Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa
File:                     326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa (raw, json)
Hash identifier:          nV0jV7X9yzxWk6yhLwoJpor/HeAMxvguLFgdC7GkT54=
Subject key identifier:   FB:21:D4:58:E4:D8:B3:4F:D3:5F:C5:0C:8C:AB:7A:24:7C:6F:8F:64
Certificate issuer:       /CN=44E86F9479A4B9985DBD67FEC14630BC1F6A5707
Certificate serial:       13AAED3CD35028DD7DC4B33EFDA7686F49E71A6B
Authority key identifier: 44:E8:6F:94:79:A4:B9:98:5D:BD:67:FE:C1:46:30:BC:1F:6A:57:07
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa
Signing time:             Tue 28 Oct 2025 12:54:55 +0000
ROA not before:           Tue 28 Oct 2025 12:49:55 +0000
ROA not after:            Tue 27 Oct 2026 12:54:55 +0000
asID:                     213413
IP address blocks:        2a0b:4e07:a80::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:aa:ed:3c:d3:50:28:dd:7d:c4:b3:3e:fd:a7:68:6f:49:e7:1a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44E86F9479A4B9985DBD67FEC14630BC1F6A5707
        Validity
            Not Before: Oct 28 12:49:55 2025 GMT
            Not After : Oct 27 12:54:55 2026 GMT
        Subject: CN=FB21D458E4D8B34FD35FC50C8CAB7A247C6F8F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:3c:6a:58:b8:1f:9a:b2:ab:8c:d5:07:78:
                    72:c1:4d:e8:da:79:68:19:ef:5e:1b:46:9e:87:e1:
                    89:69:d2:9e:b5:c8:37:d6:11:24:cf:ec:87:38:8e:
                    7a:1d:55:ad:8a:61:ac:bd:12:60:17:37:e4:01:e3:
                    bd:8e:59:37:bf:d9:b8:ee:70:d9:7d:28:f4:fb:47:
                    9c:f0:84:f9:a2:bc:a8:85:2e:c3:13:1d:8d:c8:c0:
                    25:b0:51:14:21:32:1d:d6:63:f1:5f:bf:2a:82:a7:
                    25:1b:31:b9:cc:57:eb:e2:d8:6c:8b:95:03:5a:0c:
                    f5:ec:17:1c:a1:30:d7:bb:bc:51:e6:da:3c:8a:4d:
                    c5:61:0e:d8:95:c4:af:cf:0c:6d:11:41:2e:ab:a8:
                    31:ff:6a:b9:94:1d:4d:dc:d8:3f:3c:85:9b:ad:7f:
                    da:39:c4:14:59:3f:e1:ac:eb:4f:cd:ba:2e:fe:b2:
                    c9:0f:4b:cb:10:ff:f3:50:93:f8:fc:0c:fd:f7:82:
                    3a:5b:79:ca:8e:d9:84:3d:6c:53:a8:f3:cf:ee:f3:
                    68:c9:fd:4c:93:da:79:01:78:8d:86:b5:e8:1b:d6:
                    c2:5a:1d:c5:9c:29:49:17:3b:68:61:c4:4a:5b:f5:
                    d5:53:8c:10:73:99:02:1c:48:ce:f1:d9:b3:ea:41:
                    12:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:21:D4:58:E4:D8:B3:4F:D3:5F:C5:0C:8C:AB:7A:24:7C:6F:8F:64
            X509v3 Authority Key Identifier:
                keyid:44:E8:6F:94:79:A4:B9:98:5D:BD:67:FE:C1:46:30:BC:1F:6A:57:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:99:30:d3:9f:4c:3e:37:8c:6e:e4:41:21:b6:e8:ed:26:10:
         7b:43:ba:fb:04:b3:d7:59:b4:0e:2c:c8:1d:c6:4c:8f:12:77:
         05:82:6e:16:fe:2a:cd:37:54:ba:2a:a9:ff:54:91:66:c6:a4:
         fa:b4:75:83:d6:1b:c1:59:44:4d:08:0f:82:9b:f7:38:b9:f4:
         c7:db:cb:1c:69:06:cd:7f:cf:5e:8a:f2:5a:5f:21:69:08:e1:
         95:8c:0b:7b:96:f3:ac:a4:a8:3f:49:db:34:aa:9b:d3:8d:f0:
         ca:71:a8:2a:8c:01:93:d3:f2:96:57:8b:aa:97:66:a7:c6:a8:
         80:21:33:6c:55:8b:bb:73:dd:37:5d:f5:ec:b9:94:bd:ac:50:
         59:99:7a:70:2d:99:08:11:5c:3a:74:2c:84:91:f7:e3:d0:bf:
         31:6b:9d:d6:db:29:d4:48:00:eb:5b:82:06:ac:67:d3:b2:4c:
         4a:8d:86:0d:3e:7c:d6:00:ff:ee:38:8f:74:fd:ee:cf:7a:17:
         5d:e7:ee:a4:29:2a:55:4b:81:57:68:a8:c6:f1:7a:74:ea:70:
         7f:2b:23:f0:67:4d:57:89:14:de:c5:11:95:4d:17:b6:37:2a:
         9b:b6:04:8e:92:d7:6b:82:d7:a6:7c:f8:0a:d0:0e:fd:d9:c3:
         e2:ee:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----