Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3cdf919b-3f62-4a3e-bd9b-4d5e20dcca5e.roa
File:                     3cdf919b-3f62-4a3e-bd9b-4d5e20dcca5e.roa (raw, json)
Hash identifier:          g2XAmnn9YewppD4q9/SbzW1JogexiR8k94FA5IKpzSg=
Subject key identifier:   67:BA:65:F9:C9:4F:3B:FC:41:88:CA:44:3D:4C:82:54:B2:DA:46:03
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       235C1D7761487DD6D4DC6DE7873011D79846BEA8
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3cdf919b-3f62-4a3e-bd9b-4d5e20dcca5e.roa
Signing time:             Sun 20 Sep 2026 18:47:18 +0000
ROA not before:           Sun 20 Sep 2026 18:47:18 +0000
ROA not after:            Sat 19 Dec 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:d00::/40 maxlen: 48
Validation:               Failed, certificate revoked on Sun 20 Sep 2026 20:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5c:1d:77:61:48:7d:d6:d4:dc:6d:e7:87:30:11:d7:98:46:be:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Sep 20 18:47:18 2026 GMT
            Not After : Dec 19 23:59:59 2026 GMT
        Subject: serialNumber=20bd3c3e9b0d0051688e80db6f847991a3d6007c4d983545701279e92810576f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:04:e8:38:4b:71:a7:33:75:1e:00:13:8a:84:
                    ed:8d:21:cb:da:e1:42:26:a3:e2:f6:1d:3f:fd:5d:
                    cd:d7:d1:53:98:4f:c5:94:99:f3:6f:e3:3f:89:b1:
                    29:5f:d5:8d:0e:7f:6a:28:bc:50:b4:b3:34:df:b5:
                    36:0e:84:64:4a:9e:a3:25:0e:43:99:a9:9d:9a:f2:
                    05:1c:b1:a7:35:a3:12:77:7e:af:f5:a5:65:16:68:
                    cd:30:1f:6d:b8:02:fb:3f:95:64:22:30:34:10:dd:
                    de:2a:50:f1:67:ca:99:a1:57:ee:f9:dd:ee:91:5d:
                    e6:bf:b6:59:7c:d3:8f:81:58:ef:5a:28:e2:04:67:
                    f5:86:af:52:98:6e:38:60:4f:91:f8:4f:48:7a:a2:
                    df:8d:17:f2:33:a4:74:0f:f8:41:a5:6e:ec:4b:d8:
                    76:c4:93:67:35:94:54:34:8b:56:d6:31:1a:ac:a6:
                    cd:5a:fe:37:1b:c0:cb:d7:0c:dc:08:6b:0d:2e:39:
                    8b:e6:4a:15:ea:3f:13:78:db:fa:98:5f:05:ac:15:
                    1c:7b:98:81:29:29:b4:53:cb:64:4e:77:c4:ef:58:
                    24:5d:38:b0:92:6e:f0:de:a0:7e:db:de:d8:e4:b9:
                    30:18:2c:8d:6d:0a:9a:be:6d:9c:1a:f4:e2:02:29:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BA:65:F9:C9:4F:3B:FC:41:88:CA:44:3D:4C:82:54:B2:DA:46:03
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3cdf919b-3f62-4a3e-bd9b-4d5e20dcca5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:c1:ed:13:49:73:79:08:7c:12:32:9b:68:3a:f5:4b:bb:cb:
         f9:5d:b5:70:41:cb:ae:3e:6b:49:01:17:88:f7:c7:a9:d5:2a:
         80:f2:08:6e:77:18:78:b6:75:40:ab:0b:2b:84:00:f1:ef:04:
         f8:ea:fc:81:6a:97:f2:d0:f9:9f:98:40:99:db:14:f0:8e:66:
         2a:43:19:94:05:3e:8d:3c:cb:14:cd:e9:c7:97:06:cd:3f:1c:
         21:f1:79:22:a1:6b:7c:a2:60:2b:28:aa:6a:1e:a1:41:88:99:
         44:2e:d4:31:1f:c8:a9:92:b9:f1:8a:3d:4d:e3:ed:16:43:3f:
         3a:05:9f:d2:f4:8f:39:f6:23:bf:a7:56:c8:74:4f:bb:c4:75:
         db:96:32:5c:c7:97:ab:74:36:9f:48:bc:6f:c4:fe:d2:16:76:
         e4:58:0e:b2:3a:1a:37:6f:00:87:06:ec:e7:88:a3:b0:04:d6:
         49:8b:c9:c1:e8:0c:98:e8:b3:b3:79:64:8a:20:82:5f:e9:ff:
         35:cf:ca:ab:83:a7:6a:9e:f1:41:0a:9c:ad:83:c1:f5:c1:6a:
         1e:35:fa:6e:c5:08:23:ad:1a:86:52:52:30:de:b6:44:4d:19:
         e2:f5:7a:1b:94:a3:a2:7b:dc:e4:cb:f0:2b:e5:61:21:b6:51:
         06:a9:27:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----