Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa
File:                     326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa (raw, json)
Hash identifier:          q4sePGUBif26NLO9p7MthrFRp2SCnu6Mkqd00SLrYGQ=
Subject key identifier:   E7:E2:42:E1:D9:08:E8:FB:42:07:36:D1:0A:AE:1E:2A:C3:9F:A5:6D
Certificate issuer:       /CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
Certificate serial:       144CA3B282879D6342F5C1DF72F8C467D0534097
Authority key identifier: 43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa
Signing time:             Fri 05 Jun 2026 10:01:08 +0000
ROA not before:           Fri 05 Jun 2026 09:56:08 +0000
ROA not after:            Fri 04 Jun 2027 10:01:08 +0000
asID:                     199545
IP address blocks:        2a0a:6040:4b4b::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4c:a3:b2:82:87:9d:63:42:f5:c1:df:72:f8:c4:67:d0:53:40:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43387557D2F7F88B1D94965AC1D15B3F475ABCD7
        Validity
            Not Before: Jun  5 09:56:08 2026 GMT
            Not After : Jun  4 10:01:08 2027 GMT
        Subject: CN=E7E242E1D908E8FB420736D10AAE1E2AC39FA56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:63:b0:c0:ea:3d:e4:3f:31:3b:ff:0c:b2:
                    0d:18:84:a2:15:fd:96:2a:18:03:79:ab:c4:03:b4:
                    0a:8f:b1:09:9e:35:f4:f7:06:7c:1e:ea:39:cc:e9:
                    d8:d8:c9:87:49:fe:34:3e:45:51:ea:a8:ec:6a:37:
                    14:13:fb:0a:04:17:ce:41:28:9c:e2:4d:f9:90:1e:
                    b6:d5:74:ec:fb:28:e4:16:fc:8d:51:21:2a:72:6b:
                    f9:f7:f4:e7:4e:af:34:78:1c:7f:93:86:75:09:7f:
                    75:b9:65:ee:88:83:0b:14:cd:5e:38:96:fb:2e:30:
                    73:a0:4d:c6:a9:ed:2b:02:ec:33:f0:9c:5d:fc:a8:
                    eb:f0:35:fe:b9:94:ca:0d:d2:9d:4a:35:b5:25:71:
                    4f:5a:4f:de:7b:0a:ec:11:10:ca:cd:f1:99:92:2f:
                    b1:ca:4b:1b:df:8b:a5:6d:a9:64:1f:63:35:7f:06:
                    c3:ca:27:f6:ac:ed:2f:70:4e:88:e6:c4:28:1e:ec:
                    1d:a0:cd:52:23:2e:a8:57:28:a2:7d:59:3d:46:27:
                    61:b7:7e:08:36:d4:ce:28:90:0b:99:03:35:e0:a5:
                    7b:10:81:27:ba:24:91:c7:bc:e2:c4:48:2b:b4:3c:
                    1c:a2:ad:bb:d4:5c:6e:2a:3e:f4:70:5e:b4:26:53:
                    06:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E2:42:E1:D9:08:E8:FB:42:07:36:D1:0A:AE:1E:2A:C3:9F:A5:6D
            X509v3 Authority Key Identifier:
                keyid:43:38:75:57:D2:F7:F8:8B:1D:94:96:5A:C1:D1:5B:3F:47:5A:BC:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/43387557D2F7F88B1D94965AC1D15B3F475ABCD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/6/326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:4b4b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:b6:0e:ae:61:2c:ef:7e:0e:80:d5:99:4e:97:76:80:24:56:
         8d:83:29:e3:fd:1b:b0:9d:2d:b8:dd:f6:07:07:7c:cb:68:57:
         79:fa:e8:33:e5:f9:01:d7:a7:e7:80:e0:e2:fc:c5:fa:f3:e3:
         4d:c3:84:f5:60:e0:f6:37:fe:a5:e0:61:aa:97:c1:0c:69:b6:
         8e:25:d1:44:2b:fb:ed:1b:ee:7a:61:5f:ff:2f:99:e9:80:85:
         05:fc:d2:78:a1:3a:fe:90:e5:4c:08:0a:ae:f2:e9:3b:69:ca:
         7f:c6:fc:83:54:ef:30:24:dc:e7:b4:b9:e4:3f:eb:43:0a:96:
         9e:cc:cd:98:d0:77:7a:93:6d:9b:15:42:3e:47:48:7e:7f:00:
         9e:e5:30:59:b7:c3:40:62:98:61:77:8e:6b:04:fa:5e:d4:62:
         21:a3:5d:40:f6:b3:fc:4f:27:67:75:a6:c0:61:65:7e:76:99:
         81:3d:35:00:b5:d0:20:32:85:5f:cf:49:b3:94:de:41:a1:11:
         06:1c:4b:6d:a7:31:9c:c2:cc:1d:f9:cd:6b:46:b1:80:3c:e4:
         67:54:2a:6d:1b:a0:56:bc:d8:fe:35:04:d2:5d:fc:3d:55:6f:
         47:d5:df:dc:7d:65:d0:f6:0e:b0:c4:04:ff:3c:68:fa:40:cc:
         43:16:e2:32
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIUFEyjsoKHnWNC9cHfcvjEZ9BTQJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMzODc1NTdEMkY3Rjg4QjFEOTQ5NjVBQzFEMTVCM0Y0
NzVBQkNENzAeFw0yNjA2MDUwOTU2MDhaFw0yNzA2MDQxMDAxMDhaMDMxMTAvBgNV
BAMTKEU3RTI0MkUxRDkwOEU4RkI0MjA3MzZEMTBBQUUxRTJBQzM5RkE1NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aWOwwOo95D8xO/8Msg0YhKIV
/ZYqGAN5q8QDtAqPsQmeNfT3Bnwe6jnM6djYyYdJ/jQ+RVHqqOxqNxQT+woEF85B
KJziTfmQHrbVdOz7KOQW/I1RISpya/n39OdOrzR4HH+ThnUJf3W5Ze6IgwsUzV44
lvsuMHOgTcap7SsC7DPwnF38qOvwNf65lMoN0p1KNbUlcU9aT957CuwREMrN8ZmS
L7HKSxvfi6VtqWQfYzV/BsPKJ/as7S9wTojmxCge7B2gzVIjLqhXKKJ9WT1GJ2G3
fgg21M4okAuZAzXgpXsQgSe6JJHHvOLESCu0PByirbvUXG4qPvRwXrQmUwYzAgMB
AAGjggJFMIICQTAdBgNVHQ4EFgQU5+JC4dkI6PtCBzbRCq4eKsOfpW0wHwYDVR0j
BBgwFoAUQzh1V9L3+IsdlJZawdFbP0davNcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4OGUzOWJmYTAxODkwYzlmZWVjMTI0OWUvNi80MzM4NzU1N0Qy
RjdGODhCMUQ5NDk2NUFDMUQxNUIzRjQ3NUFCQ0Q3LmNybDB6BggrBgEFBQcBAQRu
MGwwagYIKwYBBQUHMAKGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3Jl
cG8vQ0xPVURJRS1SUEtJLzQvNDMzODc1NTdEMkY3Rjg4QjFEOTQ5NjVBQzFEMTVC
M0Y0NzVBQkNENy5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aB
jHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4
ZTM5YmZhMDE4OTBjOWZlZWMxMjQ5ZS82LzMyNjEzMDYxM2EzNjMwMzQzMDNhMzQ2
MjM0NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM5MzkzNTM0MzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAqCmBAS0swDQYJKoZIhvcNAQELBQADggEBAEu2Dq5hLO9+DoDVmU6XdoAk
Vo2DKeP9G7CdLbjd9gcHfMtoV3n66DPl+QHXp+eA4OL8xfrz403DhPVg4PY3/qXg
YaqXwQxpto4l0UQr++0b7nphX/8vmemAhQX80nihOv6Q5UwICq7y6Ttpyn/G/INU
7zAk3Oe0ueQ/60MKlp7MzZjQd3qTbZsVQj5HSH5/AJ7lMFm3w0BimGF3jmsE+l7U
YiGjXUD2s/xPJ2d1psBhZX52mYE9NQC10CAyhV/PSbOU3kGhEQYcS22nMZzCzB35
zWtGsYA85GdUKm0boFa82P41BNJd/D1Vb0fV39x9ZdD2DrDEBP88aPpAzEMW4jI=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:30 2026 by rpki-client