Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/1497794d342e459cadad5d25a1b6f827/0/323632303a3130663a663030323a3a2f34372d3437203d3e20333939393730.roa
File:                     323632303a3130663a663030323a3a2f34372d3437203d3e20333939393730.roa (raw, json)
Hash identifier:          eVwBgn0eUTrHGWnqhgAJt/dZ2DjR17byveTkEIXC9Og=
Subject key identifier:   0A:98:09:D4:E6:4E:1E:2B:78:CA:E2:E8:18:80:11:1B:18:7B:90:48
Certificate issuer:       /CN=62e8972cb6b57f2d31e585644b610fec30140371cff48baccc
Certificate serial:       5FF38E00439F99AAB8BACBB86F677066C7BEA8C1
Authority key identifier: 12:8D:A3:1A:0B:3E:59:36:44:54:17:8F:FC:86:9C:F5:65:99:4C:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d605c12b-ac18-40bb-adb3-78730040a3b5/62e8972cb6b57f2d31e585644b610fec30140371cff48baccc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/1497794d342e459cadad5d25a1b6f827/0/323632303a3130663a663030323a3a2f34372d3437203d3e20333939393730.roa
Signing time:             Thu 17 Jul 2025 19:14:37 +0000
ROA not before:           Thu 17 Jul 2025 19:09:37 +0000
ROA not after:            Thu 16 Jul 2026 19:14:37 +0000
asID:                     399970
IP address blocks:        2620:10f:f002::/47 maxlen: 47
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f3:8e:00:43:9f:99:aa:b8:ba:cb:b8:6f:67:70:66:c7:be:a8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e8972cb6b57f2d31e585644b610fec30140371cff48baccc
        Validity
            Not Before: Jul 17 19:09:37 2025 GMT
            Not After : Jul 16 19:14:37 2026 GMT
        Subject: CN=0A9809D4E64E1E2B78CAE2E81880111B187B9048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4c:9e:97:84:dd:32:34:60:dc:2b:a9:84:6c:
                    ce:88:39:bf:09:6c:b7:00:2e:76:99:23:89:50:8f:
                    f9:02:07:d3:44:01:48:5e:29:06:3f:9e:6b:f8:e6:
                    fe:a5:7b:4a:e4:fb:24:d5:63:5b:ce:4d:d7:5b:ee:
                    cb:62:f9:66:b4:11:5f:3d:b6:c9:e1:3e:bf:7a:ef:
                    72:83:2e:32:2b:fc:32:cb:7f:ac:d0:07:86:ba:47:
                    02:73:6b:fe:73:06:fa:19:3b:27:08:12:25:a0:37:
                    e2:40:df:e6:85:93:8d:98:8d:eb:18:3a:4c:ec:67:
                    16:4c:55:46:61:fc:ef:96:f8:59:31:87:10:de:a5:
                    7e:36:58:35:e5:ef:c5:b2:3d:b2:dc:7c:16:4c:5a:
                    ea:10:a1:71:e9:4e:4a:dd:09:31:96:e8:d5:fe:9e:
                    3e:e8:fc:68:ec:1e:67:b8:e7:e9:33:a1:05:d9:0d:
                    3c:82:a1:21:76:16:4c:b8:91:90:70:3d:b1:06:b8:
                    c3:83:60:53:5c:de:6a:48:f7:7b:8f:ea:91:fc:70:
                    98:c6:42:b5:43:dd:d1:40:3e:3f:c3:8b:11:e6:d1:
                    c6:60:d0:cb:71:cd:ec:36:6f:5b:6b:d9:1a:30:6d:
                    08:76:5e:ad:ee:53:50:d6:84:86:5b:09:61:85:27:
                    9e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:98:09:D4:E6:4E:1E:2B:78:CA:E2:E8:18:80:11:1B:18:7B:90:48
            X509v3 Authority Key Identifier:
                keyid:12:8D:A3:1A:0B:3E:59:36:44:54:17:8F:FC:86:9C:F5:65:99:4C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/1497794d342e459cadad5d25a1b6f827/0/128DA31A0B3E59364454178FFC869CF565994CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d605c12b-ac18-40bb-adb3-78730040a3b5/62e8972cb6b57f2d31e585644b610fec30140371cff48baccc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/1497794d342e459cadad5d25a1b6f827/0/323632303a3130663a663030323a3a2f34372d3437203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:f002::/47

    Signature Algorithm: sha256WithRSAEncryption
         7b:f6:02:7b:04:34:a4:87:ca:93:56:58:b3:8d:5b:15:23:b0:
         ce:5e:b2:21:1f:ef:d6:68:6f:6a:66:aa:f3:d2:20:18:01:57:
         ae:4f:5d:c5:a5:43:a8:13:5c:e5:20:82:77:ef:8d:00:e0:5a:
         bc:7c:a8:51:52:70:9d:79:ad:95:28:60:31:c3:3c:9a:85:a6:
         3b:3d:0c:05:a2:b8:1d:88:a3:09:71:10:3f:90:a4:49:f4:8a:
         c2:1d:43:61:6b:48:4d:68:9c:77:0c:6b:6f:03:30:53:42:3b:
         2f:00:0c:cf:1b:3f:95:74:18:18:92:6d:c5:d1:2d:bb:5a:f7:
         44:5f:de:1c:87:e3:82:73:32:a0:01:13:e1:2b:d3:b6:e9:45:
         ef:84:de:02:81:c7:67:c1:14:c6:f3:fd:10:5a:73:b9:4d:f1:
         60:05:72:96:18:b1:82:d7:fb:b0:51:82:78:9a:a2:2f:42:9e:
         57:ea:bd:5f:c5:28:bd:bd:be:f1:95:59:3b:21:88:1a:47:30:
         0e:a2:08:3c:34:67:45:32:4e:d9:b6:f8:4f:0c:a9:9d:5b:22:
         3c:f7:cd:4f:49:a5:31:56:65:77:ff:eb:94:95:a0:51:b3:23:
         42:3d:7a:0b:25:c3:22:c6:d0:f6:9d:95:97:95:6e:16:1d:23:
         aa:f0:3e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----