Route Origin Authorization

$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6230353a3a2f34382d3438203d3e20323030343534.roa
File:                     323630323a666161353a6230353a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          ojFiTivjn5EtkI1sygsyF5Gbmn+09Aj24OWnVZvDLs0=
Subject key identifier:   6A:1C:45:EE:95:3A:65:36:4A:EF:D6:88:D5:45:59:A2:AC:A0:81:E9
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       70CE34D2D2AED5C68FA713979BE24F8B3E2DE1FA
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6230353a3a2f34382d3438203d3e20323030343534.roa
Signing time:             Fri 20 Jun 2025 17:52:28 +0000
ROA not before:           Fri 20 Jun 2025 17:47:28 +0000
ROA not after:            Fri 19 Jun 2026 17:52:28 +0000
asID:                     200454
IP address blocks:        2602:faa5:b05::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ce:34:d2:d2:ae:d5:c6:8f:a7:13:97:9b:e2:4f:8b:3e:2d:e1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Jun 20 17:47:28 2025 GMT
            Not After : Jun 19 17:52:28 2026 GMT
        Subject: CN=6A1C45EE953A65364AEFD688D54559A2ACA081E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:67:8b:ec:72:e2:5b:5f:b7:da:da:96:69:
                    6b:40:50:90:ac:ed:e2:e4:ac:c7:63:75:6f:87:5e:
                    9d:d9:91:0f:77:be:a9:01:25:06:5a:55:ae:7c:18:
                    42:de:6a:a2:8c:46:d2:06:4a:4a:73:a3:02:75:4d:
                    72:df:fa:ce:04:8e:00:f1:4b:33:98:f5:51:f3:1c:
                    cd:78:64:b3:d4:2e:d5:93:6b:53:2e:86:08:e9:99:
                    51:99:16:47:d1:46:4f:25:df:92:3b:dd:42:98:b4:
                    9f:c1:9b:38:49:31:80:f0:e2:f4:c4:23:da:68:6d:
                    8c:e5:65:95:b5:3e:40:61:4c:51:c7:7c:e3:f7:0d:
                    4f:f0:8b:5e:7f:55:9d:68:81:c9:b2:0a:20:57:57:
                    2b:c7:97:3d:a9:c3:a5:97:93:a9:3c:8a:21:31:b8:
                    93:0f:3a:d9:ac:a2:42:8b:b9:8c:98:31:10:0c:cd:
                    7d:1d:01:c9:c0:74:5c:86:99:d8:b7:8f:f2:fc:48:
                    84:77:82:08:02:0b:03:b5:c0:d5:57:6d:7e:6d:44:
                    f8:64:91:8c:b8:0a:64:d0:a5:ab:6b:46:85:c6:25:
                    ae:1f:e3:00:70:c0:95:52:c3:85:52:58:1c:c4:36:
                    cb:85:72:7e:b1:7f:b8:8f:cf:ca:3f:5f:ac:6c:8d:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1C:45:EE:95:3A:65:36:4A:EF:D6:88:D5:45:59:A2:AC:A0:81:E9
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6230353a3a2f34382d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:b05::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:77:d5:ad:8f:d1:26:f7:7c:d4:61:6e:36:d0:03:73:29:
         9c:9a:31:c8:84:b5:d9:a8:65:79:ac:c4:d7:33:db:ef:cd:d4:
         e2:4f:13:32:8e:87:7c:26:5a:b0:39:76:07:82:cf:83:5d:e9:
         a3:c9:a9:c0:e6:74:2a:92:dc:ad:3a:71:ec:ee:2d:4b:ef:15:
         7d:44:c7:5b:d7:d5:01:b0:07:17:f1:dc:5d:63:9e:2c:79:c0:
         d4:a4:61:5e:1b:1a:06:4c:80:d6:72:15:42:6c:79:33:a3:bf:
         c5:40:a9:ff:43:55:f9:04:25:43:ee:86:19:69:5a:48:6b:7e:
         01:ff:26:9a:e0:12:93:4c:ad:b8:33:e2:e3:2c:db:e1:71:ca:
         ee:34:7e:79:25:67:e8:d4:8b:e6:c6:d4:d4:2a:d6:fb:37:73:
         2e:45:04:44:2a:03:d5:43:d9:59:7f:8a:3c:c5:60:77:19:fc:
         36:43:74:2d:88:aa:99:42:53:f9:ae:b1:8a:9b:1d:1f:92:85:
         a5:2b:af:f8:fb:6b:5a:17:56:e6:95:16:6c:57:4e:e6:1a:0c:
         bf:39:74:9c:83:73:13:1c:68:24:47:95:8c:31:35:d2:a3:43:
         2c:82:f6:87:42:86:cf:04:85:1d:a6:7b:27:61:a3:ea:91:35:
         90:e6:f1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----