Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3e8b6f89-b2d9-4cd6-bc77-23b923843524.roa
File: 3e8b6f89-b2d9-4cd6-bc77-23b923843524.roa (raw, json)
Hash identifier: bG9sbq9QmJIPV8KtDdZBFt7rnLZVPDgixH8JzZmDQ/o=
Subject key identifier: 7F:65:10:30:B9:4C:DA:DA:4F:60:6B:CD:F1:FE:1B:0D:75:06:AA:9B
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 0124C8E8F905A032D4A33D48215C9496395A9514
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3e8b6f89-b2d9-4cd6-bc77-23b923843524.roa
Signing time: Sat 13 Jun 2026 03:40:50 +0000
ROA not before: Sat 13 Jun 2026 03:40:50 +0000
ROA not after: Fri 11 Sep 2026 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jun 2026 04:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:24:c8:e8:f9:05:a0:32:d4:a3:3d:48:21:5c:94:96:39:5a:95:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jun 13 03:40:50 2026 GMT
Not After : Sep 11 23:59:59 2026 GMT
Subject: serialNumber=cd43e1cd0e3a2a8f723afe6141d90a2532a2efc533484d86335f1186a4cf6b25, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:7f:90:ae:ed:9f:89:7d:02:46:19:45:71:
7a:e4:40:72:fd:30:36:a1:c9:29:7c:ba:ad:82:38:
1c:e5:e7:f1:c6:e2:74:f0:ed:a7:18:60:b9:0f:6d:
02:a5:1d:ad:07:62:90:34:f5:d7:a9:00:e7:a2:66:
6c:87:ee:9c:8f:1d:1d:12:52:e8:86:c3:ab:b1:bf:
ce:20:ee:92:af:0b:e9:bf:69:f4:25:39:94:16:55:
61:33:c8:6a:da:55:57:b6:85:c5:0b:ff:5b:27:3a:
b7:1b:87:5f:e4:7f:b2:81:41:48:c2:5b:a1:ca:6a:
26:fa:04:43:d9:7b:af:34:fe:3d:53:eb:6b:d3:17:
6b:36:5e:06:df:2d:98:9a:95:4f:13:ee:5c:4a:64:
1f:ee:a7:33:ca:2c:1d:1e:0f:71:f9:b4:50:19:0d:
31:68:10:d8:38:63:9e:54:ae:24:e4:bd:ce:52:2b:
7c:b8:33:7b:43:67:c3:a1:59:b3:8f:b7:cd:11:50:
e1:8f:51:d5:ca:0b:9d:b0:c8:82:3b:59:48:46:67:
7f:60:58:09:a3:c4:72:6e:60:28:bf:28:78:4f:37:
5b:d8:2a:76:bb:21:76:f4:a3:55:0f:3e:24:ef:d3:
6a:a7:c0:8b:18:44:73:27:cd:75:a1:01:d6:d0:d1:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:65:10:30:B9:4C:DA:DA:4F:60:6B:CD:F1:FE:1B:0D:75:06:AA:9B
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3e8b6f89-b2d9-4cd6-bc77-23b923843524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
4e:a2:c2:ae:f4:ed:f3:0e:b3:7d:91:5e:e4:ed:d4:2b:19:d7:
bd:c3:6b:8b:4e:38:c4:6c:3f:3e:53:f8:5e:7d:65:83:4b:17:
16:4c:61:c5:13:3f:85:f2:fb:b8:51:ff:e5:b0:1a:4a:09:86:
c0:74:46:13:37:75:01:4f:7c:4c:c1:06:eb:3d:e1:95:51:99:
07:d5:1e:b7:30:ba:df:78:63:46:8d:35:dc:b2:b5:21:62:aa:
a8:29:cb:fc:50:f1:f5:f8:be:83:c8:d6:21:e8:c4:55:5d:73:
a3:b4:db:34:1f:19:27:68:2b:44:87:78:e5:84:0b:da:ca:fe:
a5:dc:ac:05:16:a1:54:54:de:98:24:64:59:ae:75:79:42:a7:
9a:24:c8:ea:92:76:bd:7d:10:02:ff:b2:b0:a3:8e:33:ca:3f:
84:dd:d7:28:87:fb:e5:30:3e:0a:08:ed:e4:d1:a1:05:b6:f8:
fb:46:a4:b4:16:18:ce:fe:44:d3:91:1e:3f:fd:15:3c:99:1d:
2a:28:b0:17:74:5f:04:5f:83:aa:3a:e4:a4:a1:dd:85:37:b0:
fc:cd:45:28:88:88:77:7b:f9:53:01:de:27:06:12:01:e9:7f:
95:be:b6:25:08:81:dd:7d:51:ef:15:c4:2a:33:c5:27:ae:ac:
a9:0d:2b:97
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUASTI6PkFoDLUoz1IIVyUljlalRQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNjEzMDM0MDUwWhcNMjYwOTExMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZDQzZTFjZDBlM2EyYThmNzIzYWZlNjE0MWQ5MGEyNTMy
YTJlZmM1MzM0ODRkODYzMzVmMTE4NmE0Y2Y2YjI1MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDT1H+Qru2fiX0CRhlFcXrkQHL9MDahySl8uq2COBzl5/HG
4nTw7acYYLkPbQKlHa0HYpA09depAOeiZmyH7pyPHR0SUuiGw6uxv84g7pKvC+m/
afQlOZQWVWEzyGraVVe2hcUL/1snOrcbh1/kf7KBQUjCW6HKaib6BEPZe680/j1T
62vTF2s2XgbfLZialU8T7lxKZB/upzPKLB0eD3H5tFAZDTFoENg4Y55UriTkvc5S
K3y4M3tDZ8OhWbOPt80RUOGPUdXKC52wyII7WUhGZ39gWAmjxHJuYCi/KHhPN1vY
Kna7IXb0o1UPPiTv02qnwIsYRHMnzXWhAdbQ0QG7AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUf2UQMLlM2tpPYGvN8f4bDXUGqpswHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzNlOGI2Zjg5LWIyZDktNGNkNi1iYzc3LTIzYjkyMzg0MzUyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmBZzADTANBgkqhkiG9w0BAQsFAAOCAQEATqLCrvTt8w6zfZFe5O3UKxnX
vcNri044xGw/PlP4Xn1lg0sXFkxhxRM/hfL7uFH/5bAaSgmGwHRGEzd1AU98TMEG
6z3hlVGZB9UetzC633hjRo013LK1IWKqqCnL/FDx9fi+g8jWIejEVV1zo7TbNB8Z
J2grRId45YQL2sr+pdysBRahVFTemCRkWa51eUKnmiTI6pJ2vX0QAv+ysKOOM8o/
hN3XKIf75TA+Cgjt5NGhBbb4+0aktBYYzv5E05EeP/0VPJkdKiiwF3RfBF+Dqjrk
pKHdhTew/M1FKIiId3v5UwHeJwYSAel/lb62JQiB3X1R7xXEKjPFJ66sqQ0rlw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:27:52 2026 by rpki-client