Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203005.roa
File:                     AS203005.roa (raw, json)
Hash identifier:          ZHsi4Vs6ZA5U1H4LsxZAcQD6PGGQzzegzwIo35J9KgY=
Subject key identifier:   D1:AC:68:73:41:D5:C3:27:18:80:79:46:C3:22:DA:33:FF:75:03:97
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       04BCE5BB25BF2E51566BEAF5386A43EC5AA267C1
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203005.roa
Signing time:             Tue 05 Nov 2024 03:40:10 +0000
ROA not before:           Tue 05 Nov 2024 03:35:10 +0000
ROA not after:            Tue 04 Nov 2025 03:40:10 +0000
asID:                     203005
IP address blocks:        2a06:a005:d2a::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bc:e5:bb:25:bf:2e:51:56:6b:ea:f5:38:6a:43:ec:5a:a2:67:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:10 2024 GMT
            Not After : Nov  4 03:40:10 2025 GMT
        Subject: CN=D1AC687341D5C32718807946C322DA33FF750397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0a:1a:09:dc:6a:a6:f7:b7:91:2c:da:07:0c:
                    7e:5e:51:ee:c3:10:df:f6:a4:b0:75:6a:43:0e:a2:
                    f5:cc:45:ad:a9:2b:d1:96:8a:c4:ea:81:3f:29:41:
                    c3:e5:17:f2:d5:a6:15:33:78:81:9a:b9:44:08:c7:
                    e6:62:73:f4:83:b0:a6:62:1d:28:e4:c5:4f:96:0d:
                    23:70:d9:2e:db:92:56:cf:57:23:a3:6d:a1:f2:72:
                    37:7b:de:da:b0:26:39:51:88:33:f2:88:74:b7:dc:
                    0d:73:87:55:c0:83:2d:eb:b2:e4:8c:27:0f:21:fa:
                    d4:2d:e9:43:5a:42:b6:f9:f0:71:90:14:e6:5c:44:
                    ef:70:82:b9:40:95:9d:d7:20:34:aa:22:b3:a6:61:
                    73:d0:6f:f6:f7:31:ec:de:bd:39:4a:04:30:40:e8:
                    2d:82:6a:26:32:47:85:05:8a:ba:01:8a:6b:16:fb:
                    54:cb:eb:a2:e7:92:1c:b5:3b:a1:ec:a9:34:e7:79:
                    3e:a2:6a:8b:2b:e4:59:ed:53:5f:50:07:5a:ba:e9:
                    a6:72:07:68:c4:27:ef:ad:66:0c:14:04:42:02:6a:
                    9a:e7:c0:95:cb:1e:8a:fc:5c:f3:55:33:71:19:32:
                    2a:25:d7:c5:5a:bd:b1:39:5f:fd:26:7c:4b:2d:8d:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AC:68:73:41:D5:C3:27:18:80:79:46:C3:22:DA:33:FF:75:03:97
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203005.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:16:9d:70:f0:15:23:9c:68:da:74:bd:42:75:a0:9c:52:dc:
         d7:76:d3:29:5a:3b:91:0f:f5:1e:6f:25:a2:f0:50:ad:1a:1c:
         04:6c:69:4e:4d:d6:a6:1e:f8:13:59:fa:94:ff:5c:57:f3:a4:
         97:b9:cf:20:e0:24:34:de:1c:72:7c:5f:9c:23:a8:7e:6e:ce:
         a5:e5:8d:db:12:02:0d:90:d3:cf:e0:17:f1:61:5e:a1:be:7d:
         0b:c8:ea:f1:00:dc:65:38:b2:de:44:26:9a:26:27:3d:d0:3f:
         36:7e:5c:67:64:cd:da:bd:99:eb:67:f8:ca:34:3e:5a:f4:b2:
         f5:c0:2e:fe:0b:38:ee:c4:74:0b:be:23:e5:0a:34:31:66:35:
         b2:1a:86:a7:ee:e1:06:f2:e8:43:2d:31:e8:cc:75:9e:99:85:
         63:9a:81:9b:ea:53:aa:69:19:43:f3:79:2e:1a:d4:28:45:91:
         59:f8:1a:08:e3:8b:88:5d:2e:04:77:46:ac:4d:26:ff:bf:59:
         ee:40:57:55:22:ea:de:b6:71:8f:44:05:04:91:7a:68:05:c2:
         e7:f5:a8:05:23:37:e4:eb:9b:be:b3:cc:fd:28:2e:ac:49:4d:
         56:37:65:e5:1f:ce:32:3a:a7:cf:8b:95:e5:bb:dc:42:57:f7:
         b3:f9:65:e2
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUBLzluyW/LlFWa+r1OGpD7FqiZ8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MTBaFw0yNTExMDQwMzQwMTBaMDMxMTAvBgNV
BAMTKEQxQUM2ODczNDFENUMzMjcxODgwNzk0NkMzMjJEQTMzRkY3NTAzOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUChoJ3Gqm97eRLNoHDH5eUe7D
EN/2pLB1akMOovXMRa2pK9GWisTqgT8pQcPlF/LVphUzeIGauUQIx+Zic/SDsKZi
HSjkxU+WDSNw2S7bklbPVyOjbaHycjd73tqwJjlRiDPyiHS33A1zh1XAgy3rsuSM
Jw8h+tQt6UNaQrb58HGQFOZcRO9wgrlAlZ3XIDSqIrOmYXPQb/b3MezevTlKBDBA
6C2CaiYyR4UFiroBimsW+1TL66Lnkhy1O6HsqTTneT6iaosr5FntU19QB1q66aZy
B2jEJ++tZgwUBEICaprnwJXLHor8XPNVM3EZMiol18VavbE5X/0mfEstjXLrAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU0axoc0HVwycYgHlGwyLaM/91A5cwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAzMDA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBQ0qMA0GCSqGSIb3DQEBCwUAA4IBAQChFp1w
8BUjnGjadL1CdaCcUtzXdtMpWjuRD/UebyWi8FCtGhwEbGlOTdamHvgTWfqU/1xX
86SXuc8g4CQ03hxyfF+cI6h+bs6l5Y3bEgINkNPP4BfxYV6hvn0LyOrxANxlOLLe
RCaaJic90D82flxnZM3avZnrZ/jKND5a9LL1wC7+CzjuxHQLviPlCjQxZjWyGoan
7uEG8uhDLTHozHWemYVjmoGb6lOqaRlD83kuGtQoRZFZ+BoI44uIXS4Ed0asTSb/
v1nuQFdVIuretnGPRAUEkXpoBcLn9agFIzfk65u+s8z9KC6sSU1WN2XlH84yOqfP
i5Xlu9xCV/ez+WXi
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:15:03 2025 by rpki-client