:
a8:3b:33:9d:de:01:6c:57:1a:3a:87:2d:af:64:3f:
ab:69:e8:28:4b:66:88:32:ee:da:15:6e:60:bb:ab:
ba:c0:08:e6:3f:72:b1:d5:37:2b:ef:25:15:7a:3e:
45:ed:0c:11:fc:30:d1:03:26:2b:13:43:b3:4f:3a:
78:41:bd:10:32:9b:98:da:43:5c:aa:c9:23:b4:e2:
e7:90:28:6e:45:f9:60:07:9d:ea:52:bf:94:53:cd:
d2:0f:86:b4:ed:20:33:16:c4:db:96:65:c5:48:68:
21:3f:90:a1:73:65:f9:f6:78:cc:27:28:fc:41:34:
1a:07:a9:31:5b:94:2a:cd:f5:3a:e5:eb:94:9b:c4:
08:40:3a:83:90:86:59:2e:11:94:b9:01:fd:0f:aa:
ea:88:90:d5:53:dc:f5:52:c5:b5:3d:92:a6:b5:c8:
16:a7:30:73:96:57:00:33:1d:69:56:ff:98:f8:9c:
8d:c8:c0:c6:bd:e0:8c:2f:c0:0c:85:ab:32:f5:c9:
16:10:4c:91:2c:d4:81:02:91:9f:a5:4c:74:52:85:
61:5c:e0:88:2d:9f:5e:d4:cd:ae:a7:ed:14:79:b1:
24:b3:b4:ef:67:58:6d:5b:c0:20:ea:41:7a:fd:6f:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:49:34:D8:EE:D6:4D:FE:30:21:EE:24:4A:71:B8:B1:04:12:70:54
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c5f04d32-5d17-4ad6-8ec5-00fe066dda65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
2f:58:27:54:92:32:6e:de:ec:cc:78:c7:1e:55:5b:20:d7:09:
d7:88:f9:33:69:c7:75:b3:01:69:cc:20:d4:72:5e:a2:5a:a5:
22:c8:ef:a7:50:11:82:85:b9:3f:e6:31:32:7b:9f:9a:3d:27:
80:0a:83:5d:b7:cb:47:f3:7e:16:d9:3c:29:20:63:25:f6:4c:
f4:0a:8f:41:32:22:64:f1:04:3d:f9:7a:69:cf:ee:24:0d:17:
5c:d5:25:a4:08:d0:79:a8:1e:9e:5b:c6:cb:d0:f9:3c:fb:5c:
86:37:24:fe:c2:ea:22:c4:5b:b7:7c:0a:e0:9b:1b:5f:4e:e9:
36:c8:46:82:8e:fd:ae:c9:86:fd:97:2d:d8:40:02:67:9d:69:
20:93:c6:5f:2a:81:e1:22:ad:b2:8e:8d:fb:64:ae:0e:65:be:
0c:4f:82:e4:9a:43:93:bd:4b:e9:31:9e:a4:5e:c0:50:64:c5:
f9:3e:79:a1:83:cb:29:03:c9:c9:13:35:9b:cb:95:9e:64:7f:
85:1a:b0:09:3d:10:89:a6:75:e1:6a:35:02:53:04:5e:97:c4:
e1:08:b3:43:a4:0b:2a:48:58:b5:7c:3c:9e:3d:bc:9c:36:ce:
91:72:19:cd:85:1c:3d:0e:1c:8a:3a:8a:b3:c9:c9:aa:8d:2b:
a7:c5:64:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 19:40:22 2026 by rpki-client