Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/927c3915-8496-4bf8-860b-fc702af0efb6/bc70b29e-ebc8-3409-aaa6-fcd4b92f9283.roa
File:                     bc70b29e-ebc8-3409-aaa6-fcd4b92f9283.roa (raw, json)
Hash identifier:          W1PHxOm9+3zsUdrJgOoSrGL4/Ptbds15xcayTfeBnOI=
Subject key identifier:   69:83:4D:72:BD:3C:B9:DC:E0:24:29:85:79:A4:66:E7:8D:33:19:0B
Certificate issuer:       /CN=927c3915-8496-4bf8-860b-fc702af0efb6
Certificate serial:       010D0C9F4328583A3BD22F4EE0F205C552F73F00
Authority key identifier: 57:97:70:F7:9B:8C:15:69:98:0C:3C:5D:3E:9A:07:1F:6E:E0:8B:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/927c3915-8496-4bf8-860b-fc702af0efb6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/927c3915-8496-4bf8-860b-fc702af0efb6/bc70b29e-ebc8-3409-aaa6-fcd4b92f9283.roa
Signing time:             Thu 22 Apr 2021 04:00:00 +0000
ROA not before:           Thu 22 Apr 2021 04:00:00 +0000
ROA not after:            Fri 15 Sep 2028 04:00:00 +0000
asID:                     7018
IP address blocks:        163.123.220.0/24 maxlen: 24
                          163.123.221.0/24 maxlen: 24
                          163.123.222.0/24 maxlen: 24
                          163.123.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 16 Jun 2022 12:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:3b:d2:2f:4e:e0:f2:05:c5:52:f7:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927c3915-8496-4bf8-860b-fc702af0efb6
        Validity
            Not Before: Apr 22 04:00:00 2021 GMT
            Not After : Sep 15 04:00:00 2028 GMT
        Subject: CN=c9d42cf6-5633-496b-b5c9-e2a2f7083deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:b0:ec:0f:f8:73:29:36:6e:e5:20:a5:bf:
                    72:11:e2:37:4e:4e:34:eb:2d:02:de:73:55:86:fe:
                    d9:0e:b9:ad:5e:a7:f3:97:9c:0a:89:c7:c6:27:31:
                    2f:09:44:27:68:cc:66:28:01:b6:21:f7:08:80:26:
                    4d:2d:40:28:3e:82:d6:e2:3d:91:26:3a:43:e8:81:
                    f0:b8:dd:76:ec:3c:93:98:3b:2c:0d:31:9e:3e:84:
                    f2:88:e7:ca:7b:83:e8:03:76:0f:cb:30:ef:81:b4:
                    57:11:8f:6c:59:2d:e3:47:1e:92:57:02:2d:e7:b6:
                    95:99:6a:18:f2:f4:b5:db:44:cf:ea:94:55:ca:48:
                    30:57:54:16:f3:5d:a7:3f:e0:b1:a2:18:52:2b:7d:
                    84:53:a8:3e:d4:88:40:b0:38:db:5f:71:40:76:1b:
                    87:5f:3e:da:d5:04:0e:aa:fd:da:b6:13:ef:47:f5:
                    09:77:57:de:de:8a:3d:88:21:69:e0:bb:d8:9d:b0:
                    68:74:3f:5d:65:03:c6:f6:6a:76:22:bc:35:53:f6:
                    8d:5f:ff:75:65:86:a6:ec:34:6f:2d:ad:2d:e2:27:
                    4d:66:0c:16:26:77:da:80:50:25:55:38:c5:68:ab:
                    e5:3a:9f:2d:36:d0:ea:0b:f4:88:f1:8a:ed:b3:d7:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:83:4D:72:BD:3C:B9:DC:E0:24:29:85:79:A4:66:E7:8D:33:19:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/927c3915-8496-4bf8-860b-fc702af0efb6/bc70b29e-ebc8-3409-aaa6-fcd4b92f9283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/927c3915-8496-4bf8-860b-fc702af0efb6/927c3915-8496-4bf8-860b-fc702af0efb6.crl

            X509v3 Authority Key Identifier:
                keyid:57:97:70:F7:9B:8C:15:69:98:0C:3C:5D:3E:9A:07:1F:6E:E0:8B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/927c3915-8496-4bf8-860b-fc702af0efb6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:30:ab:56:48:93:e4:20:f5:6e:d7:bf:f0:bb:78:d6:69:1e:
         b4:86:5d:6b:9a:96:6d:81:6f:2b:39:9e:14:8c:f0:05:91:e2:
         86:39:f3:94:d9:a8:73:91:68:d2:c0:13:5b:8b:87:62:be:e8:
         b4:65:80:16:9c:62:61:6c:ca:49:76:a8:8b:06:26:ae:15:8a:
         ec:79:03:8d:7c:d0:1d:3b:ea:6b:60:b5:68:12:ec:42:d2:0e:
         6b:d1:0c:3b:0d:63:f0:9f:96:7d:81:7f:6b:63:ec:78:81:ac:
         9a:01:0d:64:12:6d:b1:cf:8c:e5:fd:e9:a1:89:eb:03:b2:5c:
         50:93:8b:d8:2e:c0:0d:2e:63:b2:94:0b:0d:bd:01:75:23:a8:
         53:05:5a:9e:43:d5:9c:fa:9d:10:84:40:dd:c5:90:88:2d:88:
         25:a9:61:c8:8c:8e:a0:6a:05:73:f2:f8:85:64:8f:7a:02:2c:
         53:d8:fa:38:31:51:0a:76:99:b5:b5:66:09:ab:c9:9e:b6:e8:
         d7:b1:66:54:55:4a:07:12:9d:5b:31:0b:5e:c8:ed:44:47:55:
         ba:e2:f1:9f:11:10:67:2e:23:be:a1:de:02:fa:14:f5:91:45:
         70:3d:97:49:fc:ef:f4:7e:68:bc:58:ca:ad:cf:b6:56:da:1a:
         eb:27:ee:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org