Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234382e302f32312d3234203d3e2037303239.roa
File:                     32332e38382e3234382e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier:          Nqe/PFM4i8b+HHUj9HYBNghOTzwOtze6zbPHLkWSR1Y=
Subject key identifier:   98:83:DF:91:8C:43:25:DF:15:0F:89:C7:24:79:68:81:9D:D2:CF:B5
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       72E9065E4BC156B608B1EFEBD11A8D8AFC9324D5
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234382e302f32312d3234203d3e2037303239.roa
Signing time:             Mon 30 Oct 2023 12:03:57 +0000
ROA not before:           Mon 30 Oct 2023 11:58:57 +0000
ROA not after:            Mon 28 Oct 2024 12:03:57 +0000
asID:                     7029
IP address blocks:        23.88.248.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e9:06:5e:4b:c1:56:b6:08:b1:ef:eb:d1:1a:8d:8a:fc:93:24:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:58:57 2023 GMT
            Not After : Oct 28 12:03:57 2024 GMT
        Subject: CN=9883DF918C4325DF150F89C7247968819DD2CFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:67:93:82:86:63:86:20:d5:64:f2:2a:d1:
                    4d:05:7a:fc:39:69:d2:66:38:3a:39:c9:c2:a6:f6:
                    91:a7:93:7f:95:cd:67:be:a9:3b:bf:67:eb:ef:4f:
                    75:2c:9b:4c:7c:c1:72:f6:70:03:68:e2:58:f2:59:
                    15:ed:b5:cc:d6:e1:cc:8a:27:d5:1c:3e:4c:21:d7:
                    96:25:4b:7a:ed:00:d2:96:26:8e:3d:a0:30:27:77:
                    1b:5a:41:2a:11:c4:2e:83:58:a2:76:2c:73:84:31:
                    f3:b1:5c:12:a1:e5:44:16:50:f2:f0:d2:b1:e7:b0:
                    72:bf:88:6c:c8:f8:ea:0e:e0:67:19:ab:b7:a4:33:
                    d5:b7:c9:19:c8:e3:9c:cb:2c:24:c3:43:0c:f0:36:
                    ba:79:ca:81:e2:99:59:35:ae:5a:f2:1a:46:cd:a7:
                    11:9e:78:a0:33:40:5a:74:5a:cb:a2:50:de:89:6b:
                    36:c0:aa:fc:35:13:d0:96:32:29:77:03:de:a7:fa:
                    bd:b2:f3:17:f0:3f:b2:26:4b:19:45:0b:88:c0:4b:
                    b3:d0:ff:08:b1:fe:bc:1f:d1:9c:da:22:73:79:0b:
                    7e:b8:2e:e4:24:0d:f3:b9:68:a8:29:91:fd:fc:fe:
                    df:f5:51:4f:34:97:1a:8d:af:81:ea:51:f0:27:8f:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:83:DF:91:8C:43:25:DF:15:0F:89:C7:24:79:68:81:9D:D2:CF:B5
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234382e302f32312d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:cf:23:23:00:44:a7:c4:e6:5c:aa:fe:cb:4f:af:28:3f:08:
         50:c6:ab:11:7f:13:e8:2d:87:bd:36:d3:e2:83:23:a7:d5:90:
         4f:83:3d:c7:ba:31:af:a4:c1:fd:9a:92:22:4b:f3:6d:f5:3e:
         76:3e:42:7f:23:b8:fd:27:6e:cc:14:38:1d:6d:79:1b:fd:17:
         c3:9d:6d:ae:ba:fa:91:d2:36:11:dc:bd:ac:95:7a:1a:90:66:
         fb:69:50:fc:ff:c2:4e:cb:6f:36:c2:1a:1f:96:16:99:23:32:
         8e:66:65:f5:f6:fc:62:79:0a:5b:1a:62:6e:39:65:f5:b1:7f:
         18:b1:17:be:61:bf:52:73:6b:b8:b9:bb:7d:44:5c:59:61:2e:
         0b:ca:ee:6f:d8:57:16:ac:b7:32:07:0e:f4:5c:dd:2d:2e:3c:
         82:0a:f9:26:d5:c5:c9:8a:24:42:bc:4b:2e:b2:e7:4a:4e:5f:
         45:22:5a:a3:f4:03:10:de:a6:d7:0f:0d:d1:f6:0e:ee:c3:5d:
         55:fe:62:ea:15:16:5b:fc:eb:21:bc:ca:80:ed:e8:bd:7a:c5:
         8e:18:86:44:7f:5d:5a:3d:58:e4:11:61:41:5b:21:02:5d:79:
         99:9f:6e:28:23:52:bd:be:20:0a:d0:11:d6:03:d3:9b:ea:6a:
         75:92:91:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----