Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa
File:                     326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier:          o+dcrNBsYXmSDefpwXK+HK7lZ1WIDPpDgbyJMDtKajo=
Subject key identifier:   5C:15:DB:B0:AA:1E:64:8C:E5:DE:BB:78:BA:4F:52:1A:86:50:65:0D
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       2BE1652434ED31C022659E8D46A190C5FE247975
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa
Signing time:             Fri 05 Jun 2026 10:01:08 +0000
ROA not before:           Fri 05 Jun 2026 09:56:08 +0000
ROA not after:            Fri 04 Jun 2027 10:01:08 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1004::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e1:65:24:34:ed:31:c0:22:65:9e:8d:46:a1:90:c5:fe:24:79:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jun  5 09:56:08 2026 GMT
            Not After : Jun  4 10:01:08 2027 GMT
        Subject: CN=5C15DBB0AA1E648CE5DEBB78BA4F521A8650650D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:0e:5a:cf:84:24:c3:f9:79:53:6f:1d:0b:
                    97:20:35:94:88:ec:0f:d3:37:ee:40:38:04:20:ec:
                    66:78:73:fe:67:38:7c:39:99:9e:0d:40:c1:57:cb:
                    f5:4e:ca:b8:54:71:ea:6c:de:6f:a4:80:29:97:da:
                    6f:a9:a0:61:c7:22:a9:3f:d3:d7:a4:57:9d:15:f5:
                    c9:1a:99:2d:b4:75:44:62:6d:17:76:f8:6a:e4:a3:
                    ef:74:5f:9a:57:94:e7:1c:88:a5:16:65:26:06:25:
                    47:93:e5:71:ea:d7:39:4e:a3:a8:aa:57:c8:a2:57:
                    ba:44:a5:42:c6:02:30:90:ad:64:04:b6:43:11:c3:
                    16:5a:47:7e:f6:31:df:31:ca:bb:a3:00:6c:50:d1:
                    48:f2:07:bc:94:c7:5c:75:46:58:e8:a7:93:3d:a8:
                    40:fe:46:83:cf:3a:04:2f:ec:0d:1c:e5:1a:03:c8:
                    15:04:6c:b1:74:14:a2:ba:25:98:ed:8a:34:3c:b2:
                    77:a3:83:21:89:8c:e4:0a:d8:ca:65:c6:df:89:d7:
                    9e:3e:05:5b:51:bf:7a:e2:e8:df:95:42:6d:9c:10:
                    1c:c5:c9:87:0b:92:0f:5a:f6:ac:6d:94:79:9e:d2:
                    d3:1f:09:eb:b8:62:5d:1e:84:00:ba:49:c0:9e:ef:
                    12:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:15:DB:B0:AA:1E:64:8C:E5:DE:BB:78:BA:4F:52:1A:86:50:65:0D
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313030343a3a2f34382d3438203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:42:65:b1:81:cb:d9:0c:07:ea:93:06:03:93:14:dc:02:22:
         26:c4:38:c7:5f:d4:b0:3f:4f:97:b0:e7:23:73:a1:5e:a9:d1:
         8c:9d:61:8d:81:4f:79:ff:90:11:5b:7d:56:5d:cb:d8:85:06:
         67:7f:c9:7f:ee:6d:80:c7:07:af:eb:9a:6d:03:c8:18:a2:ec:
         57:9b:1b:ed:8d:3b:4e:10:de:87:cf:1b:d9:88:de:cf:45:89:
         aa:44:34:5d:aa:9b:2b:cf:4e:62:01:0f:29:68:ff:9b:33:ed:
         30:dd:55:62:1a:e2:4e:50:8c:a0:50:37:28:f2:9c:d6:87:6d:
         29:a2:71:1e:1a:65:48:51:7d:2b:47:a1:08:2b:50:55:07:82:
         fa:df:6d:af:59:18:e6:3d:4e:e3:d1:94:1c:c1:17:1b:7d:73:
         64:d6:6d:50:24:e3:8e:f4:99:6c:dc:f8:06:f1:a0:2a:79:74:
         6c:55:50:f9:b7:ad:95:38:f4:96:6d:52:a4:4f:eb:d3:0f:b0:
         97:5f:f1:bd:f2:b6:6c:0f:2b:bc:59:d7:cc:f3:63:ce:a5:0f:
         b7:51:82:91:c7:75:69:b8:a4:52:e5:2a:d7:f8:de:fa:c5:b6:
         b4:09:54:5b:9b:d7:ff:40:b1:e4:a6:74:a5:e4:7a:31:8a:ea:
         63:68:6c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:48 2026 by rpki-client