Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32362e302f32342d3234203d3e20313939313830.roa
File:                     32332e3134322e32362e302f32342d3234203d3e20313939313830.roa (raw, json)
Hash identifier:          oSHydJ4yHMo9wK6TKrNShTY5HlrN3peqmPLkFIBg5D8=
Subject key identifier:   E2:69:B7:C7:86:8C:2C:16:8C:4E:32:A3:34:4E:CD:6C:AC:99:7B:9C
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       1DE8AE76802AEEA0613727055476A27FBA0588E9
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32362e302f32342d3234203d3e20313939313830.roa
Signing time:             Sat 29 Jul 2023 13:46:13 +0000
ROA not before:           Sat 29 Jul 2023 13:41:13 +0000
ROA not after:            Sat 27 Jul 2024 13:46:13 +0000
asID:                     199180
IP address blocks:        23.142.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 29 Oct 2023 19:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e8:ae:76:80:2a:ee:a0:61:37:27:05:54:76:a2:7f:ba:05:88:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Jul 29 13:41:13 2023 GMT
            Not After : Jul 27 13:46:13 2024 GMT
        Subject: CN=E269B7C7868C2C168C4E32A3344ECD6CAC997B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:fa:22:be:14:70:4b:af:27:47:2f:65:42:
                    ff:92:53:29:73:05:bd:c0:8e:32:bc:89:60:a6:fd:
                    93:8c:53:ff:96:d0:77:01:8f:5d:af:8a:e2:8c:67:
                    be:d6:bc:f6:50:95:f2:3c:c9:3c:cb:5d:08:e6:19:
                    4d:48:ba:95:e9:85:01:f9:e3:92:3c:07:b9:6f:4c:
                    36:39:18:b2:ad:48:22:46:36:d0:39:2c:9a:8c:3f:
                    ed:e4:18:94:8e:f8:10:e1:40:aa:84:21:07:0f:ee:
                    17:d4:ff:4a:40:10:0a:d7:ef:e7:1f:fe:0e:08:e0:
                    39:74:cc:65:0b:c2:cc:e4:2b:43:97:0c:9c:70:f6:
                    8e:cd:8f:bc:37:21:e1:ab:44:f4:1d:9a:22:48:4a:
                    88:e1:1d:b7:f9:9f:e1:b1:88:41:14:26:05:dd:fd:
                    4c:e3:1f:eb:8c:a2:84:2e:ee:23:b3:ed:12:4b:79:
                    e1:c8:fb:fd:dc:1f:6e:9b:e8:d1:6a:65:0c:45:a3:
                    54:96:91:69:41:db:39:19:1e:c6:8c:24:77:7b:c6:
                    94:81:26:f9:52:6c:37:fb:fd:5e:99:4e:81:3f:20:
                    0c:47:d4:7e:27:52:0e:b9:be:fb:e9:d5:d6:e9:e4:
                    08:fa:96:12:7a:ad:44:20:2c:43:99:f2:53:f1:2b:
                    f7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:69:B7:C7:86:8C:2C:16:8C:4E:32:A3:34:4E:CD:6C:AC:99:7B:9C
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32362e302f32342d3234203d3e20313939313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:f0:3f:d1:d6:a6:5a:fe:ba:61:36:3f:c7:32:04:8f:6c:
         e6:b2:fc:58:bc:01:e1:e3:9b:da:10:5e:ac:ae:eb:97:ef:ab:
         55:41:74:77:30:7f:b7:50:b5:6f:bd:84:c9:4a:72:ba:3f:1d:
         5b:26:8a:f1:4c:48:5c:d7:09:e5:ea:b9:ed:93:1d:a8:13:fa:
         35:e7:56:60:44:b7:f2:c2:15:52:18:cf:67:a3:b2:f5:e9:c0:
         9e:b9:ad:56:51:10:c6:e4:2d:1a:93:2f:76:7a:96:82:22:ce:
         d2:6c:fd:16:90:57:80:8a:78:50:9d:4e:e6:6e:1a:dd:ff:49:
         da:52:08:f8:11:38:b1:2f:b7:e7:0f:9a:67:80:ad:fd:8d:66:
         0a:3c:24:74:ca:67:e7:35:06:5a:cd:bd:ef:50:50:9f:ca:07:
         ed:a9:75:0c:63:0e:8c:a0:89:54:f3:b4:64:1f:19:bb:9e:7f:
         12:57:8e:fc:1b:26:e0:04:6c:72:c0:08:7d:ef:12:1f:06:3c:
         08:ab:9b:11:8e:10:02:de:72:8c:46:68:db:94:a3:27:f7:4f:
         94:b9:a7:79:ff:3f:54:db:bf:e6:b5:83:96:3e:a6:6b:db:52:
         1d:da:cf:c4:b5:06:47:01:4c:99:53:04:ac:fa:21:03:ed:63:
         bf:3d:30:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----