Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c6a2067e-dc77-4985-b76a-1f63b0dd2e3c.roa
File:                     c6a2067e-dc77-4985-b76a-1f63b0dd2e3c.roa (raw, json)
Hash identifier:          lfskO7VAtjdc6ySmk+BANKNHirud2ePXMvuiFEOsORc=
Subject key identifier:   CA:85:87:35:A4:54:57:36:CD:F3:3E:B5:97:C1:31:2C:B3:5E:D0:BB
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       1896FFFBDBB6D740CF5C76178A42BAEC842DC475
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c6a2067e-dc77-4985-b76a-1f63b0dd2e3c.roa
Signing time:             Thu 23 Jul 2026 18:40:40 +0000
ROA not before:           Thu 23 Jul 2026 18:40:40 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:d00::/40 maxlen: 48
Validation:               Failed, certificate revoked on Thu 23 Jul 2026 19:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:96:ff:fb:db:b6:d7:40:cf:5c:76:17:8a:42:ba:ec:84:2d:c4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 23 18:40:40 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=5f650009acf5f6694d32eaeffb8b4bafd5d109fb06e4d13b4bc68d6f02f4bf83, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:d3:8b:e1:c3:7a:32:ec:89:7c:34:7f:ee:
                    72:1f:b8:e0:74:ac:9f:15:40:ae:b2:b6:3c:b9:30:
                    89:c3:4b:2d:84:00:09:72:bd:80:3a:a9:b3:9f:88:
                    85:52:84:fb:fc:98:3b:61:68:11:d8:62:42:ba:f6:
                    5d:80:a6:38:d3:5c:f3:2f:7b:17:39:4a:d1:ee:34:
                    3e:ce:01:24:41:fd:a4:10:b3:b5:f0:48:0a:38:51:
                    e3:4a:f1:23:c5:e3:b9:f5:9f:ce:16:d3:cc:cb:84:
                    b5:00:a5:1c:17:c6:38:9c:91:81:97:b5:7a:83:06:
                    8c:2e:f2:78:ac:91:b9:95:43:69:c4:65:d3:70:05:
                    f1:6d:30:a9:a7:0d:04:df:65:01:0a:ec:27:e5:d4:
                    60:bc:99:6d:2f:dc:d6:6c:26:d2:80:2f:e6:06:f4:
                    fd:71:a5:4b:17:c9:44:ce:4c:e4:66:fe:19:d1:d8:
                    48:9f:5f:c3:de:50:2f:fd:74:f7:c9:88:6f:1c:f1:
                    53:d0:12:86:df:28:4f:bb:f6:79:50:2a:b7:59:bd:
                    91:c1:ed:b2:29:27:b5:c5:2d:0d:c5:15:e4:96:f5:
                    95:3a:2c:6e:29:d7:5c:35:ff:f1:48:61:84:2c:39:
                    94:62:87:71:87:25:91:3e:98:1e:ed:bb:03:bb:02:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:85:87:35:A4:54:57:36:CD:F3:3E:B5:97:C1:31:2C:B3:5E:D0:BB
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c6a2067e-dc77-4985-b76a-1f63b0dd2e3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:60:02:9a:6f:4c:76:50:4c:55:8e:5c:1d:99:7e:93:c7:f3:
         60:7e:04:98:db:e0:c3:e8:78:55:25:1d:dd:93:d1:71:43:0b:
         e6:bf:07:0c:3f:54:8c:78:42:63:20:0e:ae:25:b8:65:4e:73:
         89:43:21:66:49:2f:90:10:6d:1f:04:fb:38:aa:e9:3f:d9:b7:
         5d:fb:7a:4f:53:80:16:d2:91:bf:36:28:33:22:5d:f4:dc:c6:
         ce:ff:7c:17:73:43:0c:a3:76:8f:93:5f:22:15:5f:61:61:b5:
         d6:41:77:9b:65:55:aa:25:20:29:b9:7a:8f:c9:ef:5a:43:44:
         65:c2:34:17:61:7f:f0:bd:32:42:68:89:65:c8:34:9f:1f:fb:
         0a:15:f5:d8:c8:8a:d0:69:0d:3d:80:6c:65:64:5a:ac:b0:d1:
         91:24:b4:30:4b:df:ed:f9:fc:ed:bd:c7:0a:72:14:0f:f0:3d:
         af:40:90:ad:a4:8f:02:92:33:3a:52:16:22:2d:5d:98:43:88:
         73:e6:04:86:1d:57:3d:e6:80:0a:0a:eb:e4:86:8c:ea:1b:15:
         2c:9f:5a:bf:b0:f1:c7:e4:bf:7b:d3:89:3f:e5:50:9c:f8:9b:
         0b:4b:9e:6d:c3:d0:05:7a:0d:3c:56:80:19:54:62:dd:ca:be:
         af:cf:56:71
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----