Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa
File:                     323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          gWDGjno3Ps9BHRPMSi1eIGR4iID+QVP7IgFHvCD5B2I=
Subject key identifier:   B4:F0:27:ED:7C:04:33:99:2E:B2:74:12:A8:B0:2E:86:FF:96:9D:80
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       345F5D824FEFDD6761E1C972A4BD1B10A4385909
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa
Signing time:             Sun 29 Mar 2026 03:27:34 +0000
ROA not before:           Sun 29 Mar 2026 03:22:34 +0000
ROA not after:            Sun 28 Mar 2027 03:27:34 +0000
asID:                     50224
IP address blocks:        2602:fac2:6::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5f:5d:82:4f:ef:dd:67:61:e1:c9:72:a4:bd:1b:10:a4:38:59:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 29 03:22:34 2026 GMT
            Not After : Mar 28 03:27:34 2027 GMT
        Subject: CN=B4F027ED7C0433992EB27412A8B02E86FF969D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:af:f7:ae:1d:8c:ec:de:10:7a:20:54:f2:
                    f9:21:7c:3e:11:1c:47:f8:11:b9:84:d7:f0:d7:7c:
                    1f:fc:20:d9:47:30:ed:8b:5f:d4:df:10:cc:12:df:
                    19:7e:4b:41:ff:bd:f0:e5:3c:b1:fd:75:a6:01:be:
                    fc:90:2b:82:21:6d:29:07:91:52:fd:e1:84:14:12:
                    56:a2:f9:b3:bc:a8:e4:94:12:cf:99:4f:7d:fb:d4:
                    3f:3f:1b:59:6f:9e:89:1b:47:ef:87:97:1f:07:5b:
                    45:33:5b:90:32:7c:db:3f:3b:63:5a:65:ee:5e:8c:
                    8b:2f:dd:a2:53:e6:da:d9:3f:e8:6c:8d:9e:2e:e8:
                    3e:9d:25:00:a9:da:f2:39:67:2e:aa:56:6e:96:9d:
                    a8:87:cd:c5:76:ba:28:f9:a6:96:05:95:13:3c:2f:
                    ad:f6:94:8f:86:2b:fb:9c:b4:44:76:00:b1:bd:b3:
                    50:63:25:23:d9:b0:67:49:fe:76:7a:46:2f:bd:e4:
                    c0:b8:5c:9d:f2:d1:38:7b:28:d2:4b:67:c9:90:53:
                    96:69:7b:8a:65:fc:d5:32:a8:59:14:d3:65:5e:d7:
                    ce:f1:66:a2:ec:7b:d0:8b:de:a1:45:fd:dd:eb:3b:
                    5b:fa:d9:3f:db:5b:4b:c6:14:6f:dc:0b:02:20:97:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F0:27:ED:7C:04:33:99:2E:B2:74:12:A8:B0:2E:86:FF:96:9D:80
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:4d:40:5a:a4:53:82:89:c6:4f:66:41:d4:20:39:9c:0a:15:
         00:bf:22:aa:18:2e:d4:71:4b:86:59:76:03:32:b3:53:e6:89:
         12:54:d9:2b:94:ee:52:6e:4d:5a:6c:22:9f:e6:18:51:59:6b:
         23:35:cd:70:0b:67:2d:41:bd:8c:38:2f:1b:ca:38:75:a8:9b:
         1b:5b:91:12:cd:ff:8e:cd:f6:d6:31:77:ea:d7:d0:19:8b:e9:
         95:c8:eb:08:39:0f:9d:da:30:2d:20:bf:b3:ae:7c:c2:50:55:
         31:b4:5c:f1:40:81:eb:a2:93:b0:57:a3:0f:7a:0e:ed:83:95:
         31:cb:ab:dd:0c:92:0e:99:75:45:6c:42:06:c5:37:bb:59:50:
         0f:24:17:82:58:91:7a:00:ba:48:25:54:37:6e:e2:a5:ac:c4:
         55:5f:c8:5f:8b:67:65:cd:53:65:17:d7:57:88:db:14:22:31:
         6a:2d:4e:68:8a:62:98:fb:28:94:11:6a:d4:b1:83:8d:f9:d9:
         ed:43:99:2c:fb:08:ce:b0:bc:1e:69:cd:a0:e3:dc:e7:75:5d:
         b1:40:38:34:08:e2:f0:d1:ec:55:50:6c:d5:d0:22:cf:d1:ae:
         28:0c:16:f2:d6:93:bc:e8:cd:3a:78:8b:97:dd:13:53:7c:74:
         c8:4b:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----