Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234302e302f32302d3234203d3e2031323339.roa
File:                     32332e38382e3234302e302f32302d3234203d3e2031323339.roa (raw, json)
Hash identifier:          XtEE6A2EOG8uE+j7JqUitUUedcJHxb2Q4b5Ix3IfZH8=
Subject key identifier:   FD:B6:89:2D:4D:9F:8B:63:06:B5:8F:23:74:E0:A8:B3:53:15:92:43
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3A166AF5E839C6F52C094CCFB0DA008CAAA1EBD0
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234302e302f32302d3234203d3e2031323339.roa
Signing time:             Mon 30 Oct 2023 12:03:58 +0000
ROA not before:           Mon 30 Oct 2023 11:58:58 +0000
ROA not after:            Mon 28 Oct 2024 12:03:58 +0000
asID:                     1239
IP address blocks:        23.88.240.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:16:6a:f5:e8:39:c6:f5:2c:09:4c:cf:b0:da:00:8c:aa:a1:eb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:58:58 2023 GMT
            Not After : Oct 28 12:03:58 2024 GMT
        Subject: CN=FDB6892D4D9F8B6306B58F2374E0A8B353159243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:94:1d:b4:cc:94:29:fa:1e:33:32:ea:26:
                    85:93:8f:cc:1b:a0:1d:f6:33:c7:b7:6b:fb:96:e7:
                    3e:8e:2b:fc:9f:16:28:23:29:a6:fe:14:07:7b:b9:
                    6c:3c:53:df:bc:ff:56:58:29:c5:28:67:2e:ed:41:
                    b9:df:e9:ae:eb:9f:40:b5:f3:9a:ce:b2:9b:42:ec:
                    b9:72:c5:7b:75:41:28:fe:65:86:a2:c1:92:c9:6b:
                    c8:05:67:ef:84:6b:97:cf:89:46:88:dd:13:26:4d:
                    e5:5b:c6:7f:62:3c:8a:f7:0c:97:c2:7e:8a:d8:1c:
                    55:ef:5a:39:96:b2:77:65:d8:39:45:aa:78:71:f1:
                    fa:98:ef:3b:2a:79:82:8a:f0:10:43:8e:9d:c8:b8:
                    e7:c1:07:a4:de:6e:d4:a7:e3:31:8b:43:96:48:d3:
                    75:a8:3c:44:0c:b9:b5:af:a0:af:3d:5f:02:e7:40:
                    9a:56:a8:82:13:59:5b:e5:7f:90:54:fc:83:4c:ed:
                    62:42:1e:90:b9:8c:4f:20:fa:d0:86:4b:2d:50:50:
                    84:84:f8:dd:65:70:d6:0d:4c:df:14:a6:9b:ea:71:
                    f3:b4:bc:18:81:76:5b:f8:2a:96:5a:8e:82:32:13:
                    02:16:21:40:4d:49:bb:31:db:fa:81:4d:0e:e6:37:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B6:89:2D:4D:9F:8B:63:06:B5:8F:23:74:E0:A8:B3:53:15:92:43
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234302e302f32302d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:1a:f7:33:20:bb:61:fa:25:64:85:8e:36:7c:67:5f:25:
         79:6c:24:2c:cd:56:72:3d:af:9d:90:a3:0a:75:ce:f4:70:30:
         74:f8:38:0a:92:08:a8:f1:9d:6c:84:85:db:65:13:f7:36:4f:
         7c:08:55:47:ca:0f:78:8a:37:17:38:38:2d:84:0e:8d:07:f4:
         0f:89:41:17:01:89:92:29:00:cb:7c:2a:28:c9:33:93:1b:5a:
         55:53:7b:58:79:d2:eb:46:fe:b5:9f:71:3e:99:aa:35:2e:4c:
         32:b5:eb:74:00:1d:d2:46:60:f1:81:34:dc:cf:e5:ad:3e:12:
         0b:3f:ea:88:9a:35:5e:15:8c:34:99:aa:6e:18:ba:6b:41:68:
         8a:db:bc:37:c7:0e:e1:d6:17:b3:a1:a7:d2:89:d2:a6:c4:e6:
         9f:17:4d:ce:58:9e:a4:ae:36:ca:5f:b5:e2:0f:62:0e:a6:b4:
         49:c2:3a:b8:11:f4:55:fc:17:66:ca:73:54:80:eb:ff:bb:d6:
         aa:27:40:38:31:1d:b8:70:73:fc:3b:aa:2d:03:b7:d5:20:f5:
         52:dd:e5:a8:c5:f9:34:a3:41:72:2c:23:2f:14:37:f0:b8:ed:
         c7:c6:41:5b:eb:a1:19:4c:dd:9c:05:8a:c7:67:9f:7f:e6:af:
         78:94:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----