Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200897.roa
File:                     AS200897.roa (raw, json)
Hash identifier:          IeR3F/uXyLntJsMQBknXxuPXXHxfzoxrDwkcrZ0AQjM=
Subject key identifier:   0D:47:46:52:A2:3B:58:C8:2A:C0:4F:50:E0:6A:88:CE:40:43:0E:96
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6BF8E9254635033996103EFEC6A9AFE372AB318E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200897.roa
Signing time:             Tue 05 Nov 2024 03:40:00 +0000
ROA not before:           Tue 05 Nov 2024 03:35:00 +0000
ROA not after:            Tue 04 Nov 2025 03:40:00 +0000
asID:                     200897
IP address blocks:        2a06:a005:5b9::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f8:e9:25:46:35:03:39:96:10:3e:fe:c6:a9:af:e3:72:ab:31:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:00 2024 GMT
            Not After : Nov  4 03:40:00 2025 GMT
        Subject: CN=0D474652A23B58C82AC04F50E06A88CE40430E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:e0:bb:a9:9f:03:fd:30:f6:ed:32:5f:4d:
                    36:96:71:d9:17:04:62:8f:e0:e5:86:ed:03:99:05:
                    a7:7e:ab:ab:6f:83:a5:03:93:ec:e7:b7:6d:ba:73:
                    10:a7:e7:9c:09:8c:f7:30:20:9c:ed:be:cf:dd:ad:
                    40:3f:41:99:6a:85:ae:61:62:50:6e:4f:8d:41:39:
                    24:4f:cb:7a:90:0c:70:02:26:9a:e6:27:34:10:fc:
                    53:da:97:1e:55:e0:b5:bb:41:e1:26:23:7f:c1:72:
                    4d:8a:f7:a6:e1:24:0d:25:20:dc:96:7d:2f:b4:e6:
                    c3:d8:16:f5:b9:5f:41:c6:b9:26:c6:43:f4:3d:38:
                    fe:0f:b1:6e:de:9a:ca:97:7a:35:a3:6c:28:25:99:
                    06:0f:21:56:81:84:a5:0d:c7:30:66:c0:6a:c6:ac:
                    a1:91:81:d3:bf:9d:5f:1c:70:f1:76:8b:79:09:20:
                    8b:ae:50:31:ac:d7:6d:ad:c4:c5:07:2d:54:d0:08:
                    1d:48:47:69:14:e3:43:71:3f:90:29:0a:38:50:47:
                    d6:90:55:1e:1a:56:ab:14:8e:1c:93:e1:81:4a:a9:
                    e9:00:6c:0a:d4:d3:cb:b1:fb:db:2b:4e:ae:c9:95:
                    68:27:db:7a:31:1e:09:85:63:94:1e:c1:5a:92:2a:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:47:46:52:A2:3B:58:C8:2A:C0:4F:50:E0:6A:88:CE:40:43:0E:96
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200897.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:53:c4:3a:62:b2:b6:92:e0:d8:40:34:a4:a6:9b:0e:cb:03:
         b9:bb:3c:42:03:22:8e:72:cf:55:33:7d:ce:4c:a4:a0:ae:2a:
         3f:dc:47:57:65:de:e6:f6:fb:0b:81:3a:9d:05:ba:78:3e:16:
         c1:3c:3f:c8:24:57:ba:e5:b8:6a:36:26:70:de:d8:46:a3:e9:
         dd:de:79:88:2d:54:0b:1f:88:21:c7:c8:ba:b8:ac:1a:8f:41:
         2d:ac:ed:94:ed:64:47:78:7f:20:05:52:76:b4:26:36:ea:71:
         07:8a:fd:5b:e7:a0:3a:e8:9e:c8:01:1d:9f:cb:46:3e:46:61:
         6f:e1:ae:3e:ed:18:fb:f3:06:8e:c9:9d:c6:8d:db:b8:3c:22:
         de:89:54:a3:db:89:fd:e1:9c:3e:81:5d:20:ab:0f:89:e5:1c:
         0f:48:02:49:f9:c3:1e:2e:b0:37:28:0a:66:0e:20:8f:f0:a6:
         47:ab:b5:bb:98:d2:d1:f5:44:48:2e:c6:ef:a2:0a:6b:56:1c:
         76:1e:21:34:3e:15:64:66:1f:dd:ec:16:b6:ad:34:0a:70:e1:
         5e:a9:07:c3:5e:9a:ce:9b:ea:6d:37:fb:ac:b2:12:23:58:73:
         fe:96:43:68:a2:94:0b:05:03:4f:9f:67:d3:fc:df:4c:ff:cb:
         e3:a2:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:52 2025 by rpki-client