Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32372e302f32342d3234203d3e20383334.roa
File:                     36352e38372e32372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          H/dHoRJm85/JYzDV2DT5T0DWPMJYHxr5ABvSBAIZQ/M=
Subject key identifier:   EF:9E:89:FA:3B:DF:D7:7C:49:DD:92:28:DF:96:50:CE:73:E3:9F:08
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       7CD84F5E5B6CC617B898BAEF06A00F93CDF849BE
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32372e302f32342d3234203d3e20383334.roa
Signing time:             Fri 16 Oct 2026 09:34:06 +0000
ROA not before:           Fri 16 Oct 2026 09:29:06 +0000
ROA not after:            Fri 15 Oct 2027 09:34:06 +0000
asID:                     834
IP address blocks:        65.87.27.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 11 Nov 2026 08:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d8:4f:5e:5b:6c:c6:17:b8:98:ba:ef:06:a0:0f:93:cd:f8:49:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: Oct 16 09:29:06 2026 GMT
            Not After : Oct 15 09:34:06 2027 GMT
        Subject: CN=EF9E89FA3BDFD77C49DD9228DF9650CE73E39F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:e6:35:21:8c:e5:9d:37:f4:df:dc:74:25:
                    aa:2a:d6:9d:81:29:27:a4:7d:69:74:d6:8a:89:84:
                    9c:f1:73:88:ac:c2:e0:46:3e:89:a8:c9:10:8c:cb:
                    2d:36:e1:a1:9c:90:88:13:9a:56:c0:40:b4:06:ec:
                    a0:b5:7f:75:68:7b:1e:88:fe:e9:d6:29:2d:15:60:
                    54:f7:12:4e:1a:02:2c:8c:32:85:b4:55:9d:f4:e1:
                    4c:69:1d:65:95:e4:2f:37:c8:6e:e1:7a:1b:a3:58:
                    7d:3d:48:f2:66:1d:f1:74:83:c2:49:9c:27:dc:45:
                    02:05:1b:ec:9a:c4:4a:e8:b3:98:f0:5e:11:08:a1:
                    7c:75:d5:df:1d:f1:15:ed:dc:29:1c:b1:99:a6:f8:
                    e8:cd:b7:2d:a9:16:ee:23:60:1c:f0:f8:c2:a7:bd:
                    f4:e9:7a:d1:e4:23:48:5b:c0:e3:75:33:46:35:fa:
                    5f:3b:26:87:1f:ea:70:a5:92:03:e3:07:6c:eb:fd:
                    b4:de:35:90:b5:cb:55:a1:5e:98:db:37:2a:e3:22:
                    c4:46:fa:72:69:27:94:16:ef:c1:2e:78:0c:e5:83:
                    12:0b:e6:aa:eb:09:09:f2:cb:e7:72:92:93:fa:1f:
                    a6:cf:7d:0b:17:e7:18:af:4a:af:21:a4:9e:c4:5f:
                    26:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9E:89:FA:3B:DF:D7:7C:49:DD:92:28:DF:96:50:CE:73:E3:9F:08
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:b4:b8:dd:6c:63:7e:aa:95:6c:fe:be:18:bc:7e:ab:f9:15:
         d0:7a:62:c8:ba:05:ba:e0:d2:46:9e:50:f9:5c:6e:24:8e:d8:
         1d:72:cb:7b:ff:b6:15:7d:f5:e0:30:ce:59:c2:b2:8c:47:a4:
         45:b6:82:8b:d3:45:d5:67:32:82:68:23:2a:f4:a3:3b:43:1b:
         56:2f:fb:d7:9c:35:d2:e5:58:78:41:84:76:fa:04:0c:5f:b2:
         8a:60:e2:98:54:95:fd:4d:cf:0f:f9:da:f8:f8:21:83:65:57:
         f6:e5:50:a7:25:58:51:f1:e9:44:84:c0:74:a5:e9:3f:ae:65:
         30:79:05:da:3b:8d:ad:3e:bb:f1:c2:ca:f4:c4:55:57:47:22:
         ac:41:da:ef:57:d1:3d:2d:ba:fa:ce:ca:7e:b8:c7:13:17:c9:
         60:e4:11:f1:65:a1:50:b4:45:6e:00:a5:2e:c7:1b:8e:d2:fb:
         d9:e2:05:68:07:89:6a:3d:ca:3c:f7:bd:00:d6:68:2f:2e:13:
         98:eb:45:0e:1f:91:95:5f:21:3c:fe:7d:fa:4c:18:cf:29:d9:
         7f:1f:a2:8e:c3:f6:ab:5e:af:e2:02:b0:17:a6:c7:c6:10:c7:
         26:2a:51:4b:ea:a0:68:c1:dc:95:5f:fc:8a:55:3d:f2:4a:ee:
         4a:a5:ff:de
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUfNhPXltsxhe4mLrvBqAPk834Sb4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTVjNGM2NTViMmM2OTlmMTcwYzcyYTkyOTUzNDVmMGJh
ODYyY2U4NTMwMjU0YzNjZTMwHhcNMjYxMDE2MDkyOTA2WhcNMjcxMDE1MDkzNDA2
WjAzMTEwLwYDVQQDEyhFRjlFODlGQTNCREZENzdDNDlERDkyMjhERjk2NTBDRTcz
RTM5RjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl7mNSGM5Z03
9N/cdCWqKtadgSknpH1pdNaKiYSc8XOIrMLgRj6JqMkQjMstNuGhnJCIE5pWwEC0
BuygtX91aHseiP7p1iktFWBU9xJOGgIsjDKFtFWd9OFMaR1lleQvN8hu4Xobo1h9
PUjyZh3xdIPCSZwn3EUCBRvsmsRK6LOY8F4RCKF8ddXfHfEV7dwpHLGZpvjozbct
qRbuI2Ac8PjCp7306XrR5CNIW8DjdTNGNfpfOyaHH+pwpZID4wds6/203jWQtctV
oV6Y2zcq4yLERvpyaSeUFu/BLngM5YMSC+aq6wkJ8svncpKT+h+mz30LF+cYr0qv
IaSexF8msQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFO+eifo739d8Sd2SKN+WUM5z
458IMB8GA1UdIwQYMBaAFAdL6FDbEF8/TqivGMsSkkes+bhpMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2MwYTllYWUwNDg2MTQ4YjZhMTA5OTcyODYxMmMwYjE2LzAv
MDc0QkU4NTBEQjEwNUYzRjRFQThBRjE4Q0IxMjkyNDdBQ0Y5Qjg2OS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzU2ODZhZmFjLTgwYjYtNDRlMy05OGIyLTczZmI2Y2QyYjE0Yi9lNWM0
YzY1NWIyYzY5OWYxNzBjNzJhOTI5NTM0NWYwYmE4NjJjZTg1MzAyNTRjM2NlMy5j
ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2MwYTllYWUwNDg2MTQ4YjZhMTA5OTcy
ODYxMmMwYjE2LzAvMzYzNTJlMzgzNzJlMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAEFXGzANBgkqhkiG9w0BAQsFAAOCAQEAobS4
3WxjfqqVbP6+GLx+q/kV0HpiyLoFuuDSRp5Q+VxuJI7YHXLLe/+2FX314DDOWcKy
jEekRbaCi9NF1WcygmgjKvSjO0MbVi/715w10uVYeEGEdvoEDF+yimDimFSV/U3P
D/na+Pghg2VX9uVQpyVYUfHpRITAdKXpP65lMHkF2juNrT678cLK9MRVV0cirEHa
71fRPS26+s7KfrjHExfJYOQR8WWhULRFbgClLscbjtL72eIFaAeJaj3KPPe9ANZo
Ly4TmOtFDh+RlV8hPP59+kwYzynZfx+ijsP2q16v4gKwF6bHxhDHJipRS+qgaMHc
lV/8ilU98kruSqX/3g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:44:10 2026 by rpki-client