Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e1ee16bb-23cf-428d-86af-0a5c799c6344.roa
File: e1ee16bb-23cf-428d-86af-0a5c799c6344.roa (raw, json)
Hash identifier: ssgX8PMWyMhFLHiV2XuCF+CmkZgm++JnwvyXD67UpF0=
Subject key identifier: BA:2A:4A:CF:BB:8C:2C:BB:48:A6:88:0B:1D:78:48:AE:8B:0C:E1:C1
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 06E1C25E94BFB31CD80E09B7D4BE0380AA293540
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e1ee16bb-23cf-428d-86af-0a5c799c6344.roa
Signing time: Sat 07 Feb 2026 05:10:47 +0000
ROA not before: Sat 07 Feb 2026 05:10:47 +0000
ROA not after: Fri 08 May 2026 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sat 07 Feb 2026 06:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e1:c2:5e:94:bf:b3:1c:d8:0e:09:b7:d4:be:03:80:aa:29:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Feb 7 05:10:47 2026 GMT
Not After : May 8 23:59:59 2026 GMT
Subject: serialNumber=50d4a1d0e17c78f881e9fc4fc4e64388fb8fe37a17be33200a8815f57233b8de, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:97:2e:a6:36:ea:85:63:65:f2:ee:dd:bf:
a0:76:88:43:a8:43:4c:b6:59:39:33:ca:7c:52:ca:
e1:fe:fe:fc:bb:fc:b0:7e:39:38:4e:7d:9b:da:58:
ec:45:61:98:ee:de:da:ac:aa:92:76:28:1c:87:ed:
99:c4:83:59:e3:4d:63:b9:1e:ed:a7:c8:10:d4:0b:
40:70:ac:98:bc:1d:dd:9e:f1:95:8b:8f:42:6d:27:
5d:13:ea:6c:d6:03:f3:11:06:3c:53:29:39:c5:89:
7e:8c:aa:f8:4b:8d:f5:cb:0a:56:b4:8d:eb:d3:b1:
c8:00:26:a5:df:3b:19:37:f7:4c:40:6c:f0:8c:57:
1a:b4:f9:0f:af:d6:f1:2b:44:8f:cf:61:5a:f1:bc:
93:1c:01:b1:db:64:0c:86:61:52:b6:9f:05:00:a0:
17:d9:83:6a:34:26:59:86:15:50:0b:57:57:45:e7:
cb:06:cb:45:f7:b2:dd:3d:0c:04:a1:66:06:1a:74:
62:37:b2:e1:74:f9:05:c3:53:43:07:2c:b9:3c:84:
58:df:52:9e:8e:be:d0:b3:f9:bc:5e:53:13:88:29:
77:7c:a2:99:ad:fc:00:48:fa:89:fa:20:2f:e9:1e:
8e:ea:82:73:14:06:ce:ef:22:76:dd:f1:1e:8d:0d:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2A:4A:CF:BB:8C:2C:BB:48:A6:88:0B:1D:78:48:AE:8B:0C:E1:C1
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e1ee16bb-23cf-428d-86af-0a5c799c6344.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
67:69:97:3e:09:aa:e5:d6:60:db:5c:a6:cc:36:c7:66:70:33:
14:a3:b0:08:c7:50:03:a1:3c:c8:60:ba:b3:0a:27:f0:57:76:
e5:e9:2f:d2:81:df:3b:03:fa:4d:83:c1:9b:b9:f3:a0:6b:03:
49:8c:bb:3a:24:0f:68:94:ef:55:26:71:98:f1:5c:79:5d:f3:
14:36:fd:bc:fa:89:85:5b:5b:53:ba:ce:64:be:50:a0:e3:98:
0a:3d:dc:49:96:55:2d:ab:6a:5e:e4:8e:2e:10:14:a0:85:d1:
ae:92:47:c0:25:c3:04:a4:06:0d:bc:92:01:cc:be:45:d6:e7:
96:91:0f:0d:a5:a3:20:4b:fa:55:80:e4:c5:1d:f9:06:30:d9:
e2:19:f2:96:2d:86:e0:b8:c4:7a:e9:33:92:ea:8c:71:e5:3f:
60:85:d5:d2:28:2e:8a:8f:2b:dd:76:fb:18:4d:80:f9:ed:d5:
29:d7:82:ad:e3:4e:f5:a0:78:86:75:af:f7:42:42:f5:fd:f1:
4c:b9:7d:d7:87:5b:47:53:32:07:38:89:25:b9:7e:db:70:77:
5a:ae:04:5c:ee:8a:9c:d0:04:36:5e:60:68:18:c3:98:d4:3c:
64:67:46:94:c0:2a:ef:e6:2d:32:a9:da:aa:4e:2d:08:55:db:
7c:a6:b4:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Mar 18 16:59:30 2026 by rpki-client