Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/781b25cd-124c-4d45-91ea-5d2c5130aa55.roa
File: 781b25cd-124c-4d45-91ea-5d2c5130aa55.roa (raw, json)
Hash identifier: rfVW6jxseSYX3LEmFJ9J7zDwD0HMf/oyKp92C2S9R2c=
Subject key identifier: 4D:19:83:0F:AB:8B:E5:A4:63:87:36:7A:94:C5:B0:A5:01:99:9B:D1
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 1FA4E2D6B140041B52430116E326538F3959817F
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/781b25cd-124c-4d45-91ea-5d2c5130aa55.roa
Signing time: Sun 01 Mar 2026 20:10:38 +0000
ROA not before: Sun 01 Mar 2026 20:10:38 +0000
ROA not after: Sat 30 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 01 Mar 2026 21:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a4:e2:d6:b1:40:04:1b:52:43:01:16:e3:26:53:8f:39:59:81:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 1 20:10:38 2026 GMT
Not After : May 30 23:59:59 2026 GMT
Subject: serialNumber=e468c9ad3bf2b5f0bae89f811b36d374636cdfdbd258d694cfcfb1981e591ec4, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:b7:d8:5b:73:91:a4:ac:29:f6:4a:b5:2e:
2f:66:49:a3:65:d9:b6:5a:1b:02:7f:a5:d9:8e:a0:
72:6b:fd:8d:8e:3c:da:c7:4c:f1:de:c1:9b:86:0f:
24:7c:f1:b8:18:22:bd:ce:51:52:c7:5c:02:42:15:
35:52:e3:43:a2:b4:08:cf:0d:7e:62:80:7e:51:4f:
88:48:e7:e8:7a:d4:36:bb:cb:0b:3a:44:ec:29:90:
60:b7:f5:17:06:78:c8:1b:41:9c:c9:0e:66:33:66:
98:c6:57:12:4f:99:a7:6a:f7:39:63:6a:65:4f:e3:
44:35:28:cd:b3:4d:cd:14:40:44:11:b9:84:fc:50:
71:f1:bf:ff:56:ef:95:10:ba:a3:36:b4:f6:a9:a6:
ac:ba:75:85:89:83:c3:85:4e:27:93:b8:e3:96:2b:
d9:a6:fc:12:d2:11:0f:e7:a3:07:86:86:4b:4a:50:
17:18:2d:73:e9:9c:ea:ad:99:00:78:e7:03:26:8f:
20:7d:c2:da:b1:36:49:c5:c6:51:a2:8b:5d:a3:16:
fc:68:7e:ef:1c:b7:cf:21:6d:0c:36:e8:7f:46:0a:
7e:b7:5a:b2:42:d9:b7:52:ec:63:d0:73:9a:a5:61:
2f:41:3e:4b:be:52:b8:46:12:06:6d:11:b8:a9:6f:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:19:83:0F:AB:8B:E5:A4:63:87:36:7A:94:C5:B0:A5:01:99:9B:D1
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/781b25cd-124c-4d45-91ea-5d2c5130aa55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
28:7d:1c:1f:0c:64:27:b4:84:9e:0c:57:aa:62:2a:54:1a:6c:
9f:01:2b:9b:72:c5:c3:ec:01:53:7e:3d:af:d3:a8:2b:43:25:
cc:61:5d:5d:f7:da:4c:5f:e7:81:30:51:29:b9:c6:63:2b:b7:
69:42:bd:94:46:44:c0:f0:fb:ab:02:22:95:a1:bc:7c:79:23:
c2:80:a8:77:2c:ec:22:0b:f7:ad:45:e4:45:70:3a:2e:ff:a7:
9b:91:78:9f:49:a2:ea:b2:bf:d0:c8:50:ae:19:58:f5:ba:fc:
10:f8:77:1b:5b:e9:d6:6d:95:4b:b4:a1:03:0a:83:ac:c7:ad:
c6:51:f2:63:d2:45:2f:0f:94:65:45:ce:5d:80:fc:7f:4f:03:
66:9d:a3:ba:80:71:57:c0:30:72:00:f1:19:9b:7a:d7:9c:d9:
60:d9:65:21:6f:d2:37:8e:7c:85:89:35:2f:27:9e:e0:35:a0:
30:e1:f9:9f:07:10:40:18:27:54:67:8d:77:93:3a:b8:90:33:
68:56:de:fb:9b:8f:4d:7d:46:39:b8:fd:19:99:31:b5:42:78:
6c:48:db:6b:90:f0:21:b9:51:7c:91:61:b2:b9:5e:08:99:97:
50:65:b1:3e:d9:be:c7:f7:24:10:53:52:18:db:60:03:95:19:
16:92:3e:f8
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUH6Ti1rFABBtSQwEW4yZTjzlZgX8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMzAxMjAxMDM4WhcNMjYwNTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNDY4YzlhZDNiZjJiNWYwYmFlODlmODExYjM2ZDM3NDYz
NmNkZmRiZDI1OGQ2OTRjZmNmYjE5ODFlNTkxZWM0MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+g7fYW3ORpKwp9kq1Li9mSaNl2bZaGwJ/pdmOoHJr/Y2O
PNrHTPHewZuGDyR88bgYIr3OUVLHXAJCFTVS40OitAjPDX5igH5RT4hI5+h61Da7
yws6ROwpkGC39RcGeMgbQZzJDmYzZpjGVxJPmadq9zljamVP40Q1KM2zTc0UQEQR
uYT8UHHxv/9W75UQuqM2tPappqy6dYWJg8OFTieTuOOWK9mm/BLSEQ/noweGhktK
UBcYLXPpnOqtmQB45wMmjyB9wtqxNknFxlGii12jFvxofu8ct88hbQw26H9GCn63
WrJC2bdS7GPQc5qlYS9BPku+UrhGEgZtEbipbzVlAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUTRmDD6uL5aRjhzZ6lMWwpQGZm9EwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzc4MWIyNWNkLTEyNGMtNGQ0NS05MWVhLTVkMmM1MTMwYWE1NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmBZzADTANBgkqhkiG9w0BAQsFAAOCAQEAKH0cHwxkJ7SEngxXqmIqVBps
nwErm3LFw+wBU349r9OoK0MlzGFdXffaTF/ngTBRKbnGYyu3aUK9lEZEwPD7qwIi
laG8fHkjwoCodyzsIgv3rUXkRXA6Lv+nm5F4n0mi6rK/0MhQrhlY9br8EPh3G1vp
1m2VS7ShAwqDrMetxlHyY9JFLw+UZUXOXYD8f08DZp2juoBxV8AwcgDxGZt615zZ
YNllIW/SN458hYk1Lyee4DWgMOH5nwcQQBgnVGeNd5M6uJAzaFbe+5uPTX1GObj9
GZkxtUJ4bEjba5DwIblRfJFhsrleCJmXUGWxPtm+x/ckEFNSGNtgA5UZFpI++A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:19 2026 by rpki-client