Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316432663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          oh9B3F0c48UjgFrFeZTlD4fTSLstSPywqIKVZhoQPuw=
Subject key identifier:   84:E7:5D:9A:95:8A:61:00:E6:80:C1:A5:FC:F0:FA:47:C5:88:32:31
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       355C533B5695F7303A52B2DA55681D6BFD301727
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Tue 26 Aug 2025 18:31:34 +0000
ROA not before:           Tue 26 Aug 2025 18:26:34 +0000
ROA not after:            Tue 25 Aug 2026 18:31:34 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1d2f::/48 maxlen: 128
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5c:53:3b:56:95:f7:30:3a:52:b2:da:55:68:1d:6b:fd:30:17:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Aug 26 18:26:34 2025 GMT
            Not After : Aug 25 18:31:34 2026 GMT
        Subject: CN=84E75D9A958A6100E680C1A5FCF0FA47C5883231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fd:98:63:0c:01:d5:a7:60:fc:74:79:ef:ee:
                    96:43:10:f1:6b:cc:78:95:b3:bb:9b:b5:7c:5c:2b:
                    66:51:c9:f7:44:63:21:17:7e:0a:c4:6c:61:e5:1a:
                    dd:a2:90:d8:39:d4:62:2a:a6:44:8b:5a:fb:91:e4:
                    ae:76:c7:cc:c9:47:da:3e:c8:ca:42:95:45:10:5f:
                    d6:a1:56:96:f9:c2:e9:85:aa:7c:3b:f1:d3:8b:41:
                    7f:4b:17:b1:df:6b:5a:98:2a:33:67:34:a4:63:cb:
                    51:9e:b3:b7:80:70:26:4d:2a:ad:c9:e2:c2:60:44:
                    b3:8f:e4:01:29:41:c4:3a:35:91:67:c2:dd:cd:3c:
                    21:ff:44:35:05:1d:6f:37:bc:0a:28:24:56:6c:49:
                    47:72:d7:eb:31:13:3b:36:f3:44:f1:fe:4f:27:fc:
                    8d:37:c4:f9:18:78:a0:aa:8a:1b:97:d9:9b:24:89:
                    29:3f:06:37:c2:f0:fd:fa:15:89:04:07:f0:37:37:
                    86:24:7c:5f:36:15:13:03:7f:72:b6:4c:70:7d:c2:
                    06:44:43:c4:dd:c6:c2:c1:fa:63:36:24:22:63:2f:
                    b2:a5:fa:78:39:cf:c5:3e:71:bb:73:67:90:09:3a:
                    ac:42:63:14:fb:c2:31:21:8a:dc:b1:ff:26:eb:70:
                    e3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E7:5D:9A:95:8A:61:00:E6:80:C1:A5:FC:F0:FA:47:C5:88:32:31
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a316432663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1d2f::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:f5:9a:13:70:a5:e2:e0:b9:13:20:5d:f0:dc:c5:15:dd:9c:
         ac:35:77:0a:4f:36:35:71:23:78:0a:1d:a6:b5:26:02:a4:f0:
         ff:09:38:63:a1:2a:33:cd:2f:ec:b0:91:fa:23:17:b3:76:14:
         74:65:e8:d0:8f:d9:05:6d:a6:24:33:52:c8:b7:48:66:0d:09:
         b7:3e:1f:83:79:3a:44:24:f5:88:4c:61:41:2f:f1:0a:ca:14:
         5e:2d:80:f4:41:eb:fb:cc:c8:1f:5d:d7:d8:ed:ed:74:c5:77:
         88:63:55:1b:bc:a8:7f:e4:a0:b9:b7:da:1c:c3:f4:04:bd:07:
         f1:e1:97:fb:ca:00:80:d2:c8:94:35:db:73:46:0c:3c:cf:44:
         c0:27:ad:79:b5:13:90:e6:fb:ba:88:52:8e:d0:9b:ab:a9:76:
         95:62:c9:19:bf:f0:49:c6:0d:bf:4e:ab:15:be:f3:1c:e5:3f:
         b1:73:ec:2b:0f:00:78:98:e9:6c:14:58:8f:33:a0:1f:33:ae:
         e6:b6:3a:7b:9f:a9:d9:38:67:0b:3f:10:7d:af:9f:d2:29:45:
         8e:2a:9c:1a:01:dc:0c:e4:11:18:6c:95:46:43:5e:f1:f8:64:
         c5:2e:95:ea:a0:7b:5b:67:53:7f:7d:d6:8e:f6:28:57:e9:1b:
         03:13:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:35 2025 by rpki-client