Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS197561.roa
File:                     AS197561.roa (raw, json)
Hash identifier:          FR0035S/UBEb48zrEDdxmsB5NiC9Vm+F2tSEvO2LPuA=
Subject key identifier:   C1:5E:9C:BC:13:78:94:4A:D9:B0:3E:91:74:26:93:A8:09:D1:7D:1F
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       2A0D8FAA0765C4D0FB2616EEABB2792ADFED4592
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS197561.roa
Signing time:             Tue 05 Nov 2024 03:40:04 +0000
ROA not before:           Tue 05 Nov 2024 03:35:04 +0000
ROA not after:            Tue 04 Nov 2025 03:40:04 +0000
asID:                     197561
IP address blocks:        2a06:a005:1c7c::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0d:8f:aa:07:65:c4:d0:fb:26:16:ee:ab:b2:79:2a:df:ed:45:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:04 2024 GMT
            Not After : Nov  4 03:40:04 2025 GMT
        Subject: CN=C15E9CBC1378944AD9B03E91742693A809D17D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:23:25:25:25:02:55:5a:43:7e:72:be:7e:ba:
                    95:e6:03:ac:f5:5e:f8:22:46:fb:5d:f7:75:89:63:
                    fd:87:03:41:bb:ad:26:e8:ca:d5:00:b2:fe:37:dd:
                    66:e5:3f:10:72:42:1d:0b:c3:2d:61:eb:96:ca:ea:
                    d2:40:f7:4a:2c:5a:90:d2:8f:4b:0d:3f:c8:c1:7b:
                    11:ad:ac:54:0a:76:c0:80:0e:7f:d9:86:a1:69:8c:
                    8e:af:42:97:46:21:eb:f3:62:fb:cb:15:48:15:65:
                    14:0f:9f:f7:28:37:df:e7:cc:f4:20:ba:75:cf:16:
                    64:86:35:cc:0c:5c:10:71:29:6f:48:0a:01:80:30:
                    29:75:ea:91:89:68:f7:22:e4:98:04:fe:ef:b3:56:
                    44:7a:27:1d:2f:85:11:87:2f:0e:76:bd:f2:63:a2:
                    b4:b6:32:a9:99:53:fc:d2:18:7d:4d:31:03:11:04:
                    58:3f:05:cd:76:c4:7e:ec:d5:c3:96:36:f1:6b:f0:
                    84:7d:92:6c:0c:a0:c2:65:3d:c9:64:6e:bd:05:8f:
                    1c:33:0b:c1:90:87:f0:1d:44:8a:5c:29:d8:61:5e:
                    1b:50:37:41:be:1d:c1:17:cb:b9:ba:37:b1:b5:c5:
                    23:01:2b:4b:03:10:2e:bc:d4:94:cb:2e:1a:04:ee:
                    df:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5E:9C:BC:13:78:94:4A:D9:B0:3E:91:74:26:93:A8:09:D1:7D:1F
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS197561.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1c7c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:cd:cc:a2:71:df:fe:ff:f0:a7:33:0c:c3:63:43:89:72:6c:
         57:c3:b6:a2:5d:7e:66:a8:4b:b2:1b:74:1f:22:b9:0d:85:e6:
         ca:8b:bc:01:bc:48:2c:ed:b8:d6:2a:89:b1:68:f3:fa:2c:52:
         e6:1b:60:de:89:be:c7:a0:44:46:1b:45:31:52:41:5e:93:a1:
         7b:f0:3d:52:ae:8e:3a:a5:d4:49:96:20:3d:b7:64:fd:33:94:
         fe:f4:27:c3:5d:66:c9:a1:57:dd:06:12:3e:3b:08:82:02:82:
         c8:8f:54:33:7c:24:61:78:16:f4:66:36:2d:83:3e:83:ce:f4:
         16:65:00:ff:dd:e7:ac:b4:ff:47:d8:42:4b:8f:1b:7a:c7:09:
         d1:17:bb:6a:00:af:14:e0:9f:d5:5d:0a:01:4e:39:88:75:d4:
         0f:19:67:00:68:e5:fd:af:79:e6:00:60:52:a2:0d:a7:da:2d:
         bd:54:e2:a6:b9:cd:f4:61:79:ea:c9:2d:fa:a0:88:46:00:0b:
         3a:6c:1a:02:f0:89:35:c1:30:80:cb:3d:e2:0c:de:d5:38:2a:
         10:05:f9:06:03:c6:51:2b:83:de:46:9f:f2:03:4e:28:7e:4e:
         a5:f7:97:99:b0:3e:72:2e:89:a9:af:a0:f2:06:dc:e7:0b:8f:
         84:1b:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:39 2025 by rpki-client