Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61343a3a2f34382d3438203d3e20323135313436.roa
File:                     323630323a663962613a61343a3a2f34382d3438203d3e20323135313436.roa (raw, json)
Hash identifier:          3bHUMwV4tmh8nnH1ZmqYpKqJOHRb5Ie1l5lE32dbkHE=
Subject key identifier:   99:A2:D7:CF:D3:82:81:4E:08:46:DF:16:4B:23:02:13:CB:42:47:38
Certificate issuer:       /CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
Certificate serial:       282D8E4BDF7E70A67ACB4917230A35287B55C3ED
Authority key identifier: 76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61343a3a2f34382d3438203d3e20323135313436.roa
Signing time:             Wed 16 Jul 2025 09:13:36 +0000
ROA not before:           Wed 16 Jul 2025 09:08:36 +0000
ROA not after:            Wed 15 Jul 2026 09:13:36 +0000
asID:                     215146
IP address blocks:        2602:f9ba:a4::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2d:8e:4b:df:7e:70:a6:7a:cb:49:17:23:0a:35:28:7b:55:c3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a
        Validity
            Not Before: Jul 16 09:08:36 2025 GMT
            Not After : Jul 15 09:13:36 2026 GMT
        Subject: CN=99A2D7CFD382814E0846DF164B230213CB424738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:a9:77:df:50:13:3f:dc:b7:5f:dd:fd:e9:
                    48:a5:ee:d7:5b:3a:48:ab:d5:46:99:6b:5a:40:a3:
                    72:72:f4:6d:d2:68:c1:bc:76:c6:3f:09:58:9e:1a:
                    9d:47:a6:43:3b:4c:3e:8b:af:dc:de:99:0e:03:d9:
                    e0:53:40:4c:09:0c:6d:d5:12:c4:42:83:1a:7b:89:
                    85:46:e2:9a:1c:51:86:9c:b1:d8:dd:4c:da:91:04:
                    18:c4:88:f3:0d:07:a6:b7:d3:4e:37:90:66:41:8f:
                    cd:63:12:e8:4f:26:ba:6b:fe:0e:01:90:d0:77:6f:
                    ae:fd:65:46:d2:9d:c4:cd:f9:9e:8e:cf:09:fc:63:
                    b7:ea:c5:99:60:da:12:f7:f0:b2:75:ea:34:53:9a:
                    6b:5d:70:f0:1a:e3:c1:c2:07:47:e5:79:7e:64:d4:
                    71:7f:43:d9:fe:af:cb:2b:ab:a9:ae:a4:54:6c:35:
                    12:e1:87:df:28:a7:28:22:a1:ee:9a:e9:3a:a1:29:
                    4d:ae:39:64:d4:dc:0c:98:51:71:6a:9b:6c:43:74:
                    52:8c:db:34:70:94:56:02:41:19:dd:44:b1:06:ef:
                    0c:32:98:c8:75:62:8b:71:06:43:e4:f5:3f:0e:f1:
                    1c:12:c7:14:b6:a9:74:3f:eb:ad:0f:29:48:e0:7a:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A2:D7:CF:D3:82:81:4E:08:46:DF:16:4B:23:02:13:CB:42:47:38
            X509v3 Authority Key Identifier:
                keyid:76:BF:44:7C:93:50:84:94:9D:B0:46:FF:77:38:B1:E5:7C:82:4F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/76BF447C935084949DB046FF7738B1E57C824FF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd796e5afd95876e9b568565aef2b0b76b8382ea22a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/323630323a663962613a61343a3a2f34382d3438203d3e20323135313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:9e:a0:8a:a3:22:34:90:7a:4b:8f:77:8b:89:42:0f:1d:0d:
         cc:2a:b4:d1:db:e7:ff:05:e0:45:e4:82:28:f7:60:cb:c5:59:
         03:e0:26:18:96:3d:b5:9b:d9:5b:e2:99:ea:1e:9d:70:b9:e2:
         c6:3f:01:9c:a7:ee:4b:52:6a:bc:b2:90:68:d4:ca:35:53:41:
         31:f4:a6:ce:95:c9:5f:65:eb:2a:25:1f:b4:da:79:4c:06:8d:
         c5:c8:85:22:4c:ec:10:1b:85:22:d8:f4:c1:fa:d6:64:d9:f1:
         eb:80:fc:8e:ab:22:4d:a7:65:e8:eb:f1:9d:c0:65:71:8d:9c:
         02:66:3e:b0:7b:71:8e:f4:ed:ea:34:2d:fe:45:86:b6:95:17:
         5e:a0:5f:68:38:65:e8:c4:b1:4d:76:3c:8b:37:79:a5:3e:bc:
         48:73:ae:d8:15:68:d7:ab:6f:a4:b0:16:52:67:15:05:71:de:
         c1:2a:93:0b:e8:c3:fc:3d:fb:63:85:b4:7e:e0:15:88:92:d6:
         38:43:c0:84:83:0f:07:75:10:6d:f7:61:4c:fc:3f:13:21:17:
         d8:c8:2a:c3:52:0e:31:dd:d9:4d:85:4b:45:23:e8:05:73:bd:
         8f:8f:21:df:c7:69:09:4f:4d:5c:91:8a:4b:45:7f:4f:c4:01:
         af:08:60:06
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUKC2OS99+cKZ6y0kXIwo1KHtVw+0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGQ4YTY3MmRkNzk2ZTVhZmQ5NTg3NmU5YjU2ODU2NWFl
ZjJiMGI3NmI4MzgyZWEyMmEwHhcNMjUwNzE2MDkwODM2WhcNMjYwNzE1MDkxMzM2
WjAzMTEwLwYDVQQDEyg5OUEyRDdDRkQzODI4MTRFMDg0NkRGMTY0QjIzMDIxM0NC
NDI0NzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJqpd99QEz/c
t1/d/elIpe7XWzpIq9VGmWtaQKNycvRt0mjBvHbGPwlYnhqdR6ZDO0w+i6/c3pkO
A9ngU0BMCQxt1RLEQoMae4mFRuKaHFGGnLHY3UzakQQYxIjzDQemt9NON5BmQY/N
YxLoTya6a/4OAZDQd2+u/WVG0p3Ezfmejs8J/GO36sWZYNoS9/Cydeo0U5prXXDw
GuPBwgdH5Xl+ZNRxf0PZ/q/LK6uprqRUbDUS4YffKKcoIqHumuk6oSlNrjlk1NwM
mFFxaptsQ3RSjNs0cJRWAkEZ3USxBu8MMpjIdWKLcQZD5PU/DvEcEscUtql0P+ut
DylI4Hq7vwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFJmi18/TgoFOCEbfFksjAhPL
Qkc4MB8GA1UdIwQYMBaAFHa/RHyTUISUnbBG/3c4seV8gk/5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzlhNjg5NjRmNWZmNjQwZWJhZDEwMGRlZWE3YzliYTQ2LzEv
NzZCRjQ0N0M5MzUwODQ5NDlEQjA0NkZGNzczOEIxRTU3QzgyNEZGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBlLTk5MWZjNjIwMWI0NS84ZDhh
NjcyZGQ3OTZlNWFmZDk1ODc2ZTliNTY4NTY1YWVmMmIwYjc2YjgzODJlYTIyYS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS85YTY4OTY0ZjVmZjY0MGViYWQxMDBk
ZWVhN2M5YmE0Ni8xLzMyMzYzMDMyM2E2NjM5NjI2MTNhNjEzNDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzEzNTMxMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+boApDANBgkq
hkiG9w0BAQsFAAOCAQEAHp6giqMiNJB6S493i4lCDx0NzCq00dvn/wXgReSCKPdg
y8VZA+AmGJY9tZvZW+KZ6h6dcLnixj8BnKfuS1JqvLKQaNTKNVNBMfSmzpXJX2Xr
KiUftNp5TAaNxciFIkzsEBuFItj0wfrWZNnx64D8jqsiTadl6OvxncBlcY2cAmY+
sHtxjvTt6jQt/kWGtpUXXqBfaDhl6MSxTXY8izd5pT68SHOu2BVo16tvpLAWUmcV
BXHewSqTC+jD/D37Y4W0fuAViJLWOEPAhIMPB3UQbfdhTPw/EyEX2Mgqw1IOMd3Z
TYVLRSPoBXO9j48h38dpCU9NXJGKS0V/T8QBrwhgBg==
-----END CERTIFICATE-----