Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/02c46c55-0c04-42f7-bb51-ca5eb92e176c.roa
File:                     02c46c55-0c04-42f7-bb51-ca5eb92e176c.roa (raw, json)
Hash identifier:          DjUpJO48Kghv+LOcL+r/rAgJZ4Z8y2fy2QhT3lkFxkc=
Subject key identifier:   CE:35:28:7A:F0:1B:4D:01:D0:01:7F:FC:5E:F9:22:B2:7F:D7:97:81
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       2104FFB28D05F9CB84327D5CA6E8961700E1A069
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/02c46c55-0c04-42f7-bb51-ca5eb92e176c.roa
Signing time:             Fri 06 Feb 2026 00:30:11 +0000
ROA not before:           Fri 06 Feb 2026 00:30:11 +0000
ROA not after:            Thu 07 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2631:0:1::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 10 Feb 2026 16:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:04:ff:b2:8d:05:f9:cb:84:32:7d:5c:a6:e8:96:17:00:e1:a0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Feb  6 00:30:11 2026 GMT
            Not After : May  7 23:59:59 2026 GMT
        Subject: serialNumber=e51026d589bd6769fa3aee89cdd607adf2103421efd7bba279eb5d887e96bbdb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:4f:9b:97:77:e8:73:36:f6:1e:eb:74:db:
                    d6:68:2a:13:de:5a:67:f4:26:95:2d:8e:45:7c:23:
                    83:be:e5:b9:59:78:17:7a:2d:35:f3:c7:99:5c:fb:
                    89:39:8b:88:59:ff:e9:21:3e:f8:14:60:d6:9d:e9:
                    13:6c:83:28:d8:f1:da:06:2f:ec:f5:e3:1b:42:c1:
                    4b:fc:56:32:ad:af:f6:a7:e5:2f:53:4a:24:e4:50:
                    f9:4b:14:61:cf:0e:10:dc:84:30:33:e6:35:c0:f8:
                    e1:80:71:39:7c:89:3b:45:79:e5:51:11:6c:85:aa:
                    dc:28:58:83:bf:0f:07:8f:1d:ba:17:8a:06:f1:3f:
                    ec:80:e4:95:27:03:f0:ee:9c:6d:96:85:95:fc:19:
                    4d:fc:59:57:ca:62:05:99:ca:20:85:97:93:95:5e:
                    b8:8d:76:0b:17:cb:3f:ad:03:cc:a4:f4:0e:bc:d6:
                    dd:a4:ae:b0:5f:f7:3d:d2:b4:a6:e9:6e:cf:0a:c4:
                    fa:8b:c3:4f:c2:e8:44:4f:4b:5f:79:c1:70:91:4f:
                    d2:3c:bf:12:79:74:83:d3:c5:54:a1:9d:f2:54:02:
                    ea:5f:14:7d:0b:bd:d3:1a:19:3f:0a:d4:c5:53:44:
                    a7:38:e7:88:f1:04:29:7e:e6:6f:18:3f:e4:9e:19:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:35:28:7A:F0:1B:4D:01:D0:01:7F:FC:5E:F9:22:B2:7F:D7:97:81
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/02c46c55-0c04-42f7-bb51-ca5eb92e176c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:25:7a:8c:0c:a7:78:6c:74:f6:93:69:99:94:f5:a1:f7:24:
         f1:28:2c:4d:c1:9b:94:dd:cd:60:5e:a6:49:63:69:14:51:c5:
         2e:b9:84:0e:00:ee:cd:00:44:a7:6a:f5:f2:c8:66:a8:ad:7e:
         0f:67:56:a3:d3:70:37:5f:3c:80:e8:0b:e8:84:3d:37:bf:67:
         2d:6b:8e:76:55:32:d8:87:ad:52:cb:88:80:70:1f:06:be:7b:
         71:19:7c:27:6f:3a:ad:06:4e:20:4f:36:4a:8b:13:6e:48:32:
         3a:8e:6f:d3:0e:88:53:7e:43:9d:9e:6c:6f:f5:c3:95:37:b3:
         21:94:b5:6a:de:19:f1:0d:26:a7:9e:77:3f:64:03:b1:9c:15:
         ef:82:48:53:08:0d:44:28:dd:67:0c:a0:00:73:74:3f:62:4c:
         94:ec:08:7d:32:12:e6:0b:8f:10:18:92:61:c9:70:20:10:5f:
         c2:2d:d4:85:99:ad:2d:3e:da:e3:42:ba:90:ce:27:1d:1b:d1:
         86:96:5b:5d:6c:db:98:6e:23:b4:90:7d:b4:66:5f:c2:66:47:
         c4:dd:70:22:89:6a:5f:93:2e:52:f8:b3:3b:7a:f5:a0:08:bc:
         36:1c:43:73:70:bb:d4:a1:74:c9:ca:bb:56:32:30:3c:66:7f:
         61:6a:fc:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----