Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2a02f289-07ad-492e-926d-bb5a38f0b6ec.roa
File: 2a02f289-07ad-492e-926d-bb5a38f0b6ec.roa (raw, json)
Hash identifier: UGXQVe5rup9fvCAd1CaMngK1YMHDI8jnzt/BwiNsBYE=
Subject key identifier: 9A:66:6F:30:4E:FF:53:E4:54:6B:3A:7D:F1:9B:62:6D:A4:38:1F:19
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4E26DD1A1EB2DDCA4FF8315FE912E3642E2CD525
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2a02f289-07ad-492e-926d-bb5a38f0b6ec.roa
Signing time: Fri 17 Apr 2026 00:40:38 +0000
ROA not before: Fri 17 Apr 2026 00:40:38 +0000
ROA not after: Thu 16 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 17 Apr 2026 01:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:26:dd:1a:1e:b2:dd:ca:4f:f8:31:5f:e9:12:e3:64:2e:2c:d5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Apr 17 00:40:38 2026 GMT
Not After : Jul 16 23:59:59 2026 GMT
Subject: serialNumber=c1fa1335618c81765716845c8f702f10ba2d8cbe23b932392022e30a83c60040, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:b7:bc:89:92:e5:d9:a5:e0:6b:92:39:7e:
98:0d:9d:72:99:64:8f:86:4b:db:b9:78:3e:2a:ba:
27:57:a7:6c:0c:39:c2:a9:db:b0:14:a2:04:21:08:
75:49:6a:6c:3e:3a:f8:c6:90:a9:73:1e:ee:00:ba:
6e:7a:17:80:5b:f9:d2:79:95:49:c1:27:73:db:6d:
5c:03:9e:c8:b7:d9:09:99:81:49:ac:32:d7:6f:00:
09:4b:07:43:08:fb:3b:2a:7b:55:df:f8:fa:bd:fa:
8f:f9:cd:32:20:32:4d:1c:0d:5e:40:83:12:3e:2c:
9e:1a:5e:bf:2c:7a:0b:03:98:a6:60:00:a7:3d:b6:
04:be:86:d2:09:ec:5d:01:97:04:23:3b:dd:62:a7:
8d:34:9d:47:87:39:65:d9:66:09:7d:39:be:9d:23:
f6:e8:42:d3:a4:c5:8e:a5:47:58:e6:b4:c6:05:55:
ea:d4:88:43:fd:cf:c3:18:6b:e5:cb:97:a4:aa:dc:
2b:92:7d:b9:62:49:03:c9:e8:89:9d:fd:15:37:0e:
03:18:9e:b8:e5:08:4a:28:34:ae:ed:e9:f9:98:5d:
8f:32:53:53:e2:5e:37:04:69:e9:ae:10:2d:cf:a8:
59:42:aa:d0:de:bb:6d:bd:38:73:f2:50:de:d0:9b:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:66:6F:30:4E:FF:53:E4:54:6B:3A:7D:F1:9B:62:6D:A4:38:1F:19
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2a02f289-07ad-492e-926d-bb5a38f0b6ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
85:5f:42:40:63:a9:3a:ea:f1:cd:00:dc:e9:ca:4c:26:e2:bc:
85:68:c7:ec:d9:d1:34:f6:67:a6:a4:ab:c0:ac:49:ec:80:ae:
d6:4f:07:98:41:8c:0b:6c:8e:90:bb:f1:5d:0b:a5:95:9c:d8:
dd:38:4c:f4:27:62:40:8f:03:77:8a:aa:74:bd:ba:db:a3:56:
08:a2:37:cd:8c:80:58:b4:a0:e3:a9:5a:7c:32:66:d3:48:69:
2c:d7:48:c1:aa:05:76:57:0f:a6:12:94:49:06:66:7a:5d:57:
0d:b2:da:59:d1:77:4b:84:22:c2:34:8b:97:d8:d7:b3:a3:35:
a7:13:3c:c2:98:d6:9a:0a:ec:35:ec:c1:ae:0f:a7:4e:65:85:
92:a7:87:c7:a1:78:6d:8d:60:03:d4:11:e8:59:4b:fa:00:37:
a7:74:07:7f:c5:17:8d:90:29:00:89:ab:0f:1d:70:41:52:e2:
6c:f3:57:be:e5:30:02:95:b5:8b:a8:08:4e:f8:61:5e:97:f2:
b8:6f:48:71:7c:52:e9:42:b0:21:22:50:e0:c4:e3:55:ed:86:
2c:be:e3:27:7a:9b:73:d8:d4:2a:fc:df:09:1d:5e:1c:ba:4c:
0f:19:75:f6:e2:6b:e3:e8:a0:f8:aa:8f:00:45:c3:36:6e:b6:
63:ea:69:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:37:40 2026 by rpki-client