Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa
File:                     326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa (raw, json)
Hash identifier:          gCZsDOPFWI1uQJVT//rktnc/Seupe1OJvSVGAqffjUc=
Subject key identifier:   83:B3:E0:81:91:24:DB:3F:C7:31:54:1C:C9:34:4D:6F:55:97:B8:45
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       4BA0DA167455DDBE0AFAF4A7EF8299499D8B2780
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa
Signing time:             Fri 05 Jun 2026 10:01:08 +0000
ROA not before:           Fri 05 Jun 2026 09:56:08 +0000
ROA not after:            Fri 04 Jun 2027 10:01:08 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1000::/40 maxlen: 40
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a0:da:16:74:55:dd:be:0a:fa:f4:a7:ef:82:99:49:9d:8b:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jun  5 09:56:08 2026 GMT
            Not After : Jun  4 10:01:08 2027 GMT
        Subject: CN=83B3E0819124DB3FC731541CC9344D6F5597B845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:12:d9:f2:2a:d8:a0:46:e4:4e:56:77:e7:
                    2d:d8:3e:36:da:c2:de:ef:81:19:91:cc:2e:31:0b:
                    06:91:56:5e:df:ca:20:b3:10:57:ff:7b:f9:af:a6:
                    4a:9a:05:f4:a5:b7:4a:68:45:e7:c1:b9:c0:7b:86:
                    49:e6:b5:5d:10:d5:44:24:77:6b:67:db:46:38:29:
                    65:9a:d8:17:25:81:2b:d5:29:0c:53:a8:b9:0c:e7:
                    58:71:1d:6b:85:56:02:6b:d0:fd:b5:c4:cf:89:17:
                    a8:48:a7:31:8a:30:6a:7f:2c:0a:9f:f1:59:2a:2e:
                    84:e4:10:83:04:16:25:89:03:4d:c0:16:4e:49:ba:
                    9a:8b:17:05:96:f3:49:46:8c:6b:63:0d:fe:46:58:
                    6a:b9:fd:cf:1e:d9:b8:9c:7d:55:42:48:0b:75:b8:
                    c9:b7:7a:c5:76:ff:a9:5d:b1:a9:76:97:8c:12:ce:
                    e0:d7:c7:fe:e7:88:2f:4c:35:81:ff:6f:11:eb:b7:
                    1f:75:cc:3e:fc:6c:fc:82:6b:ce:20:23:bc:ee:eb:
                    89:71:d6:19:eb:6a:b0:54:df:4a:f0:29:1b:92:22:
                    5b:e2:e4:97:9d:38:ec:98:bb:f1:6a:2b:ac:80:8f:
                    ea:97:e9:55:22:de:9a:0c:38:e4:38:ba:c8:38:b8:
                    78:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B3:E0:81:91:24:DB:3F:C7:31:54:1C:C9:34:4D:6F:55:97:B8:45
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030303a3a2f34302d3430203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:5f:37:ea:86:8d:c0:78:ed:d2:56:ba:b0:eb:3f:57:12:ae:
         f3:15:d0:96:82:ef:ee:9e:06:ec:8a:db:2e:a0:3f:f6:1d:d4:
         e3:c6:85:3d:5f:40:1f:be:40:37:70:de:12:b4:8b:34:08:16:
         03:dd:fd:13:6f:e1:d4:45:4c:96:96:3c:58:66:73:6a:64:28:
         90:86:72:75:96:e1:a9:2e:5c:9b:1b:ce:24:0b:f8:3e:e1:cd:
         2c:33:23:a5:69:5f:38:23:cd:c5:71:ea:80:5f:5b:3f:3b:16:
         63:e5:22:e5:66:82:56:40:f5:18:07:98:94:df:b5:05:25:06:
         c5:10:83:4c:5d:f1:05:5c:9c:98:99:9c:40:11:12:9e:a1:53:
         5b:6a:32:64:35:f7:1e:ad:68:86:87:4a:b1:a4:84:89:9d:a6:
         21:ae:6a:48:6c:89:4b:96:ad:ee:58:16:4a:cd:c0:2f:7f:6e:
         29:54:16:2b:95:b8:c5:7d:ae:f4:b4:69:0b:a5:08:b9:81:1b:
         dc:d9:4b:81:75:26:da:6b:9b:74:8f:a9:aa:8a:9c:20:48:f3:
         8d:04:bd:1a:df:4f:47:4f:35:36:c4:f7:45:38:ca:bb:1a:56:
         ef:70:5d:1b:30:59:13:fd:46:84:1d:77:ea:ab:6c:08:fd:ee:
         35:02:68:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:50 2026 by rpki-client