Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209933.roa
File:                     AS209933.roa (raw, json)
Hash identifier:          qEYiIB96fZhg1FhNrC2jGcFGQup+QnNpXKIiJwBt+Zs=
Subject key identifier:   ED:13:E7:65:C7:AF:00:EE:8E:21:0F:6F:50:EE:C8:83:50:F3:2D:60
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6463156031E18FCCB6772B352192856C636C1CE4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209933.roa
Signing time:             Tue 05 Nov 2024 03:40:00 +0000
ROA not before:           Tue 05 Nov 2024 03:35:00 +0000
ROA not after:            Tue 04 Nov 2025 03:40:00 +0000
asID:                     209933
IP address blocks:        2a06:a005:1164::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:63:15:60:31:e1:8f:cc:b6:77:2b:35:21:92:85:6c:63:6c:1c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:00 2024 GMT
            Not After : Nov  4 03:40:00 2025 GMT
        Subject: CN=ED13E765C7AF00EE8E210F6F50EEC88350F32D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:5f:cc:ea:86:a4:cf:07:a1:f3:85:2b:71:
                    65:fe:c7:81:9e:ee:16:b4:f0:05:d5:43:ce:9d:72:
                    5d:d5:91:aa:c0:90:b8:6e:d9:a0:89:31:1c:f0:1e:
                    12:d1:94:29:c6:7f:df:48:b3:27:49:18:2b:6a:f7:
                    1b:30:5a:e1:06:a9:ac:0b:b6:55:95:91:20:6c:57:
                    ea:41:44:96:d2:f6:24:6f:ab:0e:02:bd:00:c9:40:
                    7e:84:11:7b:aa:19:b1:8d:aa:1f:09:d1:4a:fe:35:
                    db:41:17:b4:44:34:3d:9d:6f:82:1a:99:77:13:fa:
                    44:aa:5b:d1:76:72:8b:32:72:cd:d1:b1:ae:89:24:
                    df:ce:14:49:75:b9:5f:79:ed:e4:7a:c5:98:e9:a1:
                    13:2e:50:f5:10:bc:d7:a3:9a:63:f5:50:a8:59:3a:
                    d1:67:f7:5c:c5:a2:ea:9c:9e:30:75:da:83:80:83:
                    66:54:11:fe:2f:2f:5b:a7:6e:04:1b:76:2d:11:8e:
                    2c:f3:a2:7f:ba:6c:17:61:29:e6:d1:2f:d5:93:4d:
                    1c:df:da:6c:75:55:53:63:50:70:49:13:ba:4e:9e:
                    8e:4e:44:70:b7:fc:5a:14:8a:09:cc:cb:2f:f0:e3:
                    4b:ab:3d:93:d7:35:ce:06:cf:b7:d5:16:aa:18:88:
                    99:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:13:E7:65:C7:AF:00:EE:8E:21:0F:6F:50:EE:C8:83:50:F3:2D:60
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1164::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:eb:38:4b:65:95:c1:25:83:c4:13:b5:86:c0:02:9f:7e:
         c1:85:66:a7:2b:9a:c2:0c:08:2a:62:1a:8c:8f:a6:6f:51:88:
         82:92:98:df:9a:51:a8:b1:d0:6d:00:b4:e0:6d:fd:e5:3e:ff:
         2a:2b:b8:66:53:f7:1d:05:55:86:7e:9f:b9:28:c6:46:72:73:
         c5:70:ab:cb:61:b8:cf:a3:81:28:85:59:2a:f1:dc:be:b0:74:
         b0:a2:2c:20:fd:01:ec:88:38:0b:66:72:08:61:d0:39:65:43:
         ae:79:37:7d:e6:82:f7:46:d2:bf:b7:2a:a6:a4:d3:50:ec:a2:
         05:ee:f7:85:e4:40:fa:03:79:75:c2:2e:6c:d6:2d:b9:73:ef:
         85:18:f2:b0:94:1d:76:82:f3:6d:cf:98:f8:f2:37:b7:00:e9:
         f8:7d:8a:57:75:85:a1:d5:a8:30:ec:3a:5f:36:94:a3:74:70:
         cf:ce:f5:b6:29:66:c8:ab:35:17:9e:41:d3:47:06:03:44:dd:
         33:65:13:34:9f:2c:81:6f:26:a9:43:f5:8f:26:5a:1e:45:b8:
         90:34:66:82:1b:07:29:72:20:39:82:56:60:25:d4:99:b3:40:
         57:fe:ff:0a:ea:58:8a:fd:44:b2:d8:51:96:5e:f1:be:b9:27:
         77:04:36:2b
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUZGMVYDHhj8y2dys1IZKFbGNsHOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MDBaFw0yNTExMDQwMzQwMDBaMDMxMTAvBgNV
BAMTKEVEMTNFNzY1QzdBRjAwRUU4RTIxMEY2RjUwRUVDODgzNTBGMzJENjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8F/M6oakzweh84UrcWX+x4Ge
7ha08AXVQ86dcl3VkarAkLhu2aCJMRzwHhLRlCnGf99IsydJGCtq9xswWuEGqawL
tlWVkSBsV+pBRJbS9iRvqw4CvQDJQH6EEXuqGbGNqh8J0Ur+NdtBF7REND2db4Ia
mXcT+kSqW9F2cosycs3Rsa6JJN/OFEl1uV957eR6xZjpoRMuUPUQvNejmmP1UKhZ
OtFn91zFouqcnjB12oOAg2ZUEf4vL1unbgQbdi0Rjizzon+6bBdhKebRL9WTTRzf
2mx1VVNjUHBJE7pOno5ORHC3/FoUignMyy/w40urPZPXNc4Gz7fVFqoYiJlFAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU7RPnZcevAO6OIQ9vUO7Ig1DzLWAwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA5OTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBRFkMA0GCSqGSIb3DQEBCwUAA4IBAQBr9Os4
S2WVwSWDxBO1hsACn37BhWanK5rCDAgqYhqMj6ZvUYiCkpjfmlGosdBtALTgbf3l
Pv8qK7hmU/cdBVWGfp+5KMZGcnPFcKvLYbjPo4EohVkq8dy+sHSwoiwg/QHsiDgL
ZnIIYdA5ZUOueTd95oL3RtK/tyqmpNNQ7KIF7veF5ED6A3l1wi5s1i25c++FGPKw
lB12gvNtz5j48je3AOn4fYpXdYWh1agw7DpfNpSjdHDPzvW2KWbIqzUXnkHTRwYD
RN0zZRM0nyyBbyapQ/WPJloeRbiQNGaCGwcpciA5glZgJdSZs0BX/v8K6liK/USy
2FGWXvG+uSd3BDYr
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:49 2025 by rpki-client