Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207762.roa
File:                     AS207762.roa (raw, json)
Hash identifier:          bM3jx+v5fRQmOdGhaDhkOYXt3jZQQgPlM9wn/uQrN58=
Subject key identifier:   34:C9:54:82:08:40:7E:83:3D:57:BA:AF:66:F0:AD:EC:AD:52:C6:31
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       2FA19B8415A2DC47C10081FBBCE5D50C985E99FD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207762.roa
Signing time:             Tue 05 Nov 2024 03:40:04 +0000
ROA not before:           Tue 05 Nov 2024 03:35:04 +0000
ROA not after:            Tue 04 Nov 2025 03:40:04 +0000
asID:                     207762
IP address blocks:        2a06:a005:a0c::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a1:9b:84:15:a2:dc:47:c1:00:81:fb:bc:e5:d5:0c:98:5e:99:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:04 2024 GMT
            Not After : Nov  4 03:40:04 2025 GMT
        Subject: CN=34C9548208407E833D57BAAF66F0ADECAD52C631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:78:ef:79:a3:63:a6:9d:cf:f8:18:63:ee:
                    dc:eb:97:1f:50:73:9a:47:b7:0f:b7:f2:ad:00:a4:
                    74:6f:6e:c5:4c:12:5c:51:1f:32:64:fb:6f:bb:11:
                    ea:b3:b5:ca:96:e1:4c:5a:7a:6d:16:c7:8c:f4:fd:
                    0a:ab:5a:40:3a:1e:9b:cd:0b:59:1b:f1:55:f6:16:
                    d5:f7:4a:7e:09:58:dc:e7:71:a1:b3:b0:01:52:93:
                    b3:b9:8b:6d:64:57:86:af:12:7d:e4:ce:b0:e4:e7:
                    6f:c8:12:93:68:14:88:69:13:c8:03:9b:67:ca:56:
                    78:6b:7e:da:e0:f1:fd:58:74:3a:c3:ce:4f:18:98:
                    15:80:51:0d:23:da:09:34:53:a6:a1:e0:68:81:fb:
                    45:bd:ca:84:fb:ca:6d:95:42:26:42:55:37:f7:5c:
                    5e:3a:e0:a8:b4:69:c8:d8:c3:f2:0a:2f:08:cd:04:
                    27:5d:35:1e:96:b8:da:7d:1d:1a:2e:16:81:1f:dc:
                    5c:b9:d0:83:a6:e2:42:c3:0a:b6:d0:4e:d3:ca:d5:
                    c2:b4:87:ae:c7:38:42:28:2e:6b:10:fc:3b:1b:53:
                    03:4b:76:67:34:4e:10:20:36:1a:2c:cd:ef:d1:9b:
                    18:67:5e:ea:c8:0b:64:5c:02:ed:73:6d:2d:70:03:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C9:54:82:08:40:7E:83:3D:57:BA:AF:66:F0:AD:EC:AD:52:C6:31
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:72:87:10:2f:b1:8b:8a:49:c9:3b:77:e1:d5:a4:b8:4b:ff:
         9a:a6:3e:ff:7d:01:44:25:d4:b4:8c:7e:e8:52:74:69:8f:0e:
         b1:37:79:13:1a:6e:35:2f:86:15:cd:51:15:a2:68:4b:23:17:
         3d:88:bd:cc:39:46:6b:8c:8f:d2:f2:31:f2:34:84:2b:39:30:
         75:09:2c:64:cb:3e:aa:b2:71:f7:01:b0:6d:e8:87:51:c1:fb:
         99:06:8f:d4:c9:f2:d1:22:fc:fa:19:1b:4c:fd:9e:36:97:31:
         38:48:a7:f3:90:29:40:84:40:cd:4d:a8:78:80:16:e0:80:0d:
         0c:18:da:c5:6b:f0:f1:71:94:61:14:ac:11:bd:45:52:8d:8a:
         60:78:d2:7a:cf:ed:59:38:18:84:cb:f7:d0:db:95:a9:ce:a2:
         79:7f:16:8e:a9:c2:a0:21:1e:5a:6b:76:47:59:30:0d:15:c9:
         59:47:e4:e0:06:a2:27:d0:89:4d:22:f7:97:f6:9c:aa:29:52:
         19:95:fe:4f:5e:e9:a5:c4:76:0e:f6:bc:b4:14:c3:b6:0e:0b:
         67:0f:ae:d9:3b:28:6d:fe:e7:d1:3c:5b:58:f2:ba:1d:68:af:
         da:6d:6e:00:74:98:a0:7a:5c:0f:c9:d1:34:34:75:60:11:63:
         cb:2d:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:59 2025 by rpki-client