Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3234203d3e20383334.roa
File:                     32332e38382e3232342e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier:          ujaP3xeAlFHQAzsSWvOxabv/dT5Erdoi7sD2OeChsX8=
Subject key identifier:   FC:F5:CC:AC:D3:0F:0D:97:65:10:47:8B:B3:42:30:16:8A:6D:97:4D
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0907EED5E36EFB31D00D9703163BD9915A727D73
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3234203d3e20383334.roa
Signing time:             Mon 01 Jul 2024 00:03:08 +0000
ROA not before:           Sun 30 Jun 2024 23:58:08 +0000
ROA not after:            Mon 30 Jun 2025 00:03:08 +0000
asID:                     834
IP address blocks:        23.88.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 14:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:07:ee:d5:e3:6e:fb:31:d0:0d:97:03:16:3b:d9:91:5a:72:7d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun 30 23:58:08 2024 GMT
            Not After : Jun 30 00:03:08 2025 GMT
        Subject: CN=FCF5CCACD30F0D976510478BB34230168A6D974D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:08:50:c2:de:f4:7b:bc:8f:5d:4d:38:50:
                    37:2c:81:ec:bf:a9:38:fa:14:70:66:89:a4:8c:40:
                    ff:07:c8:46:a5:8e:82:8c:88:57:de:d8:94:4c:a6:
                    84:ad:c0:7c:ea:c6:db:1d:9f:5f:45:69:f5:b7:8d:
                    74:28:3a:10:af:ed:31:7e:c5:12:51:73:7b:9c:43:
                    8c:60:8a:da:46:ab:d8:43:b3:64:34:b1:15:28:44:
                    0b:54:0c:c0:0e:62:66:9a:f3:36:17:52:f3:2e:5d:
                    90:dd:d3:13:89:bb:37:3b:ec:11:21:d3:fa:a7:b8:
                    9e:6d:f7:93:1b:b5:72:b2:5f:e1:dc:78:3b:66:3c:
                    46:94:03:d4:ea:2a:f1:5b:1f:3e:98:80:6a:0b:4d:
                    cd:5a:9f:6f:3a:64:36:f4:bd:21:8c:95:42:3c:b3:
                    c3:02:e1:73:c6:05:64:b8:2b:02:ea:3d:df:c3:b7:
                    54:b5:9d:3f:24:6c:e0:3c:4f:45:35:81:4b:f0:0c:
                    c1:29:d6:1f:5d:aa:7e:bb:f2:bf:a8:e0:c1:c1:53:
                    47:b5:f9:05:16:60:b1:a2:79:56:b4:d3:0c:a5:cc:
                    ad:96:5d:12:a4:b7:97:e0:47:65:e5:be:33:65:a7:
                    06:d2:8d:af:89:a8:66:9b:6e:fe:0c:27:78:b2:d0:
                    df:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F5:CC:AC:D3:0F:0D:97:65:10:47:8B:B3:42:30:16:8A:6D:97:4D
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:22:95:d8:cd:55:09:96:e6:3f:38:ae:1c:af:67:f1:3d:
         cd:15:5e:f6:12:60:d5:b3:ab:d7:c6:ec:a4:f8:c8:ec:86:0f:
         78:57:aa:50:d6:2b:5b:a0:b3:9f:93:ef:a4:a0:a8:69:21:a1:
         44:f1:ae:e8:2c:63:09:a2:96:f7:6d:85:e9:a3:69:b0:d2:a0:
         4a:b1:09:06:33:70:15:96:4a:81:7d:bf:ec:f2:f8:dc:2a:a5:
         98:7c:57:49:94:1a:44:ad:c5:8e:d9:f4:c6:d1:09:55:f1:30:
         af:6e:ad:b6:6b:3f:77:37:91:de:30:2f:97:48:b8:0f:05:ce:
         05:93:4a:25:78:44:4b:06:1a:a0:f2:40:f1:6c:61:0c:60:aa:
         dc:2c:b1:0d:36:f4:bb:e0:31:0b:4b:5c:12:5b:05:e7:d2:8b:
         9a:6b:37:cc:32:1d:a8:f2:3c:ef:6d:c0:b5:15:a8:b0:65:8f:
         39:4d:e2:47:6d:fd:79:65:43:58:3e:77:ed:b6:2c:bd:95:3b:
         78:09:c7:a6:0e:8d:b8:8d:85:7b:0d:7c:d7:66:03:33:f5:9a:
         94:a1:cc:cf:b4:57:e4:1b:fc:a1:7c:00:0b:74:db:88:6f:0f:
         85:23:5a:80:62:f7:37:8e:07:15:f2:34:97:e9:2b:c9:45:3b:
         8a:d7:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----