Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a61303a3a2f34342d3434203d3e203531363932.roa
File:                     323630323a663836353a61303a3a2f34342d3434203d3e203531363932.roa (raw, json)
Hash identifier:          XhffOcNsZ8J5ZxNBvd89P5mZ2qPNXC52vM5xpyQL7yA=
Subject key identifier:   CE:1E:86:EB:FB:7D:79:EA:CB:CE:03:B1:6F:7C:22:2B:F9:4D:82:56
Certificate issuer:       /CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
Certificate serial:       5179C1431FB58D171716A5FF50F14AE74E633DE7
Authority key identifier: 59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a61303a3a2f34342d3434203d3e203531363932.roa
Signing time:             Sat 16 Nov 2024 21:01:39 +0000
ROA not before:           Sat 16 Nov 2024 20:56:39 +0000
ROA not after:            Sat 15 Nov 2025 21:01:39 +0000
asID:                     51692
IP address blocks:        2602:f865:a0::/44 maxlen: 44
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:79:c1:43:1f:b5:8d:17:17:16:a5:ff:50:f1:4a:e7:4e:63:3d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
        Validity
            Not Before: Nov 16 20:56:39 2024 GMT
            Not After : Nov 15 21:01:39 2025 GMT
        Subject: CN=CE1E86EBFB7D79EACBCE03B16F7C222BF94D8256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:61:78:56:d9:44:f2:e8:32:a0:e2:50:d9:23:
                    27:6c:93:91:35:30:d7:8d:3a:f4:49:e1:f2:8a:a6:
                    f8:d8:c0:fa:aa:c1:ab:b4:fc:f0:83:08:6c:13:d7:
                    94:0f:61:d0:f7:ae:72:a2:e4:ac:65:14:6c:d3:37:
                    1f:0d:6d:8d:8d:c0:ad:0d:cf:63:1a:90:bd:5d:54:
                    53:c0:49:76:73:b5:74:c7:ee:b8:24:4a:68:59:3f:
                    f4:26:58:3c:87:f1:f0:bf:8a:8f:16:54:dd:26:38:
                    20:6d:d5:cd:f7:fb:a1:f7:4a:22:8a:d1:c1:c3:d1:
                    6c:d9:20:85:45:51:d3:c2:e3:d0:92:f1:2d:49:ff:
                    c2:86:2c:f5:de:7d:63:56:93:ba:32:e2:47:fc:ea:
                    ce:05:27:8c:e1:d3:72:79:98:d3:c1:ca:0c:c4:8b:
                    dc:32:8c:82:84:3b:91:ba:63:b8:75:72:9c:ef:d3:
                    81:9b:94:b1:1f:70:9f:33:95:ed:89:fc:25:b7:89:
                    fd:ec:44:c2:79:e5:9e:26:91:65:e7:87:6e:1f:29:
                    90:b6:2c:67:f1:f7:06:3f:16:c5:46:8b:59:09:34:
                    1a:9f:e1:f8:eb:e1:f3:ce:72:37:0d:af:0b:a6:b0:
                    98:0f:40:5e:ff:51:4c:0a:03:17:39:bd:68:1b:07:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1E:86:EB:FB:7D:79:EA:CB:CE:03:B1:6F:7C:22:2B:F9:4D:82:56
            X509v3 Authority Key Identifier:
                keyid:59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a61303a3a2f34342d3434203d3e203531363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f865:a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:b9:20:3e:cd:cc:d9:7a:16:47:b9:b7:7e:84:30:c6:b6:
         68:86:6f:7d:8c:44:0e:dd:37:ec:e2:43:27:59:cd:45:be:00:
         7e:89:44:0f:2a:12:53:de:6a:0a:9a:c7:27:30:04:ac:9d:23:
         87:60:5d:cb:4e:64:07:60:59:61:4d:80:5b:d0:d1:b5:28:2c:
         a7:7c:3a:cc:9f:50:bf:3b:53:31:60:f1:88:7d:66:81:b2:3c:
         c7:e4:ca:bb:74:11:bc:fe:9e:a3:27:30:7c:f3:60:79:ac:dd:
         8b:15:92:d7:14:34:81:4a:75:dc:17:da:8a:df:00:63:07:4f:
         b6:f0:37:7a:e8:ac:c9:9f:43:0d:15:e5:47:d3:72:39:06:fc:
         49:5f:dd:4d:dd:e9:ac:f1:13:49:10:a5:3e:ab:16:a3:7f:7c:
         4d:1d:36:f6:af:72:81:4a:5f:62:09:35:f7:1f:e0:d6:ee:e8:
         e9:9a:b6:77:cc:a0:2d:01:5f:30:2c:37:9e:cd:d9:f6:25:33:
         18:53:d4:dd:80:c6:7a:04:fb:af:41:c0:55:50:dd:ad:dc:1a:
         de:25:55:fe:f8:64:c2:00:ee:3f:6b:4d:eb:23:a7:60:d6:df:
         e0:cb:1b:31:dd:e7:30:4b:4f:85:c0:cc:2a:9c:b2:99:a1:50:
         d1:d1:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----