Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d48078df-cf2b-4c2a-bd55-f4b4a4475dcd.roa
File: d48078df-cf2b-4c2a-bd55-f4b4a4475dcd.roa (raw, json)
Hash identifier: SUssUSJXkxWxpBjKQZrsu+mX5mnS1pKNRSUX5cPttVk=
Subject key identifier: BB:A2:7F:1E:2A:32:02:AF:1F:CB:CA:DF:4B:4F:EE:00:9A:33:00:0E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 6683B9A03CDAD36AB3FB9DCBB3006137505BB134
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d48078df-cf2b-4c2a-bd55-f4b4a4475dcd.roa
Signing time: Wed 10 Jun 2026 09:40:41 +0000
ROA not before: Wed 10 Jun 2026 09:40:41 +0000
ROA not after: Tue 08 Sep 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jun 2026 10:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:83:b9:a0:3c:da:d3:6a:b3:fb:9d:cb:b3:00:61:37:50:5b:b1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 10 09:40:41 2026 GMT
Not After : Sep 8 23:59:59 2026 GMT
Subject: serialNumber=5e47083b1d49534fe39063639d2b07a65b152435a3b9ff094869f09077314906, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:d3:f1:71:2b:c5:c4:d6:41:32:9f:05:dd:
32:6f:cb:d3:26:8e:ae:97:1b:7f:9b:ec:55:72:be:
9f:3c:df:d4:15:ad:f2:51:94:f1:9e:bc:7f:fe:fc:
65:39:1e:2d:40:5b:42:22:fb:aa:8d:d1:95:b7:10:
c4:8b:4f:73:02:6a:7b:cb:8d:24:6b:ed:48:ff:01:
57:8e:26:8c:fb:27:74:87:2e:d0:3e:a9:10:5b:65:
82:23:3a:01:c1:f2:88:b8:a1:86:19:46:f3:ec:d1:
fa:f2:2a:5a:c4:42:2c:1e:58:bd:b5:c5:45:f0:70:
5c:ac:26:d2:ee:2c:9a:df:e5:93:6b:d1:63:28:b7:
c5:b7:02:fb:01:00:95:1d:1c:99:1a:68:75:7c:9f:
4f:37:ec:ac:33:96:9a:02:26:f9:72:98:d3:67:47:
bf:41:a7:94:50:2f:85:67:33:fa:8e:a9:32:07:01:
3d:ad:e3:11:07:7a:14:65:5f:b8:1d:7b:55:e7:82:
90:1d:af:52:72:15:1f:7b:cd:09:3e:00:fa:f3:0d:
5b:43:57:0b:be:b3:10:22:13:e5:89:51:f6:8d:e3:
bc:7b:0b:bc:76:c6:50:59:bf:bd:e1:69:ca:ce:7a:
f4:d1:9a:92:5b:65:30:f8:f4:79:1d:32:a0:d2:42:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A2:7F:1E:2A:32:02:AF:1F:CB:CA:DF:4B:4F:EE:00:9A:33:00:0E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d48078df-cf2b-4c2a-bd55-f4b4a4475dcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
32:60:d3:86:03:b8:82:1d:34:ee:40:1b:31:89:ae:1c:c8:6e:
44:0b:8e:c0:76:47:49:90:5a:7b:da:be:ac:ff:49:12:b5:c1:
ed:c4:6c:f4:52:76:d7:96:24:ef:18:d5:96:70:2e:71:0e:8b:
af:e7:b0:f7:61:18:70:67:1e:2c:16:2a:ae:19:d1:59:f4:08:
3e:86:81:e6:35:dc:6e:64:60:d5:32:e1:33:83:51:fe:2a:12:
03:07:a1:aa:e1:e2:3b:16:32:ae:1e:77:86:16:2e:f2:dc:56:
41:4a:aa:87:96:31:af:d6:0a:c8:63:14:fa:0c:a6:ee:80:ba:
94:ff:ce:7a:79:24:aa:be:f2:a9:b0:a2:a1:1a:de:f7:d2:ec:
14:40:55:68:12:3e:c3:61:2d:56:15:82:d9:0e:bf:01:47:1a:
64:a8:aa:23:35:fa:1c:b2:ae:e9:23:53:5a:7d:e9:ee:73:32:
62:e8:cd:ad:00:b2:0c:7c:b8:59:43:dd:2b:a0:c0:3d:63:86:
d1:bf:7c:81:71:62:fd:4e:a9:92:05:16:e3:dd:20:89:ba:cc:
b6:1c:e0:fb:2c:93:dd:ce:5e:dc:72:c4:4a:96:a5:c2:67:11:
13:31:30:01:4e:3f:d6:2d:9d:a1:3c:6a:24:ab:1c:1a:eb:38:
4a:76:49:32
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 24 20:11:20 2026 by rpki-client