Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200255.roa
File:                     AS200255.roa (raw, json)
Hash identifier:          BnDzYDAvnkprjYNBSKZRemdSJqoSsbGKtui5OkhaVs4=
Subject key identifier:   F7:BD:15:A2:F4:93:FD:EF:CB:A4:90:6D:70:90:7E:B7:6E:B2:6E:E7
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3D5B1D0CA121CFD84B218B05284B0CF3941B6819
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200255.roa
Signing time:             Tue 05 Nov 2024 03:40:10 +0000
ROA not before:           Tue 05 Nov 2024 03:35:10 +0000
ROA not after:            Tue 04 Nov 2025 03:40:10 +0000
asID:                     200255
IP address blocks:        2a06:a005:a00::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5b:1d:0c:a1:21:cf:d8:4b:21:8b:05:28:4b:0c:f3:94:1b:68:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:10 2024 GMT
            Not After : Nov  4 03:40:10 2025 GMT
        Subject: CN=F7BD15A2F493FDEFCBA4906D70907EB76EB26EE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:9b:28:12:d0:68:78:a5:65:42:cf:83:d5:
                    86:20:69:f8:6e:88:48:f6:5b:90:71:37:3d:8c:c8:
                    ce:1f:15:b1:01:dd:fa:da:10:e6:c0:cf:c7:c9:f8:
                    76:1d:41:18:0d:d1:3f:f2:41:1e:c0:12:cc:87:27:
                    4b:1f:62:fc:48:d8:53:42:47:d0:f5:7c:be:3e:f7:
                    50:fa:ba:c8:71:c7:b1:3e:e2:3a:d1:6b:29:80:08:
                    0c:2f:b6:e3:ca:7b:94:f9:dd:be:31:ed:36:8a:7e:
                    44:ec:0e:f4:62:f4:5b:df:10:53:9c:3c:73:5c:6f:
                    c8:60:02:77:db:d8:c8:6d:8f:dd:f6:dd:c9:1f:4f:
                    b4:c4:f4:b7:bf:23:fc:ba:17:94:74:b6:98:6e:6a:
                    f3:52:08:cd:04:ec:4f:22:43:91:f1:08:0e:34:34:
                    16:ce:ea:59:d3:1a:a7:66:d3:d9:02:5c:f4:01:d0:
                    0b:1c:7d:b6:38:c2:b0:b5:24:6e:ae:98:e6:7a:91:
                    1f:3b:7d:c2:ca:c6:37:55:ae:ea:df:cb:19:90:e0:
                    14:ca:78:12:3d:3b:74:ad:79:3d:ae:6f:ea:cc:1b:
                    a5:b8:6e:ea:f5:26:d1:82:a6:b0:dc:76:a2:20:90:
                    11:2c:f4:63:0e:e5:c1:50:42:b7:0c:1f:f8:c0:ad:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BD:15:A2:F4:93:FD:EF:CB:A4:90:6D:70:90:7E:B7:6E:B2:6E:E7
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200255.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:be:87:2d:be:2c:10:06:7d:86:61:a1:9b:eb:85:f2:12:51:
         cc:3b:77:23:a2:c7:29:d9:97:fb:78:8f:08:1f:57:8a:78:df:
         be:99:0d:a2:21:4a:5e:ac:22:dd:00:02:da:23:96:67:ec:87:
         1d:30:6d:ac:86:13:10:1a:6d:94:1b:e8:fc:6c:4d:7d:62:cd:
         de:00:8e:aa:d3:82:22:95:4a:bd:94:b0:6d:f1:0b:4f:fc:b7:
         85:f5:b4:26:0d:46:9a:c5:f1:95:bd:cd:af:14:6b:26:f4:4d:
         55:fd:e2:7d:fc:14:b3:2d:a5:d6:22:3f:8a:bd:d4:c9:4a:6b:
         b1:72:1a:5b:1e:a1:db:62:69:e0:2a:c7:13:95:53:b9:a0:6e:
         e0:f7:82:72:eb:e9:4c:4a:ca:b2:9f:c9:98:d3:79:27:1e:b2:
         33:87:16:78:74:aa:3a:03:93:01:1c:88:e9:4d:a7:de:8b:58:
         5b:06:90:31:54:5a:4b:9a:c9:09:4e:b2:43:27:0a:31:38:29:
         01:55:e1:38:5b:2e:13:3a:ea:97:21:af:b9:b8:ee:24:1f:99:
         df:de:34:16:64:79:52:0f:b4:7f:de:e3:70:cf:20:56:0f:c4:
         01:41:9e:bb:81:64:22:8f:2a:d4:a4:ca:06:45:b8:0b:4a:d4:
         24:37:9b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:45:55 2025 by rpki-client