Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f32312d3234203d3e2037303239.roa
File:                     32332e38382e3232342e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier:          7qwZKv4dL4tCjR2oLv+xOdTidki0yxrn6MXpN0+IlG8=
Subject key identifier:   F9:8C:A6:9F:FF:26:D3:B0:D4:8C:00:83:E8:F2:3C:F5:91:D8:B9:EF
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7D49466BAC6F0B85A1067195465FB842FA3A6BB7
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f32312d3234203d3e2037303239.roa
Signing time:             Mon 30 Oct 2023 12:04:03 +0000
ROA not before:           Mon 30 Oct 2023 11:59:03 +0000
ROA not after:            Mon 28 Oct 2024 12:04:03 +0000
asID:                     7029
IP address blocks:        23.88.224.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:49:46:6b:ac:6f:0b:85:a1:06:71:95:46:5f:b8:42:fa:3a:6b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:59:03 2023 GMT
            Not After : Oct 28 12:04:03 2024 GMT
        Subject: CN=F98CA69FFF26D3B0D48C0083E8F23CF591D8B9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:d6:dc:1e:4b:3e:27:7e:e6:48:56:e8:d2:
                    6a:b6:ab:36:1e:cb:a4:2a:57:22:f3:5b:08:a4:6d:
                    cc:a3:a3:0b:e1:db:d4:88:79:dd:15:7c:f8:c3:54:
                    3c:7a:0e:30:48:23:a7:af:6e:7c:66:1d:89:6f:c5:
                    c5:df:52:23:d6:a5:e9:df:28:bf:39:93:6a:87:8b:
                    3b:f9:fb:a3:51:e9:43:af:8c:93:79:7e:c7:0e:2a:
                    94:42:3b:54:83:cd:2a:d9:1f:37:56:2b:c7:27:6a:
                    6f:80:dc:f4:a9:d4:9e:04:4f:99:21:2a:48:c5:11:
                    01:f4:50:31:b7:d6:a7:21:35:03:95:31:1b:b7:70:
                    6f:69:8a:da:e7:ca:ec:11:9b:30:8b:fc:c0:50:da:
                    e6:2f:4e:b9:2d:76:c5:d2:7f:29:12:b1:fb:14:1d:
                    53:71:0e:12:0d:13:21:3b:77:89:30:b5:42:52:38:
                    8a:f3:dc:d3:4e:79:d3:1a:f8:2b:84:24:3c:08:89:
                    47:2a:c0:b6:bb:7b:9e:b0:b7:4b:29:74:41:c1:f1:
                    02:0f:17:b5:88:25:58:20:21:45:1b:5d:82:7d:20:
                    e7:40:44:3e:85:41:0e:32:41:f9:a1:10:06:48:6a:
                    63:c8:37:97:e4:ba:4c:ff:9a:19:03:1a:ee:d5:ba:
                    d8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8C:A6:9F:FF:26:D3:B0:D4:8C:00:83:E8:F2:3C:F5:91:D8:B9:EF
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f32312d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:17:87:c2:91:7f:e0:7e:cf:20:5d:e2:48:c3:2a:fd:6a:96:
         af:75:27:97:a6:e2:ce:a2:42:6c:73:f9:21:78:d8:27:70:cb:
         3c:39:ea:03:24:4a:a6:d6:6e:7e:6a:dc:e7:0b:2a:05:ce:0c:
         8a:c6:a4:8d:bc:4d:8d:00:29:0b:a1:a7:0f:71:0c:c2:d0:8e:
         b7:47:a6:94:96:1f:9d:29:43:6b:0b:09:c0:bf:73:b9:74:53:
         95:af:9e:44:d5:94:ed:38:04:0b:56:04:0e:9b:fd:5e:45:34:
         37:c7:46:5a:50:20:dc:1a:fb:28:9c:4b:7c:dc:e0:47:ee:40:
         7a:1e:a0:30:a0:53:c8:33:3b:0c:d3:29:31:18:4a:11:c1:f9:
         83:7e:5c:41:3b:64:73:3d:f9:86:4f:c2:63:f9:03:89:35:d1:
         60:15:6b:f7:ef:b0:7f:11:d5:43:2c:15:f3:a1:f2:09:13:15:
         95:03:e7:15:7b:28:4b:94:af:44:67:84:83:65:0f:5f:94:d5:
         56:3a:43:83:13:85:d8:78:34:f5:50:4d:8b:f0:c7:72:65:6f:
         5e:a0:f7:42:af:5b:af:3c:65:a9:87:36:0b:fe:2e:4d:df:68:
         3c:69:f9:bb:dd:0b:f0:61:e5:12:cd:9f:91:7f:29:c4:b2:64:
         be:a0:f7:95
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUfUlGa6xvC4WhBnGVRl+4Qvo6a7cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjMxMDMwMTE1OTAzWhcNMjQxMDI4MTIwNDAz
WjAzMTEwLwYDVQQDEyhGOThDQTY5RkZGMjZEM0IwRDQ4QzAwODNFOEYyM0NGNTkx
RDhCOUVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF/W3B5LPid+
5khW6NJqtqs2HsukKlci81sIpG3Mo6ML4dvUiHndFXz4w1Q8eg4wSCOnr258Zh2J
b8XF31Ij1qXp3yi/OZNqh4s7+fujUelDr4yTeX7HDiqUQjtUg80q2R83VivHJ2pv
gNz0qdSeBE+ZISpIxREB9FAxt9anITUDlTEbt3BvaYra58rsEZswi/zAUNrmL065
LXbF0n8pErH7FB1TcQ4SDRMhO3eJMLVCUjiK89zTTnnTGvgrhCQ8CIlHKsC2u3ue
sLdLKXRBwfECDxe1iCVYICFFG12CfSDnQEQ+hUEOMkH5oRAGSGpjyDeX5LpM/5oZ
Axru1brY9wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPmMpp//JtOw1IwAg+jyPPWR
2LnvMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk
MzdkYWM3MmYxLzEvMzIzMzJlMzgzODJlMzIzMjM0MmUzMDJmMzIzMTJkMzIzNDIw
M2QzZTIwMzczMDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMXWOAwDQYJKoZIhvcNAQELBQADggEB
AHwXh8KRf+B+zyBd4kjDKv1qlq91J5em4s6iQmxz+SF42Cdwyzw56gMkSqbWbn5q
3OcLKgXODIrGpI28TY0AKQuhpw9xDMLQjrdHppSWH50pQ2sLCcC/c7l0U5WvnkTV
lO04BAtWBA6b/V5FNDfHRlpQINwa+yicS3zc4EfuQHoeoDCgU8gzOwzTKTEYShHB
+YN+XEE7ZHM9+YZPwmP5A4k10WAVa/fvsH8R1UMsFfOh8gkTFZUD5xV7KEuUr0Rn
hINlD1+U1VY6Q4MThdh4NPVQTYvwx3Jlb16g90KvW688ZamHNgv+Lk3faDxp+bvd
C/Bh5RLNn5F/KcSyZL6g95U=
-----END CERTIFICATE-----