Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210370.roa
File:                     AS210370.roa (raw, json)
Hash identifier:          5uk8cHgnK8w+bp1PSDRpr5ay0F5bOmIzx/AMspMxy7c=
Subject key identifier:   43:81:56:73:1A:B6:2B:8C:BB:63:F9:FD:8E:12:C5:94:45:F7:81:B6
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       689E89A4CBF3755223DDDB1E72728632A306F8C2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210370.roa
Signing time:             Tue 05 Nov 2024 03:40:04 +0000
ROA not before:           Tue 05 Nov 2024 03:35:04 +0000
ROA not after:            Tue 04 Nov 2025 03:40:04 +0000
asID:                     210370
IP address blocks:        2a06:a005:4::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9e:89:a4:cb:f3:75:52:23:dd:db:1e:72:72:86:32:a3:06:f8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:04 2024 GMT
            Not After : Nov  4 03:40:04 2025 GMT
        Subject: CN=438156731AB62B8CBB63F9FD8E12C59445F781B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:79:23:ae:ad:9d:22:a2:f3:fb:8c:44:8e:
                    89:78:ea:54:10:a2:3d:38:e3:df:77:d0:59:aa:02:
                    19:f5:95:06:d9:a9:6f:de:7e:4f:17:fe:18:13:c8:
                    9a:aa:2a:35:3a:e2:63:26:ca:74:f3:81:08:b0:21:
                    66:ee:07:5c:a6:78:7e:8a:3a:b7:0c:9c:12:aa:98:
                    e0:08:27:30:9e:5d:35:8c:90:e5:b1:87:16:5f:ff:
                    10:15:fe:ce:45:01:26:8d:f9:6c:41:c6:71:c5:df:
                    67:61:13:94:e5:67:b7:48:60:5e:11:cf:59:4d:1e:
                    0c:81:ad:8d:cc:e5:a4:d8:19:48:c5:db:ed:56:23:
                    c4:2b:de:b4:1c:65:97:b1:09:93:e2:c2:57:88:04:
                    9f:a0:66:a2:e1:0e:97:d6:66:47:62:0d:20:da:fe:
                    f1:25:5b:27:82:02:e5:d5:82:bb:05:e9:e6:9a:87:
                    e6:64:1b:16:b3:ef:be:09:73:8d:0c:24:bc:78:fe:
                    ed:dd:1d:d5:31:8b:eb:5b:aa:8f:39:a8:68:7b:19:
                    1e:d7:89:fb:ef:e8:88:8b:29:22:81:e5:ad:8e:31:
                    9c:60:b3:f9:e7:e8:c6:ff:12:e5:ba:d5:ce:86:c2:
                    59:ea:2c:e3:11:1d:d4:6b:61:36:23:ec:ad:6c:ac:
                    f1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:81:56:73:1A:B6:2B:8C:BB:63:F9:FD:8E:12:C5:94:45:F7:81:B6
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210370.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:ee:be:d5:62:7e:56:7c:5a:88:e8:58:94:ba:f0:c8:21:eb:
         63:36:ec:4b:f9:55:ab:13:fe:60:60:b2:f6:ab:2b:51:e5:e7:
         6a:08:3b:34:f4:e8:49:dc:c8:61:08:67:d8:6f:82:8e:f5:5f:
         0b:03:aa:0e:3d:6b:bf:19:ed:a7:93:bb:c8:5f:d8:c7:63:81:
         f9:cf:c2:fd:b3:38:82:01:b5:c3:20:cf:80:12:a5:40:82:12:
         e8:2f:34:a6:fc:47:47:41:2f:43:5c:41:11:ef:1a:4b:80:5c:
         e8:6b:c5:30:4a:dd:4e:2d:be:2d:31:2d:f0:e7:4d:03:c5:cd:
         d9:3a:fe:ef:dd:04:95:a7:13:6c:08:8c:c9:bb:80:cd:a8:ce:
         4a:70:99:ce:8c:23:6e:f4:d2:09:94:66:60:5e:f7:05:4e:30:
         b4:b5:20:f8:4c:86:9c:d5:3b:92:21:9c:92:d0:2f:48:72:cd:
         21:b3:7d:20:e0:0a:38:0f:7a:42:e1:c8:25:f5:c6:86:37:19:
         c5:40:29:41:38:a4:85:9f:bf:0f:cc:3a:ba:2f:09:b4:e4:34:
         35:1c:71:84:7c:1b:29:3e:85:fe:ce:8e:ab:46:b3:95:b1:cc:
         21:2d:32:34:97:f5:db:6e:0e:34:e1:24:c9:86:a2:01:a6:6f:
         49:27:9c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:09 2025 by rpki-client