Route Origin Authorization

$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e382e302f32322d3234203d3e203139353737.roa
File:                     3230382e38352e382e302f32322d3234203d3e203139353737.roa (raw, json)
Hash identifier:          4M5HkJa0vQoMVgnToZFslGbmkTFTjlyfsRbeMRLWorw=
Subject key identifier:   18:4E:FD:41:0A:94:00:91:B7:C6:96:73:B9:77:63:D4:90:D1:D3:DF
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       0F7FE8329F91B9A312B01BF87CB266B7B1114512
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e382e302f32322d3234203d3e203139353737.roa
Signing time:             Mon 17 Aug 2026 22:48:08 +0000
ROA not before:           Mon 17 Aug 2026 22:43:08 +0000
ROA not after:            Mon 16 Aug 2027 22:48:08 +0000
asID:                     19577
IP address blocks:        208.85.8.0/22 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7f:e8:32:9f:91:b9:a3:12:b0:1b:f8:7c:b2:66:b7:b1:11:45:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Aug 17 22:43:08 2026 GMT
            Not After : Aug 16 22:48:08 2027 GMT
        Subject: CN=184EFD410A940091B7C69673B97763D490D1D3DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5c:99:d9:c7:fa:92:5b:02:b0:6d:b9:e8:5b:
                    87:43:46:e0:1d:dd:5d:d5:7a:8d:c8:3a:83:7c:22:
                    a8:7d:b1:ae:38:cf:53:12:d9:69:06:b0:69:f6:8e:
                    52:f3:0f:93:93:b5:2e:ce:28:d5:5c:07:d0:e9:bd:
                    17:cc:a2:d2:79:90:eb:47:42:a9:6a:1a:d5:d0:f5:
                    0c:2b:67:a9:4d:1f:77:b0:bc:bd:52:94:6d:a7:75:
                    56:e4:16:64:3e:ee:96:08:a6:d6:d6:ec:6a:80:f2:
                    f1:51:ea:f6:3c:d9:6b:bb:c6:15:ac:df:c5:74:71:
                    91:e7:6a:52:10:41:40:99:a8:6f:32:9e:54:84:fc:
                    1f:7e:62:b9:17:2c:92:3b:97:8d:4b:97:ec:2f:d2:
                    2e:af:2f:31:05:64:3a:6b:2e:92:70:15:f0:1c:62:
                    fd:7a:f1:e3:ec:65:60:f5:99:3a:47:71:49:c7:b5:
                    75:30:3e:84:e8:26:7e:2a:08:74:f0:a6:34:98:23:
                    18:09:30:ec:69:16:b8:c3:ea:bd:14:a7:63:8b:b2:
                    b3:fa:3b:34:1b:f2:6b:42:7a:e3:31:3e:87:5c:9f:
                    0c:32:33:6f:16:5a:fb:c3:84:dc:98:f6:be:42:81:
                    1e:b7:62:9f:10:1e:44:ff:7c:48:19:00:54:35:ab:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4E:FD:41:0A:94:00:91:B7:C6:96:73:B9:77:63:D4:90:D1:D3:DF
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e382e302f32322d3234203d3e203139353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:c6:b6:de:73:8c:c0:1a:49:cd:a3:96:40:2f:a8:f2:28:7b:
         cd:a3:56:40:98:b2:cb:7d:5a:fc:50:b2:67:19:bb:21:dd:4f:
         8f:ce:eb:31:15:c5:11:bf:80:cf:9c:f9:d7:f7:4c:ca:44:1f:
         48:00:8d:48:84:3f:e1:4b:a1:2a:e7:fe:a0:df:01:15:b8:18:
         b2:35:7c:3a:fb:ed:92:1c:16:4d:fe:5f:22:ea:fe:9b:27:30:
         de:61:33:e6:ca:4a:d1:4c:0d:bc:71:a4:9c:f0:af:95:aa:ae:
         47:b5:4d:38:bf:71:6e:e0:b7:6d:e8:dc:c1:c1:f0:bc:fe:9f:
         78:89:ab:05:e1:97:65:62:74:ab:6d:d3:2b:e2:f8:a9:3f:75:
         ec:c5:df:7b:d0:03:c0:e1:d5:7d:69:ca:c9:ee:89:30:6a:22:
         5e:33:07:8c:6c:d9:21:58:e2:c8:08:bb:ec:4a:a7:63:04:25:
         91:9e:5b:08:a4:e0:50:8e:d2:c6:cf:7a:3b:33:7d:7a:04:d0:
         6d:36:8f:a0:66:8c:7b:20:88:10:31:10:96:f0:5e:c1:d0:7d:
         f3:90:4a:a6:64:7f:6d:d3:f5:67:94:ba:15:f1:01:7f:22:bc:
         75:16:0f:fa:a8:c0:7f:0e:29:b9:88:e0:91:02:37:de:07:4f:
         e4:cb:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----