Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS149795.roa
File:                     AS149795.roa (raw, json)
Hash identifier:          4ZuM4EKbcu3wMuEwUXSV/xsXLWEzUtT07HdFd1/3pa8=
Subject key identifier:   54:35:84:34:65:E1:FA:49:99:04:03:91:14:DC:07:3D:61:8B:E0:BF
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       37E2A813A3A3E77F0F7277160B3C3899DEECD013
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS149795.roa
Signing time:             Tue 05 Nov 2024 03:40:04 +0000
ROA not before:           Tue 05 Nov 2024 03:35:04 +0000
ROA not after:            Tue 04 Nov 2025 03:40:04 +0000
asID:                     149795
IP address blocks:        2a06:a005:6e0::/44 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e2:a8:13:a3:a3:e7:7f:0f:72:77:16:0b:3c:38:99:de:ec:d0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:04 2024 GMT
            Not After : Nov  4 03:40:04 2025 GMT
        Subject: CN=5435843465E1FA499904039114DC073D618BE0BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:35:05:ca:a0:5e:24:0c:f2:3b:ec:75:65:
                    7a:ed:06:64:75:1d:8c:0b:dd:68:c6:85:61:9b:fe:
                    71:53:07:ea:d1:3e:5e:85:0f:5f:1a:de:b1:a2:c1:
                    cf:3b:2d:1c:e0:0b:e3:af:8f:c7:07:15:3c:aa:ea:
                    57:af:0e:4a:ca:23:2c:d0:4c:94:d3:60:7d:ed:43:
                    b2:42:37:3a:d2:5a:bc:f6:92:99:3f:a5:2c:5e:49:
                    2a:1a:8e:0a:80:ad:3f:bd:af:6d:22:9b:73:50:be:
                    de:07:7a:fd:28:eb:4e:c1:d9:e3:e1:62:30:9e:f2:
                    5f:2e:e3:e2:e2:34:de:30:0e:e5:e6:76:56:cc:4f:
                    36:62:6c:5b:bf:41:39:26:c5:7f:5b:56:ac:92:ac:
                    4c:c9:2e:1d:65:dd:5e:9a:cb:fd:4c:72:25:6c:c6:
                    d1:bf:dc:41:69:5d:e1:99:6b:07:56:d0:8e:c4:d5:
                    2d:a6:b0:67:2a:9d:0a:dc:5d:be:a9:a7:a0:48:4a:
                    5e:f4:31:04:d0:cf:1b:f6:cb:22:35:b2:7e:84:3f:
                    eb:c0:95:47:e0:f5:2a:c3:0d:5f:4f:12:d4:34:55:
                    71:f6:ed:14:2e:46:67:e1:9e:5d:f5:75:11:f5:28:
                    dc:84:24:2b:9d:ea:21:f6:8c:cd:78:5e:9e:80:6f:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:35:84:34:65:E1:FA:49:99:04:03:91:14:DC:07:3D:61:8B:E0:BF
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS149795.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:6e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         45:3b:db:b6:d2:56:13:9a:33:ad:dd:e0:ce:59:d5:c5:ce:11:
         fe:64:e5:84:d9:18:ad:7c:76:5d:e8:68:e8:6e:51:d8:0c:0a:
         db:56:80:67:35:9b:fd:84:14:d3:bf:21:d1:a2:2c:b9:ee:22:
         ea:06:73:3f:d1:51:50:3e:3f:97:78:59:4d:06:ed:fe:da:40:
         15:a6:6d:19:80:67:48:02:41:80:f7:8c:c5:37:98:af:a6:d1:
         fc:01:eb:61:dc:8d:16:f4:e9:63:1d:08:bd:37:6d:16:36:63:
         f0:68:1d:68:98:c4:9c:21:8b:d9:fe:c9:2d:ca:e7:9f:70:e4:
         4b:02:da:45:5e:f8:30:53:ed:2d:29:81:2b:ac:08:e8:15:86:
         97:ba:c1:e5:b9:d4:18:10:fd:f2:ba:84:75:56:23:fb:da:ed:
         fd:33:29:63:37:96:91:d3:fe:6d:f6:f9:19:1a:ea:a0:3a:84:
         02:59:8c:0f:91:13:9e:b1:cd:33:af:a1:3b:4d:79:59:90:7a:
         31:df:47:4a:55:6a:65:94:54:22:59:ef:be:83:53:d1:e2:3b:
         a0:71:69:12:67:ff:37:fa:bb:39:71:2a:36:52:75:44:db:3b:
         8f:1c:b0:79:8a:63:68:c2:c0:7e:68:fa:43:6b:da:7e:0f:c0:
         d3:4c:d1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:47 2025 by rpki-client