Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa
File:                     326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa (raw, json)
Hash identifier:          xyShU3gulnzZN0a+rYIvgWlDu10NqWQLZl3hBhUp4lA=
Subject key identifier:   9B:FF:D2:EC:B5:27:44:34:95:EE:51:2E:54:01:BD:6F:BA:58:BA:3E
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       0DE592797A5CCCD2AADC9A379ACE728832CE5232
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa
Signing time:             Fri 05 Jun 2026 10:01:08 +0000
ROA not before:           Fri 05 Jun 2026 09:56:08 +0000
ROA not after:            Fri 04 Jun 2027 10:01:08 +0000
asID:                     54218
IP address blocks:        2a05:dfc1:1014::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e5:92:79:7a:5c:cc:d2:aa:dc:9a:37:9a:ce:72:88:32:ce:52:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jun  5 09:56:08 2026 GMT
            Not After : Jun  4 10:01:08 2027 GMT
        Subject: CN=9BFFD2ECB527443495EE512E5401BD6FBA58BA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:a7:cc:64:de:76:cd:4c:90:19:ee:61:64:
                    e0:f9:02:41:1a:46:20:c2:94:84:e7:85:aa:43:ed:
                    67:9e:77:e1:6b:84:0c:c5:67:ce:19:d7:e3:27:b2:
                    94:eb:6b:57:7f:b4:fd:38:90:62:dc:c4:b2:3e:5c:
                    b2:b4:7e:81:13:06:8a:92:de:0d:fb:51:a8:8f:6b:
                    00:e9:12:e2:df:f3:81:07:0a:0c:8f:85:71:29:e9:
                    a6:e7:e7:f6:dc:53:1f:82:96:e2:7d:d9:65:5d:e9:
                    68:3e:5e:dc:50:d1:96:ce:52:5c:32:9e:54:f3:a3:
                    ed:63:2d:5f:ae:83:a7:54:18:4d:a3:b4:c7:b9:c2:
                    2b:c3:0a:3d:69:b2:18:5f:71:72:08:c7:77:d2:07:
                    45:b6:5d:d8:b6:b8:88:00:10:97:94:1e:c9:92:67:
                    0a:30:52:c6:56:be:0e:ed:79:7c:70:3d:a2:f2:14:
                    3c:c3:29:0e:b3:a3:8d:a9:e4:ad:fe:03:41:2b:5d:
                    e9:91:03:e0:03:0c:87:aa:2e:59:df:2c:68:67:c0:
                    c5:e6:eb:f9:91:32:59:24:cf:2b:20:83:15:f3:97:
                    5b:2d:c3:2d:c6:c4:80:6e:b3:72:59:fa:43:6b:a2:
                    c8:c2:fd:da:e5:8d:b5:1a:da:4f:e8:30:59:11:0e:
                    be:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FF:D2:EC:B5:27:44:34:95:EE:51:2E:54:01:BD:6F:BA:58:BA:3E
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313031343a3a2f34382d3438203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1014::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:db:e4:65:89:7d:42:6c:5d:aa:35:2b:59:db:8d:34:b6:b0:
         97:9d:4a:86:ec:6f:e6:df:dd:d6:38:e4:63:6f:11:fa:9d:9e:
         11:4f:de:1b:85:26:52:da:00:d6:ec:5b:8b:d2:ca:03:4d:0a:
         0e:78:c5:24:ea:6e:88:be:19:f5:97:c2:90:18:2f:fb:36:f9:
         77:2f:22:c9:16:00:88:93:bf:ce:65:09:1e:ef:b1:1f:84:5e:
         05:d6:54:79:bf:69:71:36:fc:c1:67:07:db:46:60:9b:0d:10:
         73:02:5c:1d:67:e8:99:26:8c:e1:7a:08:48:b1:bc:60:4c:96:
         2f:90:ae:36:cf:9a:22:9f:04:7a:25:18:85:a2:45:36:07:3d:
         84:19:76:6a:83:54:e4:db:78:c7:e4:ca:cc:eb:34:cd:23:09:
         97:46:2b:b9:0f:33:71:26:1b:a2:77:85:a7:52:14:c9:72:2e:
         4d:74:33:f4:e7:08:b2:bc:82:a2:fb:1f:a3:0d:22:6d:f9:73:
         da:b6:2e:90:0f:7f:11:da:60:ca:d0:c5:54:73:d3:8b:ff:c8:
         2c:fe:52:83:02:81:ce:34:dc:6b:83:6b:aa:8f:e9:50:cf:b9:
         68:72:96:dc:08:47:99:43:8a:fd:84:03:55:28:53:47:7f:16:
         3e:04:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:43 2026 by rpki-client