Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a393a3a2f34382d3438203d3e203234333132.roa
File:                     323630323a666163323a393a3a2f34382d3438203d3e203234333132.roa (raw, json)
Hash identifier:          UHpszD6bA2KmBDsdq9T6/Dwzozasf75ZWe86PIFu2wI=
Subject key identifier:   93:53:22:38:43:70:C0:94:31:C2:42:32:75:15:82:E7:D1:A3:2E:E6
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       36557A436B617322B083267FB484486B5E9641DB
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a393a3a2f34382d3438203d3e203234333132.roa
Signing time:             Sun 29 Mar 2026 03:27:33 +0000
ROA not before:           Sun 29 Mar 2026 03:22:33 +0000
ROA not after:            Sun 28 Mar 2027 03:27:33 +0000
asID:                     24312
IP address blocks:        2602:fac2:9::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:55:7a:43:6b:61:73:22:b0:83:26:7f:b4:84:48:6b:5e:96:41:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 29 03:22:33 2026 GMT
            Not After : Mar 28 03:27:33 2027 GMT
        Subject: CN=935322384370C09431C24232751582E7D1A32EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:43:40:3d:41:26:9c:55:cc:e5:90:df:99:75:
                    a5:50:1c:6b:63:b4:39:2e:95:52:14:55:39:a1:6f:
                    66:23:91:91:4f:0d:12:d5:22:71:24:ca:e0:0f:ef:
                    66:b7:66:31:2b:7b:0c:79:88:15:32:84:a5:5a:0e:
                    36:be:d8:87:6f:0d:d4:ce:20:b3:3f:60:76:55:df:
                    65:32:c0:7e:98:39:bb:17:2e:a9:d5:5c:7c:d8:57:
                    cf:1f:b8:99:c8:98:06:aa:3f:83:be:81:9e:aa:4b:
                    65:25:88:c5:20:46:c6:63:71:56:9d:8e:2a:a4:62:
                    54:e8:e6:64:b2:16:d7:83:c7:a9:2d:d6:3a:05:45:
                    4e:d5:88:43:db:43:32:de:ed:7a:47:64:5c:28:50:
                    1c:56:58:de:f7:20:0d:3b:11:0d:5c:b6:cd:4f:50:
                    a5:fa:7e:2b:09:0a:43:e5:9a:4f:5c:64:ee:09:9d:
                    9f:45:cf:1d:40:36:d3:38:88:06:b9:1c:e4:ff:19:
                    fd:b9:73:9f:94:c1:51:9c:1a:12:4a:d0:4b:d4:6c:
                    5c:99:4a:b6:4d:f1:ba:0d:41:6b:2d:a9:3c:a9:11:
                    0d:01:c7:88:c7:ac:8b:5c:00:07:2c:cb:3c:d0:f2:
                    54:c8:ef:4e:7f:cc:a3:2b:d9:5e:3a:ed:7f:47:20:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:53:22:38:43:70:C0:94:31:C2:42:32:75:15:82:E7:D1:A3:2E:E6
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a393a3a2f34382d3438203d3e203234333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:c2:aa:97:24:87:db:5f:ff:19:ef:0e:f6:e7:d9:75:4a:cf:
         67:c4:29:b9:3b:5c:b0:f0:8b:6e:9c:84:88:1b:97:0c:12:f7:
         79:41:af:57:07:c5:cf:de:2f:cc:be:c5:d8:3a:3d:f8:7e:cc:
         1b:92:be:7f:16:96:6c:be:48:c7:69:66:14:cc:e8:f1:7f:64:
         47:11:6b:d5:a0:9e:0c:62:a4:4f:0d:d3:a8:53:fd:43:8e:87:
         d5:7a:01:60:dc:2f:d1:5b:ff:33:02:b4:79:17:f3:24:d7:80:
         98:54:a8:c9:6c:43:46:54:04:bc:09:2d:77:c8:ce:a9:23:a1:
         46:12:4f:15:9f:5d:d1:13:dc:be:bd:ff:1e:9d:eb:b1:59:f2:
         8c:70:87:b0:0c:46:56:3f:89:b4:fa:a9:25:e9:25:75:e1:05:
         ee:cd:34:c9:3f:8a:d1:73:ac:07:51:e5:1c:40:c2:96:a5:87:
         e6:a4:31:74:e2:70:d3:e8:eb:33:fa:7a:f9:68:76:46:c6:ce:
         0f:fd:af:4b:43:e4:f6:fe:7f:e7:97:42:14:8e:e1:4f:af:5d:
         2f:97:18:02:97:c6:ec:92:75:9e:24:4e:de:fb:c9:90:75:c5:
         06:65:bf:ef:43:a4:cc:4c:a0:db:15:0e:fa:92:5c:b0:5c:ce:
         34:b1:c1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----