Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4fe8fc8e-71ac-46e9-89b4-db522afeac49.roa
File: 4fe8fc8e-71ac-46e9-89b4-db522afeac49.roa (raw, json)
Hash identifier: 6nOu5vKnJQYb7TPx8T6zKdgjvOXXoTbWN01a+tQWwpc=
Subject key identifier: 7E:63:53:33:33:BB:51:66:26:CF:0C:CB:71:0E:2B:92:7D:35:EE:21
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 522A11E09EBE55CD9F589B6C058635CFA28761F4
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4fe8fc8e-71ac-46e9-89b4-db522afeac49.roa
Signing time: Wed 25 Mar 2026 21:40:41 +0000
ROA not before: Wed 25 Mar 2026 21:40:41 +0000
ROA not after: Tue 23 Jun 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Mar 2026 22:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:2a:11:e0:9e:be:55:cd:9f:58:9b:6c:05:86:35:cf:a2:87:61:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 25 21:40:41 2026 GMT
Not After : Jun 23 23:59:59 2026 GMT
Subject: serialNumber=f3e90384e8ffbf22b1837d3b58640e97cf3fa6b408a48cd57f5469ca8165aa00, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:91:44:ca:c5:29:41:8a:51:bc:7c:99:67:
f6:aa:25:c9:cd:da:71:21:06:0a:37:a0:f2:3c:99:
d7:ff:0c:b8:b6:ec:4d:23:87:9b:78:b9:d5:4e:aa:
e2:69:aa:96:10:f9:dd:23:5f:1d:85:c6:ca:2b:7d:
8e:2f:42:9b:35:85:9c:46:8d:7f:ef:78:4d:55:d1:
48:b2:e9:ea:13:60:1f:eb:fe:6e:29:a7:aa:94:89:
22:35:ca:15:3f:94:49:40:09:29:fb:9d:b4:1c:a1:
cd:45:38:24:cb:18:f1:cc:bf:c7:ca:6b:95:1a:5b:
11:ec:31:9a:53:37:d5:66:a1:bc:c5:06:1c:da:7a:
7e:c3:c4:a5:8c:9e:80:48:07:1a:e4:6d:88:61:27:
23:7f:29:4e:62:4b:9b:b4:44:cb:f9:e7:4f:4c:7a:
18:23:97:98:99:3f:9e:7c:72:1b:0b:22:48:06:fa:
83:08:0e:bc:0d:ac:66:59:41:f8:c1:39:3f:c7:94:
25:94:f7:36:f3:5b:7a:87:12:b8:cc:89:2f:bb:6a:
6d:b0:c0:d4:9e:dd:2f:63:9f:40:98:a8:27:b0:37:
fd:c7:2a:d5:fb:51:8c:1b:40:31:c8:9f:c0:b9:7c:
e0:55:14:16:74:9c:5c:a6:d8:b4:c6:ac:59:83:0d:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:63:53:33:33:BB:51:66:26:CF:0C:CB:71:0E:2B:92:7D:35:EE:21
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/4fe8fc8e-71ac-46e9-89b4-db522afeac49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:d00::/40
Signature Algorithm: sha256WithRSAEncryption
16:87:23:91:b8:2b:0a:93:15:9d:da:cc:0f:f5:4b:5a:8a:81:
cc:5c:1a:fb:4d:2e:1b:cd:8b:b6:7d:52:a9:87:79:f7:9b:57:
f1:84:77:07:0a:04:f1:d5:e7:a4:07:a4:19:1d:b1:48:aa:8a:
e3:80:cf:31:a6:36:b9:49:78:b3:25:cf:46:3e:c1:7d:5d:78:
cf:da:29:69:82:e3:1e:ef:2f:d2:f2:40:1c:f5:e9:f1:11:eb:
2e:5d:4e:a6:1b:bd:1b:78:d0:d0:e2:d0:d2:df:41:27:8d:e8:
0c:d2:c8:ce:81:ab:22:5f:7e:06:a8:d8:2c:be:86:86:04:ab:
9e:22:c4:a8:74:25:e5:db:8b:f4:6a:52:00:49:98:27:fe:6a:
0e:d8:a2:7a:37:ba:04:0f:68:d4:29:49:53:f7:15:5f:8b:98:
c1:41:d1:5f:34:1e:7c:a2:c1:ed:ca:f1:9b:e2:1e:48:9f:2d:
e0:4d:aa:cb:33:4f:58:90:16:10:cd:d9:9d:40:a4:e4:a9:f1:
da:b2:60:72:02:94:2f:52:d9:7e:5b:28:a3:9d:a9:c7:52:2b:
ff:7e:75:ba:c5:b6:ff:38:0f:cc:aa:2d:15:09:14:6f:d1:7b:
80:95:aa:01:f4:0d:72:55:5a:a0:c2:cf:2c:09:a2:0d:c0:5c:
e9:e9:70:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:12:15 2026 by rpki-client