Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03161697-9b3e-46d6-b99d-fb911c4ef854.roa
File: 03161697-9b3e-46d6-b99d-fb911c4ef854.roa (raw, json)
Hash identifier: 5F3Va2hJTdmkXc2ODux2mvX6k3/WJndEvx4dDIb001U=
Subject key identifier: F7:C8:42:0C:08:02:86:2A:43:23:E3:AF:35:57:C3:43:F3:DD:DE:92
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 638964DBD077D2EA3A1D63A74A075EFA7C2E6AA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03161697-9b3e-46d6-b99d-fb911c4ef854.roa
Signing time: Wed 30 Jul 2025 21:06:59 +0000
ROA not before: Wed 30 Jul 2025 21:06:59 +0000
ROA not after: Wed 03 Sep 2025 23:59:59 +0000
asID: 16509
IP address blocks: 114.57.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 06 Aug 2025 14:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:89:64:db:d0:77:d2:ea:3a:1d:63:a7:4a:07:5e:fa:7c:2e:6a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 30 21:06:59 2025 GMT
Not After : Sep 3 23:59:59 2025 GMT
Subject: serialNumber=55d0507dfc2dfbba7f595b16f861cd7e0791d5a1a4c302e6984478302caaffce, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3a:c4:20:d1:d5:cc:75:9a:8e:e0:3f:c8:89:
40:47:7e:b2:24:52:b4:50:27:24:da:7c:26:fc:a9:
19:ad:bc:5d:85:47:0f:cf:4a:57:c7:5c:a5:6b:d5:
5b:92:a4:ff:93:f6:54:66:17:c5:c4:99:80:12:52:
31:57:a1:bd:26:47:ba:74:cb:8e:32:a0:9f:ff:bd:
a3:a7:e2:1e:9a:2d:2a:eb:e9:82:62:39:2d:37:07:
6b:37:08:ce:76:14:c1:90:70:96:a6:8d:22:37:84:
c7:ec:63:69:90:37:18:8e:c1:a0:c4:88:22:2b:2c:
f2:f0:8a:48:41:fb:1d:d4:5f:08:54:17:9c:db:30:
41:51:53:f4:4f:2c:99:19:81:2f:bc:34:9d:44:23:
ce:ed:fc:96:5d:0a:b3:69:a6:93:dd:23:d3:68:66:
7c:75:59:64:ec:94:82:bb:36:19:7c:5a:f6:e8:97:
5c:af:44:01:fc:fd:6e:ec:49:cf:30:38:2d:95:d6:
78:8d:ab:fe:ca:c3:28:8d:fd:a7:79:b8:79:bd:bb:
5c:07:45:c3:15:ec:2c:96:8c:f4:df:d3:8c:99:c0:
53:2e:98:4d:1c:f5:ea:50:bf:17:be:6f:e9:90:c7:
a5:76:af:f0:b4:28:d4:7a:55:5e:2d:7c:1f:02:60:
a5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C8:42:0C:08:02:86:2A:43:23:E3:AF:35:57:C3:43:F3:DD:DE:92
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03161697-9b3e-46d6-b99d-fb911c4ef854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.57.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:95:96:73:4a:e0:2c:d5:fc:93:fe:11:3e:8f:58:d4:5d:10:
1a:99:73:b4:97:57:0b:1c:38:59:e8:b1:16:d5:e0:0e:05:de:
7a:20:92:d5:0d:07:5a:96:4b:bd:49:ec:00:1d:52:11:0e:29:
65:c7:68:cc:0c:ac:9f:26:b9:43:5b:14:5a:3a:94:78:c3:23:
ce:bb:c2:7b:9b:22:53:31:51:ff:ca:77:d4:80:6e:07:aa:8f:
02:6a:63:42:f9:ad:e7:e2:86:43:a8:36:90:ed:e8:04:50:08:
b3:98:49:b1:ce:c6:56:4b:50:94:6f:25:11:1b:f0:7f:fa:69:
22:26:75:35:5c:d1:1f:57:1a:aa:2f:eb:c2:a9:b1:0a:9c:6b:
62:04:89:0f:aa:e3:d9:4a:75:bf:04:e6:63:e1:d5:2c:ef:fb:
71:94:e9:7a:e1:04:82:a1:cc:dc:b5:fc:8d:9b:30:9a:58:56:
a5:5c:aa:ec:48:8a:4d:32:bd:7b:c1:fc:0a:bd:2a:d8:64:b7:
c1:2e:2e:d3:7e:bf:5e:8f:52:cf:f6:45:1e:6e:75:6f:a8:1a:
d0:a7:d8:df:d3:f8:02:33:a0:fa:a8:cb:78:76:7a:d4:e4:df:
eb:8b:00:52:f0:3b:f8:b4:92:08:dd:cf:13:ff:36:a6:12:51:
06:10:78:d5
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUY4lk29B30uo6HWOnSgde+nwuaqUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzMwMjEwNjU5WhcNMjUwOTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NWQwNTA3ZGZjMmRmYmJhN2Y1OTViMTZmODYxY2Q3ZTA3
OTFkNWExYTRjMzAyZTY5ODQ0NzgzMDJjYWFmZmNlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZOsQg0dXMdZqO4D/IiUBHfrIkUrRQJyTafCb8qRmtvF2F
Rw/PSlfHXKVr1VuSpP+T9lRmF8XEmYASUjFXob0mR7p0y44yoJ//vaOn4h6aLSrr
6YJiOS03B2s3CM52FMGQcJamjSI3hMfsY2mQNxiOwaDEiCIrLPLwikhB+x3UXwhU
F5zbMEFRU/RPLJkZgS+8NJ1EI87t/JZdCrNpppPdI9NoZnx1WWTslIK7Nhl8Wvbo
l1yvRAH8/W7sSc8wOC2V1niNq/7KwyiN/ad5uHm9u1wHRcMV7CyWjPTf04yZwFMu
mE0c9epQvxe+b+mQx6V2r/C0KNR6VV4tfB8CYKVRAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU98hCDAgChipDI+OvNVfDQ/Pd3pIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAzMTYxNjk3LTliM2UtNDZkNi1iOTlkLWZiOTExYzRlZjg1NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwByOTANBgkqhkiG9w0BAQsFAAOCAQEAY5WWc0rgLNX8k/4RPo9Y1F0QGplz
tJdXCxw4WeixFtXgDgXeeiCS1Q0HWpZLvUnsAB1SEQ4pZcdozAysnya5Q1sUWjqU
eMMjzrvCe5siUzFR/8p31IBuB6qPAmpjQvmt5+KGQ6g2kO3oBFAIs5hJsc7GVktQ
lG8lERvwf/ppIiZ1NVzRH1caqi/rwqmxCpxrYgSJD6rj2Up1vwTmY+HVLO/7cZTp
euEEgqHM3LX8jZswmlhWpVyq7EiKTTK9e8H8Cr0q2GS3wS4u036/Xo9Sz/ZFHm51
b6ga0KfY39P4AjOg+qjLeHZ61OTf64sAUvA7+LSSCN3PE/82phJRBhB41Q==
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:17:22 2025 by rpki-client