Route Origin Authorization
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/c900a6f4-b023-4bc5-b28a-f13ca1291268.roa
File: c900a6f4-b023-4bc5-b28a-f13ca1291268.roa (raw, json)
Hash identifier: JpFY12d3ft4T9FbHndGjjzCGX+qQgCrmTA4+6j/y3GA=
Subject key identifier: 3C:1F:88:51:D0:A6:FC:03:98:AC:95:7D:1E:89:B7:F6:16:82:83:03
Certificate issuer: /CN=278aab878f64e5149eadc9097465ba138f12461b78c7dd020a
Certificate serial: 29093CC6E85DD3029AD335C26DCAB6E6277B1CA0
Authority key identifier: DD:2D:8B:48:9E:ED:64:E3:A8:77:02:5B:3D:1A:DB:71:83:43:A6:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/c900a6f4-b023-4bc5-b28a-f13ca1291268.roa
Signing time: Wed 23 Sep 2026 13:08:14 +0000
ROA not before: Wed 23 Sep 2026 13:08:14 +0000
ROA not after: Tue 22 Dec 2026 23:59:59 +0000
asID: 14618
IP address blocks: 199.36.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Sep 2026 13:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:09:3c:c6:e8:5d:d3:02:9a:d3:35:c2:6d:ca:b6:e6:27:7b:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f64e5149eadc9097465ba138f12461b78c7dd020a
Validity
Not Before: Sep 23 13:08:14 2026 GMT
Not After : Dec 22 23:59:59 2026 GMT
Subject: serialNumber=b33a6065ea439e20b1686e42ca70a4c159199ae73348040db142d472ff74e026, CN=66e6bf6f-c96c-4747-9680-4d23221702e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:2c:3f:b0:8d:13:74:63:00:d1:24:a9:2b:
b3:15:a8:f9:84:69:91:dd:46:f3:e0:7d:cf:73:86:
85:02:e6:c6:9c:7c:77:24:b7:9f:52:26:19:2f:44:
91:4f:ee:44:89:1e:2c:87:78:c6:1e:da:24:be:1b:
df:a3:eb:0a:c0:a4:a8:c8:74:c2:4d:e9:8e:46:3f:
dc:b6:ed:39:d5:24:73:6c:06:ac:55:f1:da:18:a9:
58:38:b5:ae:0e:ce:df:67:fb:30:9f:6b:ad:14:3c:
1d:b1:71:ef:5e:b7:ed:27:9b:41:25:f5:4d:90:b9:
82:22:e7:fc:b3:2f:e6:7b:c1:de:13:7c:85:13:2f:
0c:b9:89:19:c2:3b:77:35:28:d0:05:7d:44:78:99:
9a:f3:c1:52:37:ae:d6:46:bd:0f:5c:99:c1:d4:37:
e1:d7:30:03:21:f9:e9:2a:5d:58:28:57:c6:b9:df:
57:7c:79:de:ac:ec:5c:77:e9:45:51:7b:5d:be:e9:
29:8e:81:3a:ad:f6:a0:ee:52:81:68:6e:7b:44:a5:
85:72:0e:24:13:19:ff:c2:e3:ab:54:d9:46:3e:05:
2e:68:b2:21:6e:74:76:72:01:4b:01:a9:5f:96:43:
fa:1b:06:6b:f8:f9:b4:10:40:ac:e3:24:b4:29:dd:
cc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1F:88:51:D0:A6:FC:03:98:AC:95:7D:1E:89:B7:F6:16:82:83:03
X509v3 Authority Key Identifier:
keyid:DD:2D:8B:48:9E:ED:64:E3:A8:77:02:5B:3D:1A:DB:71:83:43:A6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/c900a6f4-b023-4bc5-b28a-f13ca1291268.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:00:f5:4e:b9:42:24:0a:3c:e3:0e:0e:14:81:31:26:5e:59:
8b:21:d6:70:db:df:4c:da:dd:2f:8c:5d:a3:30:32:fe:f9:cf:
e3:30:69:25:cc:0b:2b:84:4b:47:73:cb:df:1d:e4:49:bf:26:
e9:d6:68:07:e7:ac:6a:cf:dc:93:cc:39:bf:ac:eb:5c:78:dc:
0a:93:fb:58:cf:37:cc:bb:27:79:50:57:8c:f0:e7:22:34:2d:
ed:98:9e:b7:72:c0:02:49:4b:b6:a5:61:08:34:e3:8f:c1:97:
4e:0e:37:0b:d8:72:16:16:0a:f8:4d:2e:88:a2:37:bd:03:98:
2b:79:8f:6e:89:33:73:48:04:df:5f:25:39:55:69:09:4b:21:
aa:fc:7c:6b:80:d0:e7:17:08:2c:9d:b6:e3:dd:87:67:87:4c:
6a:71:f0:6a:65:be:ca:2c:7b:df:7d:93:9d:ff:86:b6:8f:6f:
81:0a:ec:f8:83:3b:0c:85:30:6d:78:39:60:fb:aa:c2:42:a9:
78:46:af:c1:92:5e:8b:46:34:4c:f8:bb:24:32:d3:ac:10:ae:
d9:d8:f7:5f:a8:b2:db:95:42:0a:c7:1d:74:fc:44:d8:0a:c9:
7e:eb:7d:05:3a:1d:c4:35:d3:30:d4:ef:44:79:42:d3:f0:23:
1c:37:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:30 2026 by rpki-client