Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210645.roa
File:                     AS210645.roa (raw, json)
Hash identifier:          M3wBV81EE0CWlA5wSSwxKkcvAckAualvj+7ERU7RvUY=
Subject key identifier:   6E:79:97:F7:03:07:AA:2B:D4:84:1D:BA:88:99:A5:4D:AB:D9:28:6D
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       266E9587191BF5E615DA69C9867001B4867BACFD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210645.roa
Signing time:             Mon 11 Nov 2024 03:40:12 +0000
ROA not before:           Mon 11 Nov 2024 03:35:12 +0000
ROA not after:            Mon 10 Nov 2025 03:40:12 +0000
asID:                     210645
IP address blocks:        2a06:a005:2ab0::/44 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6e:95:87:19:1b:f5:e6:15:da:69:c9:86:70:01:b4:86:7b:ac:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov 11 03:35:12 2024 GMT
            Not After : Nov 10 03:40:12 2025 GMT
        Subject: CN=6E7997F70307AA2BD4841DBA8899A54DABD9286D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:77:da:f1:4d:9a:a3:75:cc:70:04:08:03:
                    ff:83:42:9b:22:21:a2:36:bf:30:52:87:05:06:02:
                    b5:97:4b:3f:c7:ef:aa:bd:30:14:2b:d9:70:ba:30:
                    ef:0c:19:9e:53:97:47:e4:a2:6d:ea:ac:46:52:04:
                    61:48:15:d4:2e:a8:f1:02:af:bb:31:3e:28:8d:f9:
                    4e:63:78:ef:da:03:f7:3a:5e:47:9d:b7:21:19:7b:
                    01:28:51:b9:4a:fa:0b:64:8c:d7:32:27:76:9a:76:
                    67:e7:82:87:38:3a:7c:19:d9:8d:5c:23:b7:d6:a6:
                    00:93:50:cd:ff:78:0b:6a:c5:d7:4b:f3:18:3f:b0:
                    01:22:6a:50:2e:45:f0:2a:57:b9:f3:32:f3:41:3d:
                    c8:ae:16:d6:e3:7f:b0:b8:2d:94:a9:ad:08:47:46:
                    f7:be:ff:e6:07:21:b5:04:16:2e:2b:61:51:fd:ba:
                    20:47:9c:a8:20:a5:af:f3:98:08:af:46:65:3d:07:
                    16:41:c7:f6:9e:d1:b4:7f:06:3f:6e:c7:94:f6:b7:
                    a2:bc:c2:d2:e1:ee:fc:b3:62:80:a8:0f:b2:fa:96:
                    b9:4f:b3:89:36:cf:17:99:97:14:bd:45:b9:4f:46:
                    47:ff:56:22:92:f4:f1:72:5a:11:69:50:1d:3b:03:
                    ad:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:79:97:F7:03:07:AA:2B:D4:84:1D:BA:88:99:A5:4D:AB:D9:28:6D
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210645.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2ab0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a6:f1:0c:02:e2:a2:98:0a:bf:9b:b1:59:2a:13:24:2f:30:d0:
         35:7d:94:02:27:8c:3f:04:50:02:d0:b5:1b:1d:72:41:4f:21:
         4a:c0:81:ac:a0:2d:21:c1:2c:a9:a6:3a:ac:8b:dd:46:d8:4a:
         9f:1d:65:e2:85:c6:9d:d3:2a:e5:28:50:2d:54:b6:53:95:5e:
         2a:08:c6:99:03:80:c4:89:76:d2:82:13:72:e5:35:c3:5e:1e:
         cc:1b:26:38:2b:6b:2d:02:23:13:9b:df:52:e0:9e:ee:2d:7a:
         66:6d:e8:39:30:79:03:ac:5b:87:0e:8d:4e:ff:83:11:07:12:
         e5:50:92:01:9b:f8:87:1c:ca:8d:e8:11:6b:8b:df:0d:de:83:
         df:0f:1a:a3:a4:69:26:0a:e5:f6:88:ff:cc:ec:2c:0e:13:0c:
         c5:5b:42:5d:8d:f4:ae:08:a5:7a:d5:2a:db:8f:e9:d6:f7:dd:
         3d:9e:41:ae:26:3f:52:79:32:73:d3:be:95:9c:b0:64:92:9b:
         57:aa:3a:3f:c4:a6:e9:12:1d:99:19:eb:62:7b:cc:ad:2f:4b:
         bd:ff:67:72:e3:fc:83:5e:1c:15:e2:79:13:f9:46:5d:99:af:
         cf:42:80:da:85:da:6a:d7:61:13:ce:4d:52:fd:10:cd:91:21:
         7d:2e:72:6e
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUJm6Vhxkb9eYV2mnJhnABtIZ7rP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMTEwMzM1MTJaFw0yNTExMTAwMzQwMTJaMDMxMTAvBgNV
BAMTKDZFNzk5N0Y3MDMwN0FBMkJENDg0MURCQTg4OTlBNTREQUJEOTI4NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfwnfa8U2ao3XMcAQIA/+DQpsi
IaI2vzBShwUGArWXSz/H76q9MBQr2XC6MO8MGZ5Tl0fkom3qrEZSBGFIFdQuqPEC
r7sxPiiN+U5jeO/aA/c6XkedtyEZewEoUblK+gtkjNcyJ3aadmfngoc4OnwZ2Y1c
I7fWpgCTUM3/eAtqxddL8xg/sAEialAuRfAqV7nzMvNBPciuFtbjf7C4LZSprQhH
Rve+/+YHIbUEFi4rYVH9uiBHnKggpa/zmAivRmU9BxZBx/ae0bR/Bj9ux5T2t6K8
wtLh7vyzYoCoD7L6lrlPs4k2zxeZlxS9RblPRkf/ViKS9PFyWhFpUB07A60nAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUbnmX9wMHqivUhB26iJmlTavZKG0wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEwNjQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBSqwMA0GCSqGSIb3DQEBCwUAA4IBAQCm8QwC
4qKYCr+bsVkqEyQvMNA1fZQCJ4w/BFAC0LUbHXJBTyFKwIGsoC0hwSyppjqsi91G
2EqfHWXihcad0yrlKFAtVLZTlV4qCMaZA4DEiXbSghNy5TXDXh7MGyY4K2stAiMT
m99S4J7uLXpmbeg5MHkDrFuHDo1O/4MRBxLlUJIBm/iHHMqN6BFri98N3oPfDxqj
pGkmCuX2iP/M7CwOEwzFW0JdjfSuCKV61Srbj+nW9909nkGuJj9SeTJz076VnLBk
kptXqjo/xKbpEh2ZGetie8ytL0u9/2dy4/yDXhwV4nkT+UZdma/PQoDahdpq12ET
zk1S/RDNkSF9LnJu
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:42:25 2025 by rpki-client