Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51930.roa
File:                     AS51930.roa (raw, json)
Hash identifier:          5yiKG1okLQSCtVTkvvyJ3IRFYM+xMGLvSRVQN45ODYw=
Subject key identifier:   43:53:72:86:BA:F8:9E:04:6D:C9:0C:22:08:7D:A9:D5:78:91:A4:F6
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       150CD7BDCC916424E220A41BBD339770A39667CA
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51930.roa
Signing time:             Tue 05 Nov 2024 03:40:03 +0000
ROA not before:           Tue 05 Nov 2024 03:35:03 +0000
ROA not after:            Tue 04 Nov 2025 03:40:03 +0000
asID:                     51930
IP address blocks:        2a06:a005:1d10::/44 maxlen: 48
Validation:               Failed, certificate revoked on Fri 13 Dec 2024 02:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0c:d7:bd:cc:91:64:24:e2:20:a4:1b:bd:33:97:70:a3:96:67:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:03 2024 GMT
            Not After : Nov  4 03:40:03 2025 GMT
        Subject: CN=43537286BAF89E046DC90C22087DA9D57891A4F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c4:fa:37:57:d2:1f:c8:bc:7c:a8:d9:1d:6b:
                    a3:a2:8e:8a:a0:97:db:f6:81:d4:b4:e4:e9:8f:94:
                    4e:d5:d9:59:21:c2:e0:fe:ba:8f:be:33:34:e8:33:
                    97:ab:be:5d:c7:2c:f4:80:15:51:9c:c1:cf:87:58:
                    c1:70:8e:5f:06:76:5b:46:50:ca:bd:5c:84:3b:62:
                    c7:b7:33:23:b8:60:d3:d5:a5:4d:83:d5:6f:c4:1d:
                    cb:f5:51:47:bc:56:6c:06:0a:16:5a:d8:62:43:2c:
                    48:e8:2e:47:c6:02:68:17:04:71:26:40:45:db:37:
                    35:6f:96:e1:88:d0:89:ab:16:51:f4:41:d2:fb:26:
                    8e:e1:bb:8a:74:36:db:b0:39:34:92:2e:a2:bd:31:
                    a0:df:c2:3d:e0:12:1f:40:03:e8:6d:d7:09:bb:28:
                    ee:90:37:71:2d:ce:3a:01:25:26:53:5a:65:cc:5f:
                    a3:5b:a1:bd:90:77:5e:7d:49:76:c4:5a:5f:eb:7d:
                    23:ff:84:e4:bb:5e:96:61:f2:c8:9d:d2:f8:02:a5:
                    05:2b:4b:4e:e7:c2:24:2f:66:90:2b:ac:3f:39:60:
                    0c:8c:9f:f8:c9:94:1b:07:f8:71:13:a2:0c:69:dd:
                    4d:bc:99:22:0d:00:f8:e4:22:cd:41:9d:20:ad:f3:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:53:72:86:BA:F8:9E:04:6D:C9:0C:22:08:7D:A9:D5:78:91:A4:F6
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1d10::/44

    Signature Algorithm: sha256WithRSAEncryption
         af:08:71:a4:e5:69:53:9b:61:b0:ab:bf:0b:2c:b5:34:bc:75:
         fe:eb:00:95:30:42:d2:30:0f:d3:6b:a8:64:c4:3d:74:bc:eb:
         92:de:b6:b9:b1:02:7a:bb:d3:40:1b:6b:93:35:a0:f2:13:56:
         89:c6:31:3b:52:8f:20:c6:de:49:71:b5:40:ae:38:58:92:a9:
         f7:e4:29:35:ff:6d:80:5c:42:b6:15:04:77:ad:d4:89:3c:75:
         4d:65:87:8f:a9:45:2c:04:b9:00:a7:2f:fd:d2:22:bc:85:0c:
         4a:c6:46:fe:10:a1:54:b3:92:4f:4a:ed:4d:96:6b:b8:3b:b7:
         8c:0c:85:82:2e:b3:b9:4a:c5:30:60:4d:32:bb:ad:62:c0:cf:
         42:4f:a5:83:8c:eb:ee:85:a7:3b:4c:09:2b:3f:ad:5b:97:8e:
         28:15:39:66:d5:b9:0e:5f:da:e3:bb:9f:29:b5:4e:9d:4f:e5:
         6c:03:ea:a8:d6:d5:41:4c:14:87:6b:ab:7d:77:ff:20:b3:e3:
         e7:6e:91:02:59:56:05:07:1d:8a:2e:70:6f:cf:de:db:ab:30:
         cd:0d:d2:77:5c:cc:f7:da:53:6b:c3:51:71:83:fc:35:6b:58:
         4c:52:56:f0:2b:16:85:a2:30:14:47:0b:51:ef:96:bc:a4:6a:
         32:0c:41:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:39 2025 by rpki-client