Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/215bfd27-66aa-3372-96fd-d9927b60fdf9.roa
File:                     215bfd27-66aa-3372-96fd-d9927b60fdf9.roa (raw, json)
Hash identifier:          p28SqTr6CTgQFjDmIgD3C2qTOnP58ZFtPwTs/ySclV0=
Subject key identifier:   73:FD:2E:AF:EB:91:97:CF:80:4B:80:D5:30:71:DD:E9:DD:CC:90:B8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D35FE7618DF7289EFA74ECDC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/215bfd27-66aa-3372-96fd-d9927b60fdf9.roa
Signing time:             Wed 18 Mar 2026 16:12:08 +0000
ROA not before:           Wed 18 Mar 2026 16:12:08 +0000
ROA not after:            Tue 16 Jun 2026 16:12:08 +0000
asID:                     402187
IP address blocks:        23.27.216.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 30 Mar 2026 03:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:fe:76:18:df:72:89:ef:a7:4e:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 18 16:12:08 2026 GMT
            Not After : Jun 16 16:12:08 2026 GMT
        Subject: CN=84cee260-2196-461c-ab00-b8438f7d8815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:4c:99:a3:04:2f:d7:8c:64:e8:41:6c:00:
                    71:a9:7e:9a:dd:6f:85:0f:d0:88:c1:c8:41:e2:b1:
                    41:88:4f:dc:98:c1:cc:db:f5:dc:16:52:c0:8f:db:
                    b2:fe:f4:4a:f6:0b:a6:70:50:1e:4e:79:9a:c2:56:
                    e4:61:2b:31:b7:7c:b1:46:43:8e:0a:58:22:6a:57:
                    ce:6d:95:e5:67:ba:9b:d0:26:d2:f1:2d:45:25:ef:
                    e3:ba:76:30:f2:cf:1f:b2:a6:70:fe:79:ab:50:32:
                    c3:01:ac:4d:da:6c:e2:ea:e3:9f:6b:64:9b:f0:2d:
                    17:18:00:c2:4a:c2:2e:25:e5:19:07:d8:73:33:61:
                    07:3e:cf:fc:3c:40:f6:69:7e:25:fe:f4:85:8f:e3:
                    7d:22:ba:86:49:e2:d2:8e:71:e0:28:8f:b5:21:25:
                    74:07:4a:fe:00:d6:35:0f:57:0c:fa:22:86:0a:73:
                    87:55:44:35:ea:01:13:15:9f:97:20:d6:f0:b9:f8:
                    aa:94:a0:27:ba:2f:9f:98:0d:8d:7a:48:72:19:48:
                    00:82:2f:cc:d5:65:a8:e8:13:21:88:09:b7:e1:5a:
                    7a:2b:f1:b1:db:44:2d:ac:e9:ca:c8:93:dd:a0:86:
                    74:f9:93:03:9e:ec:22:77:2c:91:90:3d:23:63:67:
                    39:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FD:2E:AF:EB:91:97:CF:80:4B:80:D5:30:71:DD:E9:DD:CC:90:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/215bfd27-66aa-3372-96fd-d9927b60fdf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b1:82:e9:3b:74:98:9a:4a:29:b0:08:fe:3c:7c:85:28:28:
         2f:24:4a:08:28:df:12:21:3d:a8:94:5e:fc:74:09:e7:7b:4a:
         d5:3c:51:d8:f2:ab:82:bd:82:b3:30:8c:33:c8:12:57:a5:a6:
         72:8f:22:0a:9a:37:f8:0d:e9:ed:dc:ab:da:ee:06:5b:99:b5:
         70:d8:0d:16:6e:f7:cc:d4:cd:9d:90:43:d6:3e:d4:7d:4f:19:
         d2:74:46:2c:de:25:3c:ee:d8:e6:2c:89:ef:d4:77:96:28:2f:
         bc:d9:de:e4:af:79:eb:25:5c:7b:79:04:dd:64:84:cd:0a:13:
         70:c4:b9:85:b3:e9:69:ad:6e:33:94:b4:af:57:e3:65:eb:e3:
         e7:64:3c:6f:64:af:12:7e:4c:2c:fc:ca:a0:50:37:fd:e8:83:
         10:44:ee:63:4c:13:fc:d4:79:b4:25:17:bf:21:2d:45:63:75:
         71:45:65:9f:72:22:32:aa:dd:99:82:bb:57:43:d4:be:cf:52:
         7a:52:d8:6f:6d:b8:20:af:8c:93:4e:da:ff:3b:9a:76:6c:ac:
         36:e7:ee:51:71:7d:26:52:ec:33:d2:b3:26:b5:a2:37:e7:0a:
         1d:00:6f:74:2b:e5:4d:3a:37:03:1b:6f:3b:24:2b:b9:d9:83:
         ef:ee:3f:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01/nYY33KJ76dOzcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDMxODE2MTIwOFoXDTI2MDYxNjE2MTIwOFowLzEtMCsGA1UEAxMk
ODRjZWUyNjAtMjE5Ni00NjFjLWFiMDAtYjg0MzhmN2Q4ODE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD1MmaMEL9eMZOhBbABxqX6a3W+FD9CIwchB
4rFBiE/cmMHM2/XcFlLAj9uy/vRK9gumcFAeTnmawlbkYSsxt3yxRkOOClgialfO
bZXlZ7qb0CbS8S1FJe/junYw8s8fsqZw/nmrUDLDAaxN2mzi6uOfa2Sb8C0XGADC
SsIuJeUZB9hzM2EHPs/8PED2aX4l/vSFj+N9IrqGSeLSjnHgKI+1ISV0B0r+ANY1
D1cM+iKGCnOHVUQ16gETFZ+XINbwufiqlKAnui+fmA2NekhyGUgAgi/M1WWo6BMh
iAm34Vp6K/Gx20QtrOnKyJPdoIZ0+ZMDnuwidyyRkD0jY2c5uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHP9Lq/rkZfPgEuA1TBx3endzJC4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjE1YmZkMjctNjZhYS0z
MzcyLTk2ZmQtZDk5MjdiNjBmZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyxguk7dJiaSimwCP48fIUoKC8kSggo3xIhPaiUXvx0Ced7StU8Udjy
q4K9grMwjDPIElelpnKPIgqaN/gN6e3cq9ruBluZtXDYDRZu98zUzZ2QQ9Y+1H1P
GdJ0RizeJTzu2OYsie/Ud5YoL7zZ3uSveeslXHt5BN1khM0KE3DEuYWz6WmtbjOU
tK9X42Xr4+dkPG9krxJ+TCz8yqBQN/3ogxBE7mNME/zUebQlF78hLUVjdXFFZZ9y
IjKq3ZmCu1dD1L7PUnpS2G9tuCCvjJNO2v87mnZsrDbn7lFxfSZS7DPSsya1ojfn
Ch0Ab3Qr5U06NwMbbzskK7nZg+/uP+s=
-----END CERTIFICATE-----