Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203169.roa
File:                     AS203169.roa (raw, json)
Hash identifier:          9Z0/lLoh3C+RJWm7yAQqpTR2Iu8at40FlcuVd+hmAfg=
Subject key identifier:   27:4B:E2:A8:1B:74:31:D9:2E:46:19:72:A1:31:76:04:80:F8:0F:9E
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       375CDD8B2419D656D2FCFF8C4E68CD0BF9C21653
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203169.roa
Signing time:             Tue 05 Nov 2024 03:39:59 +0000
ROA not before:           Tue 05 Nov 2024 03:34:59 +0000
ROA not after:            Tue 04 Nov 2025 03:39:59 +0000
asID:                     203169
IP address blocks:        2a06:a005:485::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5c:dd:8b:24:19:d6:56:d2:fc:ff:8c:4e:68:cd:0b:f9:c2:16:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:34:59 2024 GMT
            Not After : Nov  4 03:39:59 2025 GMT
        Subject: CN=274BE2A81B7431D92E461972A131760480F80F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:12:06:e3:06:1e:60:e6:81:d0:1f:ac:04:09:
                    f9:85:02:92:67:ae:8b:47:f6:b8:39:fe:3e:50:3f:
                    7c:5a:b7:53:f8:27:bc:00:09:39:2d:fc:83:06:5f:
                    63:17:7b:64:3f:4f:9e:13:f7:9b:cf:e8:a9:e8:8a:
                    82:e3:89:e8:16:2b:b6:05:73:38:c2:b3:72:c7:1c:
                    37:70:e5:af:89:52:cd:2d:33:79:9e:06:1a:df:a9:
                    ba:8a:0f:1c:b3:53:a7:3a:0f:e8:ff:de:c7:2c:b2:
                    7d:42:d1:c9:e2:3a:8a:9d:99:e5:7e:91:6c:38:f5:
                    d8:11:f3:35:35:7d:da:5a:f1:86:57:10:a7:1c:84:
                    c3:9c:6f:ab:95:ac:a4:8b:20:53:76:60:f4:2b:7e:
                    0a:7f:bc:4b:4e:79:20:01:a7:af:3e:32:67:ba:3e:
                    cd:f6:7f:c6:1f:11:25:ec:ea:85:02:9b:7f:46:13:
                    75:8c:85:fc:ec:34:73:e4:e9:8e:e1:21:29:8c:57:
                    74:5f:45:5e:31:cc:a0:6f:5b:79:5d:38:04:8a:fd:
                    80:48:b1:d4:84:41:03:26:0e:01:5c:6a:52:e5:b2:
                    a4:0e:e0:af:44:98:24:e8:50:c1:15:c4:b8:de:37:
                    4f:d5:8d:68:6a:53:f3:23:f0:25:92:4c:f1:89:e3:
                    47:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4B:E2:A8:1B:74:31:D9:2E:46:19:72:A1:31:76:04:80:F8:0F:9E
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203169.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:485::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:bb:86:8f:0a:d6:c9:95:e0:88:32:29:53:08:33:8f:c5:22:
         fd:21:7d:79:77:d4:12:b1:e7:27:0e:67:62:0c:98:d7:72:4e:
         e4:38:83:b1:c6:f0:f3:80:cc:8d:ad:42:64:a4:ec:92:ed:47:
         43:5e:37:51:c7:95:19:f4:cc:27:46:40:32:fa:b4:b4:a0:b2:
         d7:a9:bd:48:57:a3:e2:9e:23:64:97:15:08:7f:50:d4:3c:e1:
         bb:62:a3:49:6b:9d:a9:d5:68:17:11:5e:95:f6:ea:66:c2:f2:
         8d:5a:06:89:c5:f1:16:14:ee:03:f0:e7:ee:b5:5d:1b:72:8c:
         f7:20:13:2d:7e:63:3b:62:a8:24:de:28:2e:25:e6:c3:a6:d1:
         e3:6f:83:02:09:47:6c:9b:d3:0d:e1:a0:dd:a8:40:10:b7:29:
         99:63:59:7f:17:05:bf:70:28:c5:39:11:97:f9:56:54:62:72:
         a8:e6:e2:27:37:bc:f9:7e:cf:8f:17:27:09:00:67:47:91:c7:
         3e:c4:1b:99:09:f5:ef:8b:9d:b6:4f:66:89:14:5c:d6:6e:f8:
         46:e5:b0:4f:62:7e:08:8c:d8:81:35:57:5f:5b:46:48:da:65:
         ec:6c:e3:a0:86:00:bd:48:49:12:a4:28:09:c9:b7:ba:4b:d9:
         7f:e4:5a:31
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUN1zdiyQZ1lbS/P+MTmjNC/nCFlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM0NTlaFw0yNTExMDQwMzM5NTlaMDMxMTAvBgNV
BAMTKDI3NEJFMkE4MUI3NDMxRDkyRTQ2MTk3MkExMzE3NjA0ODBGODBGOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EgbjBh5g5oHQH6wECfmFApJn
rotH9rg5/j5QP3xat1P4J7wACTkt/IMGX2MXe2Q/T54T95vP6KnoioLjiegWK7YF
czjCs3LHHDdw5a+JUs0tM3meBhrfqbqKDxyzU6c6D+j/3scssn1C0cniOoqdmeV+
kWw49dgR8zU1fdpa8YZXEKcchMOcb6uVrKSLIFN2YPQrfgp/vEtOeSABp68+Mme6
Ps32f8YfESXs6oUCm39GE3WMhfzsNHPk6Y7hISmMV3RfRV4xzKBvW3ldOASK/YBI
sdSEQQMmDgFcalLlsqQO4K9EmCToUMEVxLjeN0/VjWhqU/Mj8CWSTPGJ40drAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUJ0viqBt0MdkuRhlyoTF2BID4D54wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAzMTY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBQSFMA0GCSqGSIb3DQEBCwUAA4IBAQAZu4aP
CtbJleCIMilTCDOPxSL9IX15d9QSsecnDmdiDJjXck7kOIOxxvDzgMyNrUJkpOyS
7UdDXjdRx5UZ9MwnRkAy+rS0oLLXqb1IV6PiniNklxUIf1DUPOG7YqNJa52p1WgX
EV6V9upmwvKNWgaJxfEWFO4D8OfutV0bcoz3IBMtfmM7Yqgk3iguJebDptHjb4MC
CUdsm9MN4aDdqEAQtymZY1l/FwW/cCjFORGX+VZUYnKo5uInN7z5fs+PFycJAGdH
kcc+xBuZCfXvi522T2aJFFzWbvhG5bBPYn4IjNiBNVdfW0ZI2mXsbOOghgC9SEkS
pCgJybe6S9l/5Fox
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:47 2025 by rpki-client