Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS19625.roa
File:                     AS19625.roa (raw, json)
Hash identifier:          RRGJFrE1Haow2u3kICFgu6nq21/oggMMQR0oMcTMePs=
Subject key identifier:   8C:8F:59:9A:F5:54:6F:1A:BF:A4:39:35:49:3C:62:9A:53:14:43:AF
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       26B7AC02A5B8D4CF771D95D10E81F26FDC7D04EC
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS19625.roa
Signing time:             Tue 05 Nov 2024 03:40:01 +0000
ROA not before:           Tue 05 Nov 2024 03:35:01 +0000
ROA not after:            Tue 04 Nov 2025 03:40:01 +0000
asID:                     19625
IP address blocks:        2a06:a005:1530::/44 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b7:ac:02:a5:b8:d4:cf:77:1d:95:d1:0e:81:f2:6f:dc:7d:04:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:01 2024 GMT
            Not After : Nov  4 03:40:01 2025 GMT
        Subject: CN=8C8F599AF5546F1ABFA43935493C629A531443AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:39:d8:76:40:27:0c:0d:d5:1e:a3:5b:a7:5b:
                    7a:f8:58:36:a0:89:e1:a9:d2:1a:24:f2:5b:f8:a5:
                    09:4d:1e:05:4e:be:c1:9c:f7:2e:14:17:93:c6:ad:
                    09:6d:10:0a:af:60:80:4c:11:5b:e5:42:f8:73:3d:
                    90:36:be:d5:72:a9:4e:6a:85:da:49:d1:d9:5f:b6:
                    b9:8c:b4:39:fc:cc:dd:bb:83:a8:10:80:55:6d:61:
                    9a:f6:f3:67:82:43:e7:b9:27:98:29:2a:73:91:0e:
                    bf:96:d0:b7:c8:5b:d5:2c:97:0b:a1:76:36:f4:f0:
                    92:e2:3d:9c:f0:c2:18:16:9e:42:79:05:e1:3e:bc:
                    ec:2b:84:0b:54:60:7f:01:14:df:d4:50:6c:fe:f4:
                    de:a9:f9:ce:44:5b:d3:b0:34:c9:06:09:5a:80:1a:
                    cd:f4:83:5f:0f:85:f8:af:ed:02:82:bc:a0:b9:e9:
                    d3:d9:f2:2f:33:28:3d:7c:aa:5a:38:d4:8b:03:f4:
                    e6:4b:cf:f1:9d:61:a0:c4:f4:60:aa:a3:70:67:ac:
                    57:d2:e8:4c:2d:09:e9:eb:a0:13:17:6b:dd:86:d8:
                    f6:f9:d7:b9:c6:16:77:05:11:cc:2b:81:d7:39:07:
                    11:8b:b5:f5:06:46:1d:64:98:1a:aa:90:3e:e7:22:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8F:59:9A:F5:54:6F:1A:BF:A4:39:35:49:3C:62:9A:53:14:43:AF
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS19625.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1530::/44

    Signature Algorithm: sha256WithRSAEncryption
         3f:9e:42:2e:4f:12:f4:3a:77:3e:88:f4:a0:90:9f:43:25:35:
         72:d0:a9:74:79:e8:61:5d:23:a1:f4:e9:7d:da:10:2a:bb:01:
         16:58:2a:90:ec:fd:9e:ea:ac:af:6a:61:9b:c0:7f:ed:0e:59:
         7d:08:1f:5d:92:42:77:e6:7d:db:ef:ec:ed:22:a1:b8:ed:ac:
         fd:38:9f:0f:41:3c:bd:97:18:af:09:83:36:e4:8e:5b:c6:c0:
         7b:3c:64:66:91:a7:ac:a1:cd:6a:29:c8:72:c7:7d:1e:4f:74:
         75:1b:d7:e8:cf:48:2b:57:50:f8:8c:e7:91:b2:e5:e3:4d:69:
         1f:fe:45:8c:4c:f7:df:86:9e:be:5e:7b:16:7d:28:e1:b7:a8:
         f5:47:6b:c7:17:77:ca:11:42:8d:cb:56:87:ef:22:44:e5:c4:
         4c:21:26:ba:0a:a0:cb:10:d1:f9:bf:73:99:39:b0:a8:ee:23:
         9a:40:94:14:7a:6c:8f:51:b3:d5:03:fb:63:e3:b4:cb:9f:04:
         ab:74:40:91:d6:36:42:ff:c1:d0:41:12:c3:cf:e9:05:fa:a5:
         63:a9:c8:b8:d0:d2:f8:e4:e8:2c:d0:28:37:42:23:f7:d1:59:
         56:77:40:b9:6c:e8:08:af:1e:39:0b:c0:03:b4:15:83:3e:18:
         0e:11:89:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:41 2025 by rpki-client