Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS51791.roa
File:                     AS51791.roa (raw, json)
Hash identifier:          4+O4fuCGJb1udylr6s+hUmTW/8XgLELc7/JK9QMIoUg=
Subject key identifier:   D9:15:B5:75:2D:59:A2:51:E1:D3:09:A5:30:FC:6D:AF:AB:31:C9:D7
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       29466617A8014B820793D2DC5AB21D3474832699
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS51791.roa
Signing time:             Tue 13 Feb 2024 20:04:19 +0000
ROA not before:           Tue 13 Feb 2024 19:59:19 +0000
ROA not after:            Tue 11 Feb 2025 20:04:19 +0000
asID:                     51791
IP address blocks:        192.228.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 May 2024 00:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:46:66:17:a8:01:4b:82:07:93:d2:dc:5a:b2:1d:34:74:83:26:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb 13 19:59:19 2024 GMT
            Not After : Feb 11 20:04:19 2025 GMT
        Subject: CN=D915B5752D59A251E1D309A530FC6DAFAB31C9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:b6:41:e9:35:1e:df:2d:6e:eb:19:bf:1a:
                    03:ba:eb:3d:15:95:d6:4d:c8:a5:21:53:87:35:95:
                    af:1b:b0:fc:e9:5e:5e:d2:de:f5:a9:53:5f:cd:00:
                    67:13:a0:d0:a6:6f:0d:ed:25:c7:ce:8f:b8:35:4e:
                    83:6a:30:02:4c:63:0a:bb:c4:0b:d0:13:0b:b4:e5:
                    d1:f7:4a:82:9e:ba:f6:ad:29:69:5c:b1:3b:9f:4e:
                    c7:c6:7b:a9:68:ab:f0:13:89:a7:c5:6d:94:8d:07:
                    c9:c2:88:bf:64:13:49:aa:5c:0f:68:f1:a0:5c:cc:
                    d3:69:e4:31:22:f0:89:a7:f9:6a:f9:ac:9b:42:ad:
                    2a:f0:73:5b:0a:08:b1:0d:83:97:63:d3:bd:ca:93:
                    56:8e:1f:57:0d:ac:38:c6:7f:53:dc:cc:09:10:80:
                    8f:7a:0a:d7:b5:a1:32:62:7e:1e:fb:71:eb:3a:a7:
                    12:3e:0a:da:ee:b6:59:bf:de:0a:6f:99:26:e3:8a:
                    3b:7f:f0:0a:80:8d:ca:37:a9:7e:13:d7:51:ec:13:
                    bb:3d:52:d4:d4:bd:55:6e:9d:c3:57:3e:70:7b:54:
                    a2:61:e4:9a:51:8c:f6:d8:44:13:9d:16:a0:39:7d:
                    af:1e:49:16:bd:20:27:fc:db:8f:46:65:a3:e3:47:
                    f6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:15:B5:75:2D:59:A2:51:E1:D3:09:A5:30:FC:6D:AF:AB:31:C9:D7
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS51791.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:c8:4b:82:bd:f2:db:38:ad:28:7d:6c:92:2b:ae:c7:4d:38:
         ca:b6:8f:b3:15:c9:a7:b5:2f:18:75:24:cf:ff:f2:58:13:d1:
         f9:09:4c:cb:87:70:df:ba:78:b3:47:25:91:67:fb:6c:42:1d:
         ee:0b:9f:94:81:e6:e6:e2:0a:ca:be:5f:3f:6c:f6:7f:49:13:
         17:41:01:bc:b3:db:27:c6:9a:5f:b8:73:0d:dd:02:27:e0:89:
         8b:3d:eb:32:f6:22:0f:83:82:24:08:6e:88:6f:b9:23:d0:13:
         8b:9a:ab:79:38:43:ad:6d:45:80:21:fa:c1:ee:94:1c:20:75:
         92:54:b2:c2:34:cf:94:0c:a5:5e:02:ef:a4:77:6f:59:11:15:
         cd:4e:29:44:3b:01:ae:62:17:1c:c3:e4:8d:86:03:ce:8a:1a:
         95:bc:c6:7a:3f:2a:7a:63:27:0c:0a:49:16:90:f7:c5:99:22:
         d3:11:25:28:8c:b4:4e:7b:7d:01:28:50:1c:cc:19:60:12:96:
         f8:62:f3:ba:68:32:a7:ac:11:bc:a8:8d:a8:ef:91:af:98:29:
         d5:a8:96:c4:cc:f2:ac:01:f1:54:4c:d4:de:cc:95:8a:3b:11:
         3d:a2:4a:72:75:08:94:89:18:e6:a9:13:c8:80:d9:33:61:78:
         ad:1d:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----