Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa
File:                     326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier:          7Qg16d5UjzTvvA20LCq7XI+cnBk0NS7Bkp8lEpeT5dA=
Subject key identifier:   F2:D3:EE:B8:B9:5E:FF:30:A5:BC:A6:17:BC:4B:12:1D:CF:51:34:A6
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       4A642F10412057446AA6E79AE390A9322D313456
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa
Signing time:             Fri 05 Jun 2026 10:01:08 +0000
ROA not before:           Fri 05 Jun 2026 09:56:08 +0000
ROA not after:            Fri 04 Jun 2027 10:01:08 +0000
asID:                     59678
IP address blocks:        2a05:dfc1:1014::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:64:2f:10:41:20:57:44:6a:a6:e7:9a:e3:90:a9:32:2d:31:34:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jun  5 09:56:08 2026 GMT
            Not After : Jun  4 10:01:08 2027 GMT
        Subject: CN=F2D3EEB8B95EFF30A5BCA617BC4B121DCF5134A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:10:85:aa:3a:36:79:fc:e5:23:68:1e:ca:
                    86:c3:c4:6a:bd:08:09:c0:ac:74:f1:65:6c:71:d9:
                    da:e1:c1:e8:19:2b:f4:c1:c6:b1:a0:84:95:bc:17:
                    77:20:c9:e4:53:3e:c6:9c:6f:cf:c0:92:a6:b6:07:
                    94:4e:45:d7:e4:05:eb:b2:f5:e4:2d:43:20:f5:13:
                    ca:7d:05:11:60:1b:fe:19:d7:0f:44:e3:ee:09:b9:
                    90:c6:37:b4:48:bf:7e:8b:3e:20:07:a6:2c:c0:9b:
                    f2:52:48:b9:58:f7:d4:95:f5:f7:01:37:a7:b0:07:
                    d5:62:e4:76:c1:d7:48:29:71:12:ee:0b:31:43:a2:
                    8e:ee:0d:0d:07:b7:2a:e1:32:1d:52:28:ae:82:ff:
                    74:01:55:1e:00:7b:d8:ba:b2:09:31:53:52:47:89:
                    01:9a:81:27:6a:df:9b:79:9b:ae:d6:b1:5a:d8:42:
                    71:f4:79:a8:7c:a7:1c:d7:f7:e9:45:80:9c:a6:12:
                    46:8e:d1:2f:95:1c:ac:6b:2a:1b:fa:a5:69:51:48:
                    78:e1:20:27:30:10:95:40:ec:f9:bc:7e:ff:08:52:
                    a9:6d:32:d7:8e:0e:a2:0b:3d:82:41:2a:be:8b:27:
                    b2:6e:01:ac:7a:d0:c3:71:c3:d1:2e:73:a7:17:1a:
                    27:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D3:EE:B8:B9:5E:FF:30:A5:BC:A6:17:BC:4B:12:1D:CF:51:34:A6
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130353a646663313a313031343a3a2f34382d3438203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1014::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:0b:94:18:c2:6f:52:9d:5b:69:54:0c:79:e8:cc:09:d5:32:
         0e:97:1a:c2:c0:e0:d9:f6:4f:e2:87:1d:07:2d:ab:94:3b:f2:
         fe:1f:ee:51:3b:93:fb:2f:75:55:58:31:b0:c6:a8:c8:e4:f7:
         04:e8:7f:5d:5b:05:aa:86:0e:c0:19:18:c9:08:03:05:10:09:
         4f:a4:62:88:67:9c:f7:3a:32:2c:ff:6b:3c:80:fb:fd:7b:35:
         a5:8e:8f:57:92:8f:69:ac:d3:f0:a7:cc:b6:94:82:bc:ca:b6:
         dc:40:67:83:85:84:12:0e:b8:06:11:70:b2:75:0e:cf:73:b1:
         df:06:72:d8:6d:40:0a:7f:c4:f8:13:9f:a9:1a:2e:0d:c1:a4:
         fa:5a:a7:27:28:9b:14:08:e6:4d:e4:b2:7d:d5:a9:8e:94:94:
         0a:25:ed:40:31:46:ee:bb:4c:2e:22:bd:00:ba:0b:00:69:cb:
         b8:8c:e3:cd:62:d0:23:10:dd:60:1e:3e:bd:28:1e:28:5e:8b:
         27:75:db:59:85:22:90:f5:e8:5e:ea:4c:00:bb:94:4b:48:ae:
         a4:df:a8:32:a7:4b:d7:2f:5e:4f:f6:ab:c9:8b:f9:9b:c0:b1:
         03:c4:59:9e:5b:a0:60:18:d2:89:8e:89:13:ba:e2:41:1b:76:
         df:bf:cd:92
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIUSmQvEEEgV0Rqpuea45CpMi0xNFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMzODc1NTdEMkY3Rjg4QjFEOTQ5NjVBQzFEMTVCM0Y0
NzVBQkNENzAeFw0yNjA2MDUwOTU2MDhaFw0yNzA2MDQxMDAxMDhaMDMxMTAvBgNV
BAMTKEYyRDNFRUI4Qjk1RUZGMzBBNUJDQTYxN0JDNEIxMjFEQ0Y1MTM0QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6RCFqjo2efzlI2geyobDxGq9
CAnArHTxZWxx2drhwegZK/TBxrGghJW8F3cgyeRTPsacb8/Akqa2B5RORdfkBeuy
9eQtQyD1E8p9BRFgG/4Z1w9E4+4JuZDGN7RIv36LPiAHpizAm/JSSLlY99SV9fcB
N6ewB9Vi5HbB10gpcRLuCzFDoo7uDQ0HtyrhMh1SKK6C/3QBVR4Ae9i6sgkxU1JH
iQGagSdq35t5m67WsVrYQnH0eah8pxzX9+lFgJymEkaO0S+VHKxrKhv6pWlRSHjh
ICcwEJVA7Pm8fv8IUqltMteODqILPYJBKr6LJ7JuAax60MNxw9Euc6cXGieLAgMB
AAGjggJDMIICPzAdBgNVHQ4EFgQU8tPuuLle/zClvKYXvEsSHc9RNKYwHwYDVR0j
BBgwFoAUQzh1V9L3+IsdlJZawdFbP0davNcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNi80MzM4NzU1N0Qy
RjdGODhCMUQ5NDk2NUFDMUQxNUIzRjQ3NUFCQ0Q3LmNybDB6BggrBgEFBQcBAQRu
MGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3Jl
cG8vQ0xPVURJRS1SUEtJLzQvNDMzODc1NTdEMkY3Rjg4QjFEOTQ5NjVBQzFEMTVC
M0Y0NzVBQkNENy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aB
inJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4
ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS82LzMyNjEzMDM1M2E2NDY2NjMzMTNhMzEz
MDMxMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTM5MzYzNzM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKgXfwRAUMA0GCSqGSIb3DQEBCwUAA4IBAQBPC5QYwm9SnVtpVAx56MwJ1TIO
lxrCwODZ9k/ihx0HLauUO/L+H+5RO5P7L3VVWDGwxqjI5PcE6H9dWwWqhg7AGRjJ
CAMFEAlPpGKIZ5z3OjIs/2s8gPv9ezWljo9Xko9prNPwp8y2lIK8yrbcQGeDhYQS
DrgGEXCydQ7Pc7HfBnLYbUAKf8T4E5+pGi4NwaT6WqcnKJsUCOZN5LJ91amOlJQK
Je1AMUbuu0wuIr0AugsAacu4jOPNYtAjEN1gHj69KB4oXosnddtZhSKQ9ehe6kwA
u5RLSK6k36gyp0vXL15P9qvJi/mbwLEDxFmeW6BgGNKJjokTuuJBG3bfv82S
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:49 2026 by rpki-client