Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e2037303138.roa
File:                     32332e3133322e3138342e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          39wjaOXzHjFP4VWYUTH0ZMqeASnWbKcdhkuG0r9l+sw=
Subject key identifier:   1C:58:87:EF:CE:E8:5A:9D:65:54:5C:2D:CC:8F:C7:C1:02:75:AB:97
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       13023AFB91A1DD9E26DD88F4412CE4CAD5857119
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e2037303138.roa
Signing time:             Sun 17 Mar 2024 22:27:11 +0000
ROA not before:           Sun 17 Mar 2024 22:22:11 +0000
ROA not after:            Sun 16 Mar 2025 22:27:11 +0000
asID:                     7018
IP address blocks:        23.132.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 06 Jul 2024 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:02:3a:fb:91:a1:dd:9e:26:dd:88:f4:41:2c:e4:ca:d5:85:71:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Mar 17 22:22:11 2024 GMT
            Not After : Mar 16 22:27:11 2025 GMT
        Subject: CN=1C5887EFCEE85A9D65545C2DCC8FC7C10275AB97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:f2:4c:3a:90:b3:00:6e:a7:a3:5f:5e:49:
                    cb:85:f0:61:dc:53:5e:26:5e:3a:8f:9f:0d:59:16:
                    70:66:ba:96:48:0e:74:c7:38:91:d2:9a:28:c2:b6:
                    2f:40:48:bc:21:51:83:c7:58:6a:ac:11:2c:42:87:
                    75:e0:5a:bb:8a:4d:b9:14:fc:96:d6:a0:c1:71:c2:
                    bd:d0:16:fb:dd:f7:e8:31:ff:94:ed:ca:7e:a2:fc:
                    e6:6a:8e:60:f7:b2:a1:02:67:2d:06:cf:08:32:38:
                    98:4e:e8:52:d0:1a:c3:22:66:54:4e:fa:20:7f:c6:
                    46:71:b1:e0:59:b5:ac:59:18:63:1d:35:1f:e1:73:
                    4b:26:ee:fb:2c:e4:bf:31:d6:88:10:1a:53:3e:8d:
                    58:88:84:69:26:5b:44:c2:bf:2f:b7:1a:e0:66:02:
                    75:10:86:25:7f:c8:52:87:2a:54:e6:32:dc:28:4d:
                    b7:0b:48:3f:f6:de:e7:76:ec:e8:0b:a1:44:04:9e:
                    3d:e0:1c:7d:4b:f8:8b:00:b3:ce:10:10:ad:72:78:
                    b5:3f:d0:5d:3c:b6:dd:cc:7e:9d:18:74:7c:e6:47:
                    64:73:1b:15:83:c1:a2:b8:42:cf:71:00:d3:a5:61:
                    d6:84:03:1d:f6:45:ef:c7:6d:69:9b:28:2b:bf:e6:
                    8d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:58:87:EF:CE:E8:5A:9D:65:54:5C:2D:CC:8F:C7:C1:02:75:AB:97
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:91:7c:d4:38:f4:45:0f:50:db:08:93:ff:f5:61:b8:03:28:
         75:30:b1:c8:85:90:56:46:93:61:3a:e3:bf:69:0c:40:34:88:
         3e:b4:75:12:d4:da:49:ac:e8:21:cc:95:1e:52:6c:6f:2a:f5:
         1c:e4:db:c0:a3:73:64:1e:8e:f6:18:05:0c:f9:8c:58:18:f8:
         43:74:7d:6f:21:b8:6b:bb:52:af:f3:d7:92:a4:79:70:9d:a5:
         61:e5:71:32:68:b6:5a:4d:5a:b4:da:97:f4:10:b3:e0:8b:0f:
         52:d3:65:2b:0f:f5:d8:a5:93:0a:7e:02:56:21:7d:f1:e5:3e:
         7a:cb:b5:85:97:f1:8e:ad:8c:bb:87:6b:63:51:47:3e:fe:a9:
         41:22:7c:69:28:48:91:a4:b3:00:2c:72:e2:0c:6e:44:af:64:
         d7:74:04:05:53:58:21:74:74:7e:c8:2c:3a:4c:66:09:0c:22:
         9a:af:f7:83:81:53:20:bb:9a:df:c9:94:53:e0:a6:ab:d9:ac:
         82:c5:08:49:f3:70:08:14:95:36:3b:d3:f8:1c:5b:5a:b5:cc:
         e3:2a:ed:06:e6:2b:74:7c:90:8e:fb:4c:07:37:80:c5:c1:af:
         3c:70:7e:45:6e:20:3d:c7:58:78:03:bc:eb:5c:1e:52:ca:d2:
         56:8d:2e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----