Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200237.roa
File:                     AS200237.roa (raw, json)
Hash identifier:          cO4fHef+I4WqsxGut2/jj1FiXIVOI28Pq0/b2fTCXMY=
Subject key identifier:   C6:8D:27:EF:AB:D0:0A:60:0C:A2:E1:E4:A3:F6:5D:09:3B:07:63:F5
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       583C9F0A1BEE2F545742F12986B1DA4D2294B89C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200237.roa
Signing time:             Thu 07 Nov 2024 17:40:12 +0000
ROA not before:           Thu 07 Nov 2024 17:35:12 +0000
ROA not after:            Thu 06 Nov 2025 17:40:12 +0000
asID:                     200237
IP address blocks:        2a06:a005:d4c::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3c:9f:0a:1b:ee:2f:54:57:42:f1:29:86:b1:da:4d:22:94:b8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  7 17:35:12 2024 GMT
            Not After : Nov  6 17:40:12 2025 GMT
        Subject: CN=C68D27EFABD00A600CA2E1E4A3F65D093B0763F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:cc:86:f0:e3:48:d9:5d:aa:24:9b:c3:53:
                    5b:a7:60:d6:25:cc:c3:77:c3:9d:53:9b:8c:a4:65:
                    0e:d8:09:37:5b:d2:be:45:8c:a0:4b:f9:30:3f:3e:
                    21:69:74:b3:c6:db:99:c0:11:d0:62:99:ed:a5:f2:
                    a6:14:35:2a:15:e0:9e:de:69:ec:67:4a:b5:85:aa:
                    6e:b0:16:aa:c4:7f:49:f6:f7:7c:5e:c0:7e:43:e2:
                    3b:33:2c:21:41:94:e7:65:2d:1d:1b:5f:16:30:27:
                    64:21:c7:1d:a4:17:6a:94:ba:b0:c3:92:b2:ec:87:
                    fa:39:7c:c3:85:ad:ef:a7:97:51:ae:46:d5:18:b6:
                    4d:53:94:d3:31:34:29:ac:ba:82:89:2a:94:af:7b:
                    2f:1f:a0:83:9d:5e:ad:55:40:36:b4:93:75:93:6f:
                    5a:e0:dd:1e:d3:81:81:b5:c3:30:e3:75:f7:c7:65:
                    ff:c1:73:0f:62:62:03:43:a2:32:a3:58:34:80:0d:
                    25:bf:6f:4b:83:02:55:f4:c1:71:2a:a1:9a:2a:3a:
                    4d:9b:40:19:37:1e:7e:7b:30:f3:f9:a2:2e:29:81:
                    68:a2:af:6b:e9:93:56:fa:7d:02:d5:aa:71:ba:4b:
                    d3:04:08:e8:a5:e5:50:4d:56:7a:e6:d6:8a:ea:b5:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8D:27:EF:AB:D0:0A:60:0C:A2:E1:E4:A3:F6:5D:09:3B:07:63:F5
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d4c::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:dd:41:c8:3c:66:59:8f:68:c4:63:8c:f1:46:80:fe:23:4d:
         5d:9c:84:33:b1:ec:a0:6c:0c:e4:91:ef:19:17:e0:4f:31:26:
         fe:34:c9:7c:11:24:48:a7:29:85:27:68:38:e4:90:e0:1c:5f:
         f4:6a:1c:f2:2c:31:be:40:8b:23:78:49:0a:5f:70:f1:71:60:
         47:54:11:bb:8a:d6:73:62:c8:f1:f4:ff:7e:e0:d4:d7:ab:94:
         3c:26:97:da:eb:e9:b7:ef:c1:fd:55:bf:04:82:89:a2:83:24:
         55:f7:cc:19:b5:81:90:06:dc:37:dc:a1:b9:ba:b8:fc:cc:2d:
         cc:40:0a:b8:66:12:4d:f4:e6:29:0d:76:87:ba:c9:78:73:3b:
         d6:f6:f8:8b:c1:79:f6:70:06:32:11:6f:98:9a:4f:4b:47:22:
         7b:8f:5a:36:43:6e:23:d0:a3:7b:11:2e:b1:2a:1e:bd:85:15:
         07:78:ca:c6:28:e0:9b:ac:45:11:64:f5:4b:73:ff:52:3a:a3:
         be:43:7b:47:07:da:e5:86:5e:2a:dd:13:d3:71:b1:fc:77:5f:
         f1:61:24:5d:d5:2b:07:c1:56:26:22:a3:e1:43:7b:18:cb:b4:
         a8:4c:ae:ce:1f:b4:97:25:aa:a2:8c:17:69:e5:3c:6d:f8:fd:
         b5:e7:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:55 2025 by rpki-client