Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e203233343730.roa
File:                     32332e3133322e3138342e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          JsKcfpF3xvGqHIb9Tr6clojJozAOsEiXSCa3VfpnbCo=
Subject key identifier:   2A:7F:A7:3D:43:EA:4F:94:AC:9D:94:CC:25:9F:DE:D2:47:E7:5A:C7
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       6A504CEE82128BDA663671AAE5FCD502F32B61B8
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     23470
IP address blocks:        23.132.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Mar 2024 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:50:4c:ee:82:12:8b:da:66:36:71:aa:e5:fc:d5:02:f3:2b:61:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=2A7FA73D43EA4F94AC9D94CC259FDED247E75AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:3e:07:62:09:b5:f2:38:7a:f6:6b:cf:bf:
                    d1:20:c9:f5:19:99:81:1c:62:12:45:36:33:6a:24:
                    79:e7:38:1e:38:81:23:09:9d:77:ae:fa:d4:d3:89:
                    4a:06:3a:43:25:bc:a9:5b:27:d9:dd:8d:06:6e:df:
                    20:ee:2a:5b:eb:6e:19:11:6f:9c:29:99:21:9e:bc:
                    3f:03:69:7b:a3:45:71:85:57:57:2c:c9:24:f4:f1:
                    32:ed:0a:4f:00:9e:44:16:24:98:4e:4d:12:84:df:
                    6c:c4:6e:8a:c6:6c:c2:40:ee:b9:f3:36:36:c0:a6:
                    5f:c3:97:de:4e:03:6d:80:1a:f4:a1:0b:c7:5d:a3:
                    df:96:e2:40:3a:97:2a:6b:31:e2:84:dc:34:fc:f2:
                    fb:21:cc:10:82:41:fd:be:30:11:9d:ee:fb:0b:e1:
                    e9:c3:2e:1a:a0:b6:43:6b:e6:0f:35:df:40:ed:a7:
                    ce:5d:bf:99:f2:32:c2:01:93:1e:db:6d:f8:21:a9:
                    3d:83:67:c7:dc:c4:37:fe:26:b9:4d:fd:b3:fe:77:
                    b4:a3:01:72:01:cb:77:5e:08:36:4e:81:b0:2e:c3:
                    13:35:ec:73:ea:6b:6c:21:31:11:45:2d:33:bd:ca:
                    36:d4:a0:c8:ef:48:21:c2:77:7c:34:be:e0:80:bf:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7F:A7:3D:43:EA:4F:94:AC:9D:94:CC:25:9F:DE:D2:47:E7:5A:C7
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:94:3d:22:cc:08:83:0d:07:0e:59:d3:cc:96:8b:c4:4f:49:
         69:b7:f0:ef:9a:67:22:96:68:ae:e0:d9:43:91:e6:77:0d:66:
         d1:52:db:1a:17:0b:75:d4:90:47:a9:bb:bc:9d:e0:06:c6:26:
         44:c8:62:9a:48:6c:bf:56:03:4b:b8:8f:ef:5d:5a:83:c5:99:
         f6:fb:33:7e:ff:c8:52:03:a3:f5:d9:c8:f7:68:06:fb:e7:d9:
         0d:b4:af:32:6e:e8:68:5f:94:3f:90:72:4c:7b:cb:c6:28:68:
         75:12:37:82:5a:4f:a9:84:fd:e6:d1:8c:da:de:6d:35:e4:25:
         64:b5:62:8f:a3:c0:dd:3b:a2:5f:ce:5a:45:0c:b7:fa:86:0d:
         34:ab:3f:55:c1:69:46:3e:62:db:43:e0:1c:36:5a:fc:fa:0d:
         03:be:57:22:1c:08:21:49:55:de:b9:18:a1:dd:97:c4:5c:e3:
         e0:c7:64:3f:43:94:f0:4b:51:53:ef:e6:83:77:6d:f7:9f:21:
         54:28:44:09:32:f0:10:b6:39:39:fd:2b:e1:60:83:07:50:98:
         55:25:09:67:f5:73:ff:94:c2:99:7a:71:bd:61:6e:6d:42:ef:
         29:56:8e:3e:14:82:82:9b:c3:6e:7a:d8:0f:a1:8b:2f:41:9f:
         c7:d3:42:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----