Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa
File:                     326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa (raw, json)
Hash identifier:          eEgD1JY9gwdzkIT57lXbNaxLJPj1ufaM3LPeXaUyO90=
Subject key identifier:   EC:31:94:B9:FA:36:B0:CC:4F:3A:07:EA:AC:6C:35:81:10:54:3F:2F
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       1DB5349B43EADC20C3B9AAEC5EE483804538454C
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa
Signing time:             Fri 05 Jun 2026 10:01:08 +0000
ROA not before:           Fri 05 Jun 2026 09:56:08 +0000
ROA not after:            Fri 04 Jun 2027 10:01:08 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1000::/47 maxlen: 47
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b5:34:9b:43:ea:dc:20:c3:b9:aa:ec:5e:e4:83:80:45:38:45:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jun  5 09:56:08 2026 GMT
            Not After : Jun  4 10:01:08 2027 GMT
        Subject: CN=EC3194B9FA36B0CC4F3A07EAAC6C358110543F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:3c:66:17:1b:90:a1:ff:91:db:09:1c:d9:
                    7c:be:f1:07:20:63:7d:5c:ba:51:e4:48:a7:de:2e:
                    e9:ab:65:ce:9b:1a:2a:fa:d8:01:38:10:0a:57:ac:
                    87:a3:47:ae:b6:b8:8d:04:28:a8:c8:44:a8:82:ee:
                    61:78:9b:3a:a5:ee:93:4e:f4:81:3d:58:f5:be:a7:
                    b1:07:a1:94:93:54:45:f8:da:6c:23:5d:8c:52:9e:
                    44:53:c7:6b:f0:2c:6c:e9:91:87:33:33:2d:7b:78:
                    44:5b:7b:c6:dd:3e:1c:f4:32:28:b2:26:15:f7:05:
                    7b:48:cd:7e:d6:d9:82:8b:27:93:25:4b:6e:b8:87:
                    d4:b8:08:a8:f7:ff:d7:90:3f:10:c2:5a:60:be:de:
                    b5:13:c5:54:4d:9a:ce:75:c4:af:07:ff:e9:1f:94:
                    44:97:21:dc:3f:da:10:67:ba:50:d2:cd:c0:2c:fc:
                    07:30:0f:32:56:2d:bf:11:05:77:7b:b8:4a:e1:be:
                    b7:3b:23:bb:44:24:33:39:db:7c:f4:14:1c:45:b2:
                    06:e3:d5:a6:43:ee:8a:82:e5:c3:da:63:36:06:5e:
                    00:68:f5:ca:9a:5e:67:70:cf:08:4a:eb:09:ab:79:
                    f3:e9:cc:ce:99:fc:2f:ea:2e:64:d7:1a:72:5f:d3:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:31:94:B9:FA:36:B0:CC:4F:3A:07:EA:AC:6C:35:81:10:54:3F:2F
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030303a3a2f34372d3437203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1000::/47

    Signature Algorithm: sha256WithRSAEncryption
         b9:8d:8f:de:84:2b:80:e5:ba:b1:30:85:b8:18:0d:9c:6d:61:
         e4:84:93:d9:a3:a5:97:9c:8e:a8:12:99:73:07:1a:d1:b6:9e:
         bd:de:99:75:28:63:59:1f:ec:92:00:08:5d:04:7a:50:42:74:
         f6:39:3d:6f:de:63:34:ca:9c:1a:7a:4d:b6:9a:e5:57:bd:0a:
         87:a0:ba:d0:c7:6b:dd:6b:2e:09:3a:ae:3a:75:e3:3f:53:96:
         64:c1:c5:32:f0:32:98:b7:a6:9d:6a:51:41:13:6f:f4:5e:29:
         cf:cb:e3:af:db:5f:c2:1f:29:73:af:f1:83:7a:51:4d:be:02:
         53:65:60:e1:1b:3e:d4:1a:7f:ee:ff:42:93:36:2e:5b:8c:a9:
         48:da:81:29:e6:8c:95:3c:fa:f2:cf:6b:77:f6:1e:31:e6:e9:
         8b:43:d0:2a:be:8c:2c:21:b5:12:ac:4f:3f:14:2b:27:97:52:
         2b:8b:65:6f:f0:30:41:3e:31:d1:d9:46:7e:8f:00:de:01:42:
         5b:1f:fd:fc:d7:6b:21:33:31:ac:f4:ad:ff:b7:ed:a3:88:d6:
         8c:b3:e2:3e:ac:a5:95:b2:48:fe:58:cc:80:96:06:f1:9e:a6:
         4d:ab:59:f5:17:66:9b:9f:a4:f4:d9:2d:9d:68:d9:57:6c:be:
         52:1d:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:49 2026 by rpki-client