Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313132653a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313132653a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          wTWrEmrOwpjnFZsGpfFLbgcmNj5xFGdvjvC+UdKJrUk=
Subject key identifier:   C2:DE:12:CE:EF:FF:F0:9E:25:2A:D2:FC:B4:52:91:30:68:9E:66:E9
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       5309E9FDF113ECB8CA9CB16CC073E7FDB212DE67
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313132653a3a2f34382d313238203d3e203532303235.roa
Signing time:             Tue 26 Aug 2025 14:06:54 +0000
ROA not before:           Tue 26 Aug 2025 14:01:54 +0000
ROA not after:            Tue 25 Aug 2026 14:06:54 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:112e::/48 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:09:e9:fd:f1:13:ec:b8:ca:9c:b1:6c:c0:73:e7:fd:b2:12:de:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 26 14:01:54 2025 GMT
            Not After : Aug 25 14:06:54 2026 GMT
        Subject: CN=C2DE12CEEFFFF09E252AD2FCB4529130689E66E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:ee:d5:8d:8e:25:6f:de:69:49:a1:37:35:
                    05:46:cf:f2:c3:35:d5:c1:7f:1c:59:1e:1b:8c:3f:
                    a3:13:81:52:15:ac:2a:b0:9d:75:30:2e:37:77:f0:
                    80:e0:bf:5a:ea:68:e7:d5:ae:06:d2:0e:63:37:12:
                    f0:3c:92:af:5c:09:7e:c2:c0:f6:fb:f3:20:4b:2f:
                    e7:31:13:35:b1:87:6b:d0:d4:55:4d:87:ca:e0:c2:
                    be:4f:eb:45:a6:f1:75:86:3e:b1:d4:cd:f5:8a:c5:
                    74:1f:09:a9:62:4d:4b:72:41:07:25:b2:a0:99:ed:
                    20:a3:0c:a9:95:86:df:9e:b7:da:b5:46:52:aa:d5:
                    b1:ed:48:f6:f8:e5:1e:09:f4:8e:b2:fb:6a:23:b2:
                    df:7f:bd:2f:f6:3e:89:41:fc:62:0a:50:a7:66:5d:
                    a1:43:49:16:9c:91:e3:84:da:81:8d:d8:06:99:b3:
                    ff:4e:93:5c:4c:28:c8:6f:a7:17:3c:13:7f:48:5b:
                    6e:55:62:dc:37:78:0b:63:fd:50:d5:61:77:08:a9:
                    92:ac:1c:16:07:d3:07:89:2b:8b:40:5c:2a:3b:e9:
                    11:8d:64:76:26:3a:9e:fb:b2:51:d7:eb:c7:14:fa:
                    fe:b0:d1:4a:cd:85:89:ac:26:15:d4:14:81:99:9f:
                    e8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DE:12:CE:EF:FF:F0:9E:25:2A:D2:FC:B4:52:91:30:68:9E:66:E9
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313132653a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:112e::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:c5:8c:b0:96:7a:b7:77:cd:b0:33:23:0c:89:95:2a:99:b2:
         e7:ef:dd:25:f7:48:9c:c5:fe:22:2c:62:c2:76:a0:c5:0d:5f:
         1e:f7:c4:8a:ef:00:ff:10:3a:57:a9:ab:b2:34:c2:d5:7b:23:
         8e:5a:0b:00:c5:56:08:60:53:6b:08:33:cc:b7:c0:fb:46:d9:
         2c:a6:13:31:36:3c:8a:7b:05:58:66:e8:b8:d4:bb:47:1e:77:
         7c:0f:23:7c:77:ef:dc:10:e9:40:0f:ba:ca:8a:1c:fc:99:b8:
         65:84:e8:77:55:23:ba:43:8d:17:29:f4:3a:09:7d:83:6b:ba:
         19:b6:36:95:b3:3e:71:bc:8f:65:12:cc:4f:f2:46:fc:d7:13:
         46:ab:56:7b:8b:ab:36:66:b4:7c:b1:9b:0f:ac:9e:70:19:47:
         f1:24:f3:45:da:81:d2:78:5e:bf:ef:73:fd:35:3c:60:e5:d7:
         e9:62:f0:81:88:30:9e:ca:c7:3f:7c:2b:b2:42:6f:03:ee:3c:
         1e:5a:94:64:9d:f4:64:a4:f7:fc:ad:79:e8:a5:0c:06:49:2d:
         f0:80:e5:cb:20:a3:ad:27:6f:b6:c8:41:ff:59:e9:1b:a5:b4:
         91:7d:58:36:9e:06:fd:e8:a8:f9:68:c9:41:88:26:e6:37:53:
         53:b4:41:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:35 2025 by rpki-client