Route Origin Authorization

$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630313a3a2f34382d3438203d3e20313939353138.roa
File:                     323630323a666161353a6630313a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          8cAMzzciRJI7cvaUrqaTX2wIkDg5rXceMn3l1L2ztCI=
Subject key identifier:   7F:A6:C6:F4:3E:FD:20:E0:C9:29:1C:F4:F4:BD:52:A4:CB:C8:1D:81
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       410CCD97111DAF2C78DA57115F5746CA457673A1
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630313a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Mon 17 Aug 2026 22:48:10 +0000
ROA not before:           Mon 17 Aug 2026 22:43:10 +0000
ROA not after:            Mon 16 Aug 2027 22:48:10 +0000
asID:                     199518
IP address blocks:        2602:faa5:f01::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0c:cd:97:11:1d:af:2c:78:da:57:11:5f:57:46:ca:45:76:73:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Aug 17 22:43:10 2026 GMT
            Not After : Aug 16 22:48:10 2027 GMT
        Subject: CN=7FA6C6F43EFD20E0C9291CF4F4BD52A4CBC81D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:68:1b:1d:66:a4:1c:9a:56:c2:60:1a:42:
                    0a:1c:41:d2:2e:d7:1e:a2:b4:03:f1:b2:c5:7c:a2:
                    34:dc:58:3f:bd:14:5d:5a:41:b5:ee:8b:80:8e:cd:
                    a5:cb:f9:e6:4e:45:19:39:97:7c:73:ce:3b:cc:d8:
                    2b:a4:45:26:55:e1:57:51:5f:9a:da:ac:b1:a7:69:
                    c6:c6:78:a8:b0:f4:ad:63:c7:6f:e1:84:59:e4:f9:
                    8e:80:0a:a9:b0:6d:77:67:d6:76:3e:1e:c9:15:b5:
                    3c:ea:b3:aa:e8:71:27:44:3b:c5:7c:5e:bc:b1:f8:
                    9f:83:ae:e6:12:79:0f:83:f6:69:44:b6:98:3f:61:
                    db:17:ae:c4:65:08:8f:4e:9a:6c:2b:bb:50:0a:dc:
                    ee:39:b4:84:e2:6f:d3:71:83:ef:b9:e7:c4:a9:05:
                    90:9d:de:e1:40:f2:9d:44:aa:85:7c:cd:e8:b3:3d:
                    b8:71:de:a5:7c:86:ba:4b:c0:2d:d5:6d:ac:5e:0b:
                    fa:27:59:b6:3e:c8:e5:b4:f5:a5:24:cf:8d:82:0e:
                    5c:05:5b:fc:c8:1c:3c:d1:e0:c6:a8:b7:89:81:29:
                    49:2d:ec:1c:32:96:06:4d:5c:bc:b7:cc:bc:69:c0:
                    8b:48:d2:35:00:11:75:56:19:d5:a7:38:61:07:a7:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A6:C6:F4:3E:FD:20:E0:C9:29:1C:F4:F4:BD:52:A4:CB:C8:1D:81
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630313a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f01::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:90:53:8b:be:a2:b8:52:11:77:3c:1b:ca:4e:98:1d:bd:95:
         f9:71:33:55:8b:91:89:d9:8c:81:77:bf:a2:f5:56:9a:d3:69:
         92:e2:d8:2a:cf:be:e5:f6:a6:50:8a:f9:f2:7f:ff:78:ec:af:
         c5:b9:26:dd:1a:be:d3:28:5e:85:2d:16:27:d9:5a:d0:80:97:
         9a:93:af:ff:19:99:a7:5c:a4:4b:a2:d0:17:c5:24:c7:30:69:
         01:29:8b:6a:b6:f3:33:ce:14:0f:10:9c:c8:bf:db:f8:ba:4b:
         b6:08:fc:7c:9c:b2:f2:c7:89:86:c7:dd:47:f4:5f:85:d3:7c:
         9e:11:4c:d0:a0:9d:28:81:52:13:4f:e5:02:e4:43:23:14:f7:
         52:3e:51:8d:d4:94:2b:c3:3c:2c:00:62:0f:97:6a:b7:d6:d0:
         59:b2:b9:21:c3:9a:bf:59:51:5e:d3:55:bc:35:27:d9:0b:1f:
         43:32:6d:ce:bd:c6:92:2d:e2:7c:1d:9f:90:de:0b:8c:6e:cf:
         33:98:24:09:2b:0e:ab:26:c4:bc:3c:40:67:62:24:dc:57:32:
         aa:01:4d:b6:0d:65:d8:a6:88:bf:64:04:46:7e:b1:fd:cc:87:
         ec:b5:55:4a:68:63:5e:d3:93:09:33:af:45:cb:fe:6a:26:83:
         b5:c2:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----