Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3460d523-e2a2-4d0f-a09e-d55e45dfcf71.roa
File: 3460d523-e2a2-4d0f-a09e-d55e45dfcf71.roa (raw, json)
Hash identifier: qV2ZIJuJ6+pwdhoa4OIs629qf/cEVaVAXVyOZgsuTFY=
Subject key identifier: 5B:06:9D:3D:19:0C:70:29:4F:C3:81:1B:B9:77:81:DD:6C:D7:DC:BE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 424F6F9B00CF1E16FE1E002F14816E15E1C75836
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3460d523-e2a2-4d0f-a09e-d55e45dfcf71.roa
Signing time: Sun 20 Sep 2026 11:52:31 +0000
ROA not before: Sun 20 Sep 2026 11:52:31 +0000
ROA not after: Sat 19 Dec 2026 23:59:59 +0000
asID: 21664
IP address blocks: 1.178.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Sep 2026 13:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4f:6f:9b:00:cf:1e:16:fe:1e:00:2f:14:81:6e:15:e1:c7:58:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 20 11:52:31 2026 GMT
Not After : Dec 19 23:59:59 2026 GMT
Subject: serialNumber=e6dd4f1493c1b0d7025a3dcc1ae5e2f43416c7d80d29fda7d13d850c129226fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:2f:34:b1:92:24:e8:34:53:c6:a8:31:df:
fd:bd:e3:ed:ca:fc:8f:5f:9b:7a:16:5a:9e:72:c1:
f7:53:6f:42:00:9a:ac:35:08:4b:94:16:3f:8c:6a:
03:ea:6c:f3:b0:c3:ec:fd:27:64:8c:06:d6:7c:36:
7d:f4:b7:5d:92:b4:94:c4:fe:45:4d:a1:47:91:d5:
d8:6f:58:5b:27:bd:07:f7:3e:3a:76:3b:97:57:f3:
a5:b1:d1:f7:db:21:0f:ae:b5:c6:02:9e:c5:5a:ea:
0e:6b:76:83:c4:f2:2b:b8:93:5f:91:bf:1e:68:e8:
f1:47:d5:02:ee:c3:fb:5c:61:4b:2a:2e:69:b3:04:
38:98:f7:05:73:21:ed:8d:62:a4:f7:30:2d:84:23:
54:ed:16:98:45:4c:32:69:a7:1d:f6:e2:7b:20:41:
24:98:e0:cf:1b:6c:38:03:c4:eb:c0:92:fb:c2:be:
e6:e0:35:bc:44:77:79:9d:1f:ac:70:09:fd:14:2d:
0a:2f:a3:5b:c8:ba:d1:00:89:c5:79:05:58:26:f2:
61:2d:a9:f5:60:07:52:0e:b5:43:1b:b7:f4:5e:e1:
5a:2e:13:c4:54:a4:88:f5:22:17:af:9d:f6:2d:ad:
41:09:04:24:7d:6d:ac:e2:c1:a9:a5:2d:95:f0:c5:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:06:9D:3D:19:0C:70:29:4F:C3:81:1B:B9:77:81:DD:6C:D7:DC:BE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3460d523-e2a2-4d0f-a09e-d55e45dfcf71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.86.0/24
Signature Algorithm: sha256WithRSAEncryption
60:92:5c:33:c2:d0:99:d1:e0:ce:79:0b:21:53:37:99:39:cc:
3a:0c:f5:34:ab:b8:03:b4:6d:e5:83:70:90:5d:5b:36:13:93:
45:76:5d:61:1d:13:78:0c:a2:ef:57:34:92:ac:48:a0:1a:18:
b9:0c:c9:ea:b8:41:ad:89:01:80:c4:b2:78:b6:6d:ef:b9:7f:
5f:e2:46:0c:34:0a:4b:9e:21:5e:df:75:c9:47:ce:d0:94:e0:
f6:7e:0d:8f:d1:e7:95:35:2e:66:98:68:fd:ce:08:12:cc:01:
9f:04:76:dc:17:0e:d9:ae:48:20:5f:34:5a:a2:02:25:36:be:
1e:6e:30:c6:cc:96:4f:ad:59:10:8f:be:02:99:e5:b6:1b:8c:
2c:b4:ea:28:58:ca:44:d5:aa:98:e8:b5:f0:78:24:51:b6:b9:
97:ac:31:34:ad:59:b7:a0:64:4d:c6:ad:98:6d:f6:19:ab:a2:
64:3f:55:06:99:79:15:33:6f:cc:b8:63:fd:22:9f:8f:3a:d7:
a0:8e:af:3a:d0:b8:d3:a0:9c:e7:36:17:b2:f0:0c:b3:7a:97:
af:4b:74:99:df:c8:54:39:7c:f7:9f:f3:91:9a:22:de:e6:61:
1a:0a:73:5e:10:a3:73:f5:2d:5b:5c:64:60:ca:75:1e:3b:0e:
13:c9:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:53:51 2026 by rpki-client