Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313433313a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313433313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          6CNF42c1/aEMjlFThn1P8Qr5Y3qW+ULo7v8kLtNGrCA=
Subject key identifier:   A0:55:3F:67:C2:A5:D7:4C:BB:7B:EC:3F:F0:5D:4D:AD:6C:02:7F:F6
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       53A2BC4393F52D5F55821986EFE3803525213926
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313433313a3a2f34382d313238203d3e203532303235.roa
Signing time:             Mon 25 Aug 2025 21:54:36 +0000
ROA not before:           Mon 25 Aug 2025 21:49:36 +0000
ROA not after:            Mon 24 Aug 2026 21:54:36 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1431::/48 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a2:bc:43:93:f5:2d:5f:55:82:19:86:ef:e3:80:35:25:21:39:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 25 21:49:36 2025 GMT
            Not After : Aug 24 21:54:36 2026 GMT
        Subject: CN=A0553F67C2A5D74CBB7BEC3FF05D4DAD6C027FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:3e:14:70:59:65:88:e8:c5:2d:cd:2e:54:
                    4a:85:2b:23:14:24:b5:a7:57:e0:f2:ea:77:1e:2a:
                    69:f4:dd:35:e6:96:a8:0b:c3:bf:68:54:de:89:17:
                    26:2b:94:bf:26:b1:ff:c3:59:2f:8a:ba:6b:82:1d:
                    37:58:59:be:a7:4f:82:e2:5d:61:99:bc:50:70:ed:
                    11:0d:00:90:53:91:44:c8:5a:44:0f:69:06:34:57:
                    d7:f0:f2:ef:53:78:90:36:0f:10:b0:35:fc:b9:b6:
                    6c:27:82:74:19:5b:9b:bc:2d:e6:da:c8:8d:d8:96:
                    de:aa:7c:ba:80:04:e0:a4:c4:36:6b:86:5b:40:b0:
                    5c:af:47:0f:08:8d:95:30:71:b9:51:7c:72:d9:21:
                    75:b6:19:e7:3b:12:11:cf:c5:40:9f:c7:b3:d1:51:
                    08:91:3d:78:d9:cc:c3:b9:30:40:d3:94:36:36:2f:
                    07:dd:c2:91:05:1a:35:68:95:5b:5b:fa:72:7b:77:
                    51:6e:19:ef:8f:5d:05:f3:53:e2:d3:d8:9e:2d:5b:
                    de:69:19:a9:30:ed:34:2e:e1:a9:c2:3c:55:1f:01:
                    19:b2:86:ea:a3:6a:d6:0d:1e:de:32:90:f4:fe:85:
                    12:ea:03:0f:44:12:99:3e:39:50:6a:45:81:e5:ab:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:55:3F:67:C2:A5:D7:4C:BB:7B:EC:3F:F0:5D:4D:AD:6C:02:7F:F6
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313433313a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1431::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:5c:c7:22:62:a5:be:47:71:df:e0:6b:92:6f:8d:d5:85:c8:
         af:8a:dd:0a:3e:4c:ea:98:d4:54:74:15:0e:54:ac:27:3c:f4:
         96:c9:7a:77:dd:25:d2:3f:1b:90:9d:28:b8:45:50:a7:a8:1b:
         b5:78:f2:fe:09:c7:15:c7:65:37:97:98:47:53:62:3f:1c:37:
         3f:d6:f0:05:a8:37:19:6d:c9:d7:1d:7b:15:b2:41:e9:90:69:
         af:ab:f8:b0:10:45:1a:35:7d:ef:f2:68:79:38:70:7a:57:ae:
         77:79:23:98:88:30:14:1a:1c:1a:56:c0:6d:22:a6:f0:a8:cc:
         d0:c0:0d:70:5c:9e:b3:1e:3a:e6:14:43:51:60:32:44:c3:fc:
         02:ae:64:66:08:53:ec:62:c1:b9:82:75:20:91:d9:d2:b8:75:
         e6:c7:3d:f3:a3:57:2d:77:69:e3:01:9a:43:03:ad:70:9c:3a:
         a7:16:ee:53:cb:44:37:ef:71:db:e4:bf:8f:56:58:25:06:92:
         24:bb:53:7d:f0:6d:96:aa:6b:d4:12:6f:9d:3f:0a:c5:17:eb:
         cc:e3:67:dd:93:f0:d1:36:1b:24:c6:4b:a7:ca:1f:ed:07:c4:
         bd:86:fd:b8:c5:70:1c:40:6e:0d:09:22:51:44:ee:22:2a:cf:
         55:f9:f3:3b
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUU6K8Q5P1LV9VghmG7+OANSUhOSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYzODZGQUJFQTM5MjEwQjY2NUE2QTU1QUU1REE2NkJF
Njc0MTU5NzAeFw0yNTA4MjUyMTQ5MzZaFw0yNjA4MjQyMTU0MzZaMDMxMTAvBgNV
BAMTKEEwNTUzRjY3QzJBNUQ3NENCQjdCRUMzRkYwNUQ0REFENkMwMjdGRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBT4UcFlliOjFLc0uVEqFKyMU
JLWnV+Dy6nceKmn03TXmlqgLw79oVN6JFyYrlL8msf/DWS+KumuCHTdYWb6nT4Li
XWGZvFBw7RENAJBTkUTIWkQPaQY0V9fw8u9TeJA2DxCwNfy5tmwngnQZW5u8Leba
yI3Ylt6qfLqABOCkxDZrhltAsFyvRw8IjZUwcblRfHLZIXW2Gec7EhHPxUCfx7PR
UQiRPXjZzMO5MEDTlDY2LwfdwpEFGjVolVtb+nJ7d1FuGe+PXQXzU+LT2J4tW95p
Gakw7TQu4anCPFUfARmyhuqjatYNHt4ykPT+hRLqAw9EEpk+OVBqRYHlq8KRAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUoFU/Z8Kl10y7e+w/8F1NrWwCf/YwHwYDVR0j
BBgwFoAU9jhvq+o5IQtmWmpVrl2ma+Z0FZcwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvOC9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVEQTY2QkU2
NzQxNTk3LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvNy9GNjM4NkZBQkVBMzkyMTBCNjY1QTZBNTVBRTVE
QTY2QkU2NzQxNTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzgvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMTM0MzMzMTNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QUMTANBgkqhkiG9w0B
AQsFAAOCAQEAaFzHImKlvkdx3+Brkm+N1YXIr4rdCj5M6pjUVHQVDlSsJzz0lsl6
d90l0j8bkJ0ouEVQp6gbtXjy/gnHFcdlN5eYR1NiPxw3P9bwBag3GW3J1x17FbJB
6ZBpr6v4sBBFGjV97/JoeThweleud3kjmIgwFBocGlbAbSKm8KjM0MANcFyesx46
5hRDUWAyRMP8Aq5kZghT7GLBuYJ1IJHZ0rh15sc986NXLXdp4wGaQwOtcJw6pxbu
U8tEN+9x2+S/j1ZYJQaSJLtTffBtlqpr1BJvnT8KxRfrzONn3ZPw0TYbJMZLp8of
7QfEvYb9uMVwHEBuDQkiUUTuIirPVfnzOw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:36 2025 by rpki-client