Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132372e3132372e302f32342d3234203d3e203236313237.roa
File:                     35302e3132372e3132372e302f32342d3234203d3e203236313237.roa (raw, json)
Hash identifier:          xhoYPQO0Htg7RzwNUU6e3i7G9G01rZ0T6vtTuoenls8=
Subject key identifier:   AE:F0:E1:F8:97:B2:93:A7:68:AE:D0:21:60:62:C9:A8:0E:02:26:3C
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       33FA7BA6CB22B6789A99183D810C58790D60D8DA
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132372e3132372e302f32342d3234203d3e203236313237.roa
Signing time:             Wed 12 Jul 2023 13:13:40 +0000
ROA not before:           Wed 12 Jul 2023 13:08:40 +0000
ROA not after:            Wed 10 Jul 2024 13:13:40 +0000
asID:                     26127
IP address blocks:        50.127.127.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fa:7b:a6:cb:22:b6:78:9a:99:18:3d:81:0c:58:79:0d:60:d8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jul 12 13:08:40 2023 GMT
            Not After : Jul 10 13:13:40 2024 GMT
        Subject: CN=AEF0E1F897B293A768AED0216062C9A80E02263C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:65:8a:18:7d:06:fd:a1:28:85:61:6b:d8:
                    b3:82:21:2a:84:79:49:73:11:aa:b2:d0:5f:5f:c8:
                    04:d3:92:0e:d5:80:b3:dc:f9:fc:cf:73:cd:5a:00:
                    b8:b9:60:5a:78:77:48:dc:73:3d:df:a9:5f:48:ed:
                    44:60:87:fa:bd:d3:4b:dc:f9:8f:b6:45:1f:d2:66:
                    da:1f:f8:c5:56:57:66:6d:3d:5d:0b:f7:71:91:95:
                    9e:72:2c:ff:77:63:24:7e:98:09:7d:62:bb:ed:b9:
                    b2:25:30:8d:fa:ad:db:8e:44:4d:8e:ca:1b:f8:47:
                    d2:08:ba:c5:1f:93:58:c2:13:86:ec:8e:50:6e:0a:
                    d8:a6:89:1b:46:08:5d:3f:58:bc:b1:29:1b:5d:3c:
                    78:6e:ec:a5:d8:bf:f6:27:42:56:c8:33:d4:b3:ad:
                    f1:7e:69:70:c5:e6:7e:19:5c:4c:46:2a:e9:84:4a:
                    8f:a0:14:68:23:f2:aa:4f:96:09:1c:69:f0:12:93:
                    b4:98:aa:2e:31:0a:95:ef:4f:4f:73:ac:70:d8:f5:
                    24:7a:20:00:fa:28:7d:68:02:49:a4:74:b8:1f:06:
                    a2:f7:8d:20:8e:9f:56:a9:62:1e:09:b9:27:c8:24:
                    c6:fe:21:c4:2c:bb:32:26:92:64:a8:0c:7a:a1:07:
                    87:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F0:E1:F8:97:B2:93:A7:68:AE:D0:21:60:62:C9:A8:0E:02:26:3C
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/35302e3132372e3132372e302f32342d3234203d3e203236313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.127.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:69:a6:f5:d9:a2:1e:4f:f8:94:3f:ea:be:9a:7e:19:e3:a8:
         ff:dc:78:d5:c9:a9:53:d2:de:b7:ac:3d:1a:61:c8:0c:ea:1e:
         7f:bc:6c:24:3e:db:b8:81:86:7b:9f:24:be:db:fe:25:6f:13:
         c7:ba:3a:04:97:b8:0c:e0:68:72:2d:c4:e1:17:9d:59:4c:0b:
         fe:68:35:ba:73:84:b6:98:d3:92:34:39:68:22:35:b7:91:b9:
         72:51:fb:41:79:1c:05:2d:18:e3:21:c1:b8:61:21:54:08:aa:
         26:2b:e9:f2:ee:82:55:ab:f5:12:d4:68:0d:96:ca:fc:4a:d9:
         68:c7:02:9a:2a:b2:19:da:88:d7:4c:10:e5:84:7d:49:0f:e7:
         bb:37:13:9d:5e:cb:4d:08:15:87:fc:61:7b:3b:f4:a9:a8:41:
         8c:f3:39:71:6e:3c:99:61:ee:80:6f:8c:a6:a9:1c:81:18:a4:
         61:c9:06:ca:8a:45:ae:cc:3b:2e:2b:47:c0:ec:09:3e:9d:bf:
         98:6a:71:73:c7:7e:b4:f9:6b:db:5e:0a:e6:99:ec:ea:04:d6:
         1f:b0:ba:60:d8:5e:aa:0e:01:cc:4d:10:98:a1:45:98:6a:af:
         fe:a5:31:77:90:2b:de:fb:92:21:7e:7d:bb:9e:18:99:fb:f9:
         87:f8:27:82
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUM/p7pssitniamRg9gQxYeQ1g2NowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjMwNzEyMTMwODQwWhcNMjQwNzEwMTMxMzQw
WjAzMTEwLwYDVQQDEyhBRUYwRTFGODk3QjI5M0E3NjhBRUQwMjE2MDYyQzlBODBF
MDIyNjNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthplihh9Bv2h
KIVha9izgiEqhHlJcxGqstBfX8gE05IO1YCz3Pn8z3PNWgC4uWBaeHdI3HM936lf
SO1EYIf6vdNL3PmPtkUf0mbaH/jFVldmbT1dC/dxkZWeciz/d2MkfpgJfWK77bmy
JTCN+q3bjkRNjsob+EfSCLrFH5NYwhOG7I5QbgrYpokbRghdP1i8sSkbXTx4buyl
2L/2J0JWyDPUs63xfmlwxeZ+GVxMRirphEqPoBRoI/KqT5YJHGnwEpO0mKouMQqV
709Pc6xw2PUkeiAA+ih9aAJJpHS4Hwai940gjp9WqWIeCbknyCTG/iHELLsyJpJk
qAx6oQeHHQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFK7w4fiXspOnaK7QIWBiyagO
AiY8MB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi80LzM1MzAyZTMxMzIzNzJlMzEzMjM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzNjMxMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADJ/fzANBgkqhkiG9w0BAQsF
AAOCAQEApmmm9dmiHk/4lD/qvpp+GeOo/9x41cmpU9Let6w9GmHIDOoef7xsJD7b
uIGGe58kvtv+JW8Tx7o6BJe4DOBoci3E4RedWUwL/mg1unOEtpjTkjQ5aCI1t5G5
clH7QXkcBS0Y4yHBuGEhVAiqJivp8u6CVav1EtRoDZbK/ErZaMcCmiqyGdqI10wQ
5YR9SQ/nuzcTnV7LTQgVh/xhezv0qahBjPM5cW48mWHugG+MpqkcgRikYckGyopF
rsw7LitHwOwJPp2/mGpxc8d+tPlr214K5pns6gTWH7C6YNheqg4BzE0QmKFFmGqv
/qUxd5Ar3vuSIX59u54Ymfv5h/gngg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:30:49 2025 by rpki-client