Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dfc8c534-158e-48a0-843e-703984251fd9.roa
File: dfc8c534-158e-48a0-843e-703984251fd9.roa (raw, json)
Hash identifier: J58oRJzre6CsuuRSLBWjerN7TjxvlfBJg0LpWRPG2fY=
Subject key identifier: 4B:06:C3:77:44:9D:BE:FD:2C:40:83:A1:A5:97:29:6C:47:DC:E2:87
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4A46BC16843735C8FC8CD373ABB337DBA39F0ECB
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dfc8c534-158e-48a0-843e-703984251fd9.roa
Signing time: Mon 03 Nov 2025 03:41:23 +0000
ROA not before: Mon 03 Nov 2025 03:41:23 +0000
ROA not after: Mon 08 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Nov 2025 04:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:46:bc:16:84:37:35:c8:fc:8c:d3:73:ab:b3:37:db:a3:9f:0e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Nov 3 03:41:23 2025 GMT
Not After : Dec 8 23:59:59 2025 GMT
Subject: serialNumber=a6541d65d64b0075227bec7b4ee2be812ef36e53e27795c22f2abb6577d575e6, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:30:4d:c7:ff:68:f5:e1:aa:1b:0f:27:ba:
d9:4e:26:45:d1:cc:80:4d:50:16:08:0a:b4:c7:1d:
7b:4a:91:d9:1e:a6:26:b4:dd:b8:f7:c3:7b:85:7c:
95:b6:e4:b7:9d:8c:eb:d8:f4:d9:fb:8e:77:f1:df:
70:4d:ec:34:3f:4d:bb:2e:1f:44:15:65:c7:9a:5e:
3b:a2:77:76:b3:d5:78:ea:e9:b0:7f:2a:6f:86:3e:
e1:c2:b3:c2:ab:8f:8a:08:f1:a0:62:0f:b7:4c:e8:
22:53:a8:30:a2:62:c1:f1:a2:ee:61:8e:ab:70:7e:
87:d3:80:f3:f7:26:e5:f8:d6:2f:9e:a3:d6:83:3c:
b5:cf:53:01:8b:ba:de:59:a6:4d:ba:38:f4:ef:85:
9f:77:e4:99:14:b7:92:f7:d1:21:20:ee:53:6c:59:
05:34:9e:1e:c4:a1:89:20:5e:ec:28:31:5f:41:fd:
a0:3a:f8:34:50:ab:27:fc:81:0f:e2:d0:bd:be:1f:
32:1b:21:15:c5:f7:97:29:c1:65:6a:fb:0f:0f:94:
9b:49:ca:4b:e1:99:68:27:fa:28:40:62:25:f2:c7:
97:7b:4d:93:f0:0e:6c:af:50:02:2b:21:9d:e5:bc:
17:f3:cf:61:83:87:cb:f6:5f:d5:1c:a7:eb:23:fa:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:06:C3:77:44:9D:BE:FD:2C:40:83:A1:A5:97:29:6C:47:DC:E2:87
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/dfc8c534-158e-48a0-843e-703984251fd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
42:d4:d7:80:08:99:a0:db:70:c0:7f:28:c1:88:5f:01:a5:7c:
65:d7:7a:08:21:d4:a0:75:cf:44:67:55:19:1b:43:7e:b0:8c:
dd:27:59:f0:df:3c:a9:e2:37:d0:52:f8:b4:97:9f:cf:7a:a0:
e9:0a:1c:e6:84:3f:24:8b:a8:d4:e2:51:51:05:13:3d:b8:99:
ec:aa:8b:16:c6:3c:3d:f2:55:75:cb:b0:04:b2:6a:d2:c1:20:
b0:38:88:a1:3d:2a:1f:dc:c2:70:36:d6:31:e7:32:7a:98:4d:
88:93:d8:95:65:55:6a:89:72:0c:77:cd:70:24:63:48:95:a1:
d2:09:62:7d:d8:cf:f6:2e:ee:70:ee:a6:2c:1d:cc:f3:12:5a:
9e:0f:6f:2f:ce:7a:9f:42:31:f0:3a:6e:04:dc:1e:7c:d4:1e:
32:ea:10:dd:fd:3a:d5:11:f7:f2:80:01:1a:6c:2a:e5:46:f7:
b0:5b:d7:2a:17:d5:4d:e3:2b:eb:c2:81:30:ce:a4:2e:8f:a1:
f9:dd:93:5e:49:b4:21:41:21:33:9f:6a:ce:7d:9c:96:de:3f:
21:27:fb:e1:36:31:40:71:9b:0a:71:b3:b5:a2:47:00:52:c1:
79:3e:d1:73:c1:06:c8:85:9e:a0:9d:92:af:b3:9f:65:b3:c1:
83:e2:ca:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 3 11:18:26 2025 by rpki-client