Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313833303a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313833303a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          vbHu/BhgVntQ9eVnf4LTjwI6qbSuceWeyDYlVt/X4mA=
Subject key identifier:   65:78:09:FF:52:C1:18:62:D7:48:63:EA:AA:7C:9E:4D:8D:59:11:D6
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       11CA8151933618804A67755C26886176B113EA71
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313833303a3a2f34382d313238203d3e203532303235.roa
Signing time:             Tue 16 Sep 2025 02:18:52 +0000
ROA not before:           Tue 16 Sep 2025 02:13:52 +0000
ROA not after:            Tue 15 Sep 2026 02:18:52 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1830::/48 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ca:81:51:93:36:18:80:4a:67:75:5c:26:88:61:76:b1:13:ea:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Sep 16 02:13:52 2025 GMT
            Not After : Sep 15 02:18:52 2026 GMT
        Subject: CN=657809FF52C11862D74863EAAA7C9E4D8D5911D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:10:d4:f7:90:22:5a:ff:15:c7:31:32:4c:
                    66:ea:f3:5e:b6:f2:a3:7e:22:65:bc:50:ed:ae:b4:
                    05:32:db:7e:95:81:5d:c3:51:53:29:eb:69:33:8a:
                    53:24:ff:b6:59:45:51:df:3a:82:c5:0b:48:24:7f:
                    88:90:0a:9b:f8:8a:ae:ef:59:6a:58:ae:cd:dc:04:
                    fc:7e:2e:c6:5d:19:af:ef:09:b5:59:85:12:1c:31:
                    b7:67:0a:f9:4f:f6:6a:8c:37:c9:51:79:2f:b4:b2:
                    bc:40:c6:2b:ed:65:2a:e2:5b:f4:c3:95:07:f5:85:
                    42:ad:c2:e2:77:69:a7:40:6e:2f:cd:12:25:62:74:
                    7f:69:4d:bb:ea:d8:e6:40:00:1c:59:84:b0:42:65:
                    70:c7:c4:0b:85:03:35:a9:6f:fe:eb:d7:6e:91:90:
                    67:1f:e1:28:d8:ea:4f:9e:aa:eb:7f:e1:57:e8:68:
                    74:17:91:4b:01:08:87:ac:db:fb:62:44:05:54:42:
                    f6:b8:1f:75:fe:46:25:a1:67:dd:e0:3a:55:69:c3:
                    e9:52:ca:d3:1d:df:f9:f5:4f:29:af:93:a0:b0:7f:
                    3f:f8:bc:15:e0:6c:6c:7d:14:39:69:4f:ef:e2:33:
                    ed:fa:a9:e7:81:e7:8e:12:ee:e4:2e:81:fa:78:ff:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:78:09:FF:52:C1:18:62:D7:48:63:EA:AA:7C:9E:4D:8D:59:11:D6
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a313833303a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1830::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:e5:02:9e:46:ba:ce:d5:c0:d2:d1:51:4b:b8:c8:bc:51:02:
         8d:13:f9:e1:f9:f8:25:b8:dd:08:92:4e:f1:0a:31:a1:c5:d9:
         e7:ab:97:03:c1:e7:2b:d6:28:b6:4e:44:83:cc:4c:90:e7:18:
         0e:e0:64:69:c0:3c:39:44:81:a4:37:dc:33:fd:d0:01:36:0d:
         1c:58:1f:ef:45:fb:16:37:ee:09:3f:83:5b:55:d5:0b:6f:10:
         82:1e:c7:f2:27:ec:81:1b:c1:1e:13:ab:4b:f2:cf:33:b5:56:
         cc:2f:37:e0:43:aa:c3:12:89:67:59:0d:9e:42:97:c0:9e:d3:
         1c:b7:c0:7e:0b:d1:25:9d:59:54:25:7d:21:e3:de:b0:d6:d6:
         57:dc:1a:15:0a:0c:30:40:97:54:51:da:c2:8b:bd:2c:73:dc:
         c8:af:d7:57:83:9f:90:60:9a:f0:29:be:ce:bb:fd:b1:68:3a:
         31:09:4f:f3:61:f2:79:6e:9a:7d:7e:74:04:cc:af:01:e5:c2:
         55:b5:ed:f2:c3:53:19:6a:66:65:d4:a5:ba:80:e8:19:a2:db:
         a6:b7:b1:db:e9:1c:0b:b7:d2:30:df:2a:9b:de:e5:d6:0c:42:
         3a:f9:f8:59:ac:2f:bd:c6:b6:a9:28:d2:8c:0d:83:a3:2d:fa:
         26:c6:ed:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:35 2025 by rpki-client