Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa
File:                     326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          INj8nHxwPeNXx6CCKg4RD0kbIAkx+NS6ZnTz4Rv1ZL4=
Subject key identifier:   3A:E8:89:A5:B3:BA:5B:03:08:FC:E7:08:74:4C:6D:2E:F3:0E:C2:12
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       41D2A7C8EF5BEFDE0E544EEBAEFBAA3EE7BBF826
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa
Signing time:             Fri 05 Jun 2026 10:01:08 +0000
ROA not before:           Fri 05 Jun 2026 09:56:08 +0000
ROA not after:            Fri 04 Jun 2027 10:01:08 +0000
asID:                     14618
IP address blocks:        2a05:dfc1:1004::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d2:a7:c8:ef:5b:ef:de:0e:54:4e:eb:ae:fb:aa:3e:e7:bb:f8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jun  5 09:56:08 2026 GMT
            Not After : Jun  4 10:01:08 2027 GMT
        Subject: CN=3AE889A5B3BA5B0308FCE708744C6D2EF30EC212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:28:8d:84:a2:d4:09:72:46:98:24:a4:76:
                    c8:26:af:20:05:98:a3:74:41:88:8a:62:d6:94:d3:
                    12:5d:0e:34:7c:d5:1f:c2:68:b5:7a:0a:ba:98:1b:
                    a9:43:ca:76:a2:1d:75:5b:98:71:77:10:62:51:b7:
                    7c:d3:a5:4b:8e:ef:69:e3:98:71:60:3d:7e:72:c8:
                    63:dc:17:81:63:10:c5:09:ef:74:67:58:49:0b:c8:
                    54:63:da:00:53:8b:7b:98:66:dc:78:8d:1a:5c:3d:
                    44:a0:bd:b5:b7:46:ed:0f:09:bb:50:5c:43:93:db:
                    3d:a0:3b:cb:59:ac:f3:05:8c:91:17:7a:7d:94:c7:
                    74:dd:ac:d4:a7:b2:d7:89:05:0e:d9:29:a3:8c:ce:
                    1c:e7:df:91:53:76:a2:e8:23:32:aa:00:7f:e6:2a:
                    08:63:81:58:84:9a:d3:8b:72:e7:85:38:ae:35:6e:
                    29:4d:1d:20:84:ce:51:c0:5b:4c:03:67:2a:82:84:
                    25:77:97:e5:10:1c:13:9c:1b:30:83:78:6b:05:af:
                    1a:51:90:8b:62:26:1c:73:5a:67:ee:cb:3e:86:c0:
                    4a:d2:56:0a:ae:90:f9:e4:a6:9b:d5:36:f8:51:19:
                    2d:35:de:30:a4:db:2e:d5:82:2d:36:f2:81:be:34:
                    23:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E8:89:A5:B3:BA:5B:03:08:FC:E7:08:74:4C:6D:2E:F3:0E:C2:12
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:16:3c:95:e2:62:b0:91:a5:bd:93:1d:71:e7:4c:b0:6e:
         4e:52:71:b7:41:60:2a:8f:11:83:d1:9d:84:9b:0b:fb:ca:76:
         29:14:02:5f:22:ee:71:b9:e3:b4:3d:f6:7a:fd:ee:c2:0b:8b:
         7e:c7:cd:d8:fb:0d:e7:b6:0f:f6:2d:85:77:48:9b:05:8d:6b:
         cf:e7:e9:a0:aa:37:c0:86:46:10:81:06:e5:04:b8:c5:79:83:
         e3:d1:9b:8a:45:9f:4a:8f:b9:16:48:f9:95:48:33:62:22:3d:
         3e:20:03:98:63:83:a2:4e:ba:f4:02:40:bf:44:0b:f8:05:a5:
         77:bb:7c:bc:53:8c:7f:90:cd:95:de:1b:f1:0a:f6:f8:94:29:
         f2:21:bc:34:0a:4e:cc:03:6b:93:85:85:e1:05:13:ea:5b:cc:
         f1:73:11:0d:9a:8a:42:48:d4:ab:41:09:8b:b7:78:1f:ea:f9:
         57:05:e8:51:e5:e0:bc:9a:16:af:23:19:cc:e9:fd:c6:dc:16:
         d3:73:35:aa:8c:cd:70:56:47:18:65:95:3a:29:8f:f8:e3:5f:
         2d:5e:64:e7:a0:b4:36:ac:c7:a5:5b:48:ce:bf:f1:78:f2:89:
         de:26:c9:52:96:e8:20:10:3c:5b:7a:e3:1b:c7:98:6b:50:cb:
         c9:95:11:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:14 2026 by rpki-client