Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206439.roa
File:                     AS206439.roa (raw, json)
Hash identifier:          fdPP0JeEfAyzrtfrq1FDywUy3O8n4Y6z52IpaJFjSOg=
Subject key identifier:   42:0E:4A:9E:75:AA:0F:F6:28:85:AB:62:B4:0F:9D:EC:82:7D:79:46
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       426C13E1FADCC0FEF91162F67A35647CC0C099C7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206439.roa
Signing time:             Tue 12 Nov 2024 15:40:12 +0000
ROA not before:           Tue 12 Nov 2024 15:35:12 +0000
ROA not after:            Tue 11 Nov 2025 15:40:12 +0000
asID:                     206439
IP address blocks:        2a06:a005:b62::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6c:13:e1:fa:dc:c0:fe:f9:11:62:f6:7a:35:64:7c:c0:c0:99:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov 12 15:35:12 2024 GMT
            Not After : Nov 11 15:40:12 2025 GMT
        Subject: CN=420E4A9E75AA0FF62885AB62B40F9DEC827D7946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:26:d7:de:0a:f0:74:53:26:38:ef:f5:5c:78:
                    44:47:c7:f3:cc:13:05:98:40:e9:ef:5c:a5:3d:c4:
                    53:88:41:90:35:87:28:6c:4b:9f:39:d5:de:8f:69:
                    0f:0e:56:d5:50:e8:46:e3:b6:92:b4:fd:7b:5c:68:
                    7f:ce:04:43:d4:f8:96:0c:10:62:ba:f9:66:92:b1:
                    00:f1:f3:dc:e5:bd:ca:69:c7:3b:40:8a:b9:61:d7:
                    b2:65:5c:e9:ed:22:18:8b:03:88:ad:16:61:6c:c9:
                    60:c6:52:97:93:55:52:2c:3f:00:1e:b1:34:80:b7:
                    d7:05:11:24:9d:df:42:9e:f9:f9:30:aa:77:9c:22:
                    bd:57:e2:ab:e9:d6:ec:bc:90:cc:34:8f:ee:ec:bd:
                    dd:02:c5:e4:d4:3b:de:67:78:6c:21:d2:17:41:d9:
                    6c:9f:5d:2c:c9:cf:c5:8c:76:bd:ce:84:bb:79:78:
                    14:dd:73:9a:e6:97:6c:44:1d:46:a7:9f:2c:da:f6:
                    8c:8c:0c:38:98:89:0e:d0:f0:5a:89:cb:78:90:33:
                    1f:51:35:bd:e6:7a:cd:91:26:ce:8e:e5:ed:4f:58:
                    d9:2e:e7:1b:0d:d7:31:93:74:9a:78:da:18:e4:51:
                    14:e4:22:99:86:19:0d:a4:bf:39:87:e8:11:17:33:
                    d2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0E:4A:9E:75:AA:0F:F6:28:85:AB:62:B4:0F:9D:EC:82:7D:79:46
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b62::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:05:41:2d:c4:13:bc:72:db:37:43:ba:52:3a:32:57:3b:de:
         a7:43:0e:4e:b3:27:37:4d:07:4f:08:42:b9:aa:a7:f9:d0:d3:
         db:cd:ec:9c:5c:5a:1a:68:a7:18:4e:cd:12:5b:eb:3c:ae:33:
         de:ba:97:a5:97:0f:ed:4c:70:01:2d:a4:3c:7d:57:8c:88:e9:
         9b:b9:1e:ee:91:48:c0:29:46:b4:d0:4a:b5:37:42:56:59:cf:
         14:b0:7d:a5:bd:ef:cc:61:a6:78:2c:aa:78:2f:36:81:93:7e:
         dd:c4:cf:20:f6:fc:fd:cf:25:ff:93:af:27:0b:33:0e:02:20:
         5e:76:41:dc:d1:cb:9f:3a:95:f0:d9:e6:84:c8:6e:42:37:7d:
         7e:eb:a2:06:b9:8a:64:7e:7d:c7:2c:5f:68:43:15:2d:0a:1d:
         8e:0e:be:fa:71:ff:0a:9c:a1:5d:82:82:85:5b:f1:0b:6a:a6:
         f3:7c:75:92:7d:10:71:15:e9:44:0e:e2:18:cc:d3:c1:b3:0c:
         72:86:e1:a6:a1:e0:b8:24:38:86:87:7a:ee:2a:ab:84:f9:c2:
         17:e0:c9:75:d6:17:c1:33:04:71:5b:af:06:d1:57:fa:f7:38:
         a5:72:bb:e7:e0:23:0f:62:b6:cb:ee:4e:26:71:ca:ae:41:b4:
         ba:81:48:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:44 2025 by rpki-client