Route Origin Authorization

$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa
File:                     323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          fHIdEjIdTaZg4Q1QRWOh1/yU0dFPPvEb1b8Bvqjfb+Y=
Subject key identifier:   62:D7:62:74:D2:90:FF:E8:2A:10:85:70:5B:28:47:AC:E2:76:AC:40
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       2071FC922F051D3F179AE7A42E048846BDD76A2D
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Mon 17 Aug 2026 22:48:09 +0000
ROA not before:           Mon 17 Aug 2026 22:43:09 +0000
ROA not after:            Mon 16 Aug 2027 22:48:09 +0000
asID:                     199518
IP address blocks:        2602:faa5:f04::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:71:fc:92:2f:05:1d:3f:17:9a:e7:a4:2e:04:88:46:bd:d7:6a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Aug 17 22:43:09 2026 GMT
            Not After : Aug 16 22:48:09 2027 GMT
        Subject: CN=62D76274D290FFE82A1085705B2847ACE276AC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b8:e6:8b:0a:d5:b6:fc:ca:8f:27:80:e3:26:
                    14:cb:20:a7:cf:5e:30:53:9c:56:ba:9d:b6:da:8b:
                    88:06:ec:ea:5d:0c:42:d6:6c:3f:05:7f:b5:32:92:
                    d3:f8:97:37:f6:6c:30:b9:b9:ce:69:4a:ba:ea:bf:
                    7e:1f:09:f7:68:c0:a7:56:a9:fc:59:bf:ee:aa:3f:
                    05:f4:c3:69:24:87:44:83:5b:e4:66:32:b7:1c:6f:
                    a0:1b:67:55:51:76:20:ae:ab:9b:10:7f:e8:ff:8f:
                    e1:00:cf:19:84:04:66:b6:96:a7:96:f0:3c:fe:84:
                    fe:2c:1c:c2:58:95:30:24:95:f0:d0:a5:2d:f7:e7:
                    14:f3:a9:98:b6:67:eb:75:3a:47:e4:08:be:4d:4c:
                    32:78:1f:23:8b:da:c9:8e:9c:b4:a9:95:e2:67:71:
                    ed:42:9f:0c:28:0b:2f:8b:3e:f3:be:8d:0f:a1:b6:
                    c7:6c:25:d7:f4:34:ab:1c:55:09:9b:ca:d9:5c:ad:
                    56:f5:12:0d:36:eb:5a:2c:ed:dc:a0:61:a2:db:43:
                    15:02:fd:33:81:d6:af:b9:df:f4:44:68:56:0d:57:
                    3b:b3:53:03:8b:35:ed:91:cf:c9:de:cc:1b:2f:42:
                    89:03:59:66:ab:83:b5:3f:85:da:d5:f5:b4:c3:d9:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D7:62:74:D2:90:FF:E8:2A:10:85:70:5B:28:47:AC:E2:76:AC:40
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f04::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:1e:77:16:e6:0a:f7:52:36:2d:04:33:39:3b:de:3b:a5:65:
         94:e8:5d:b5:a9:f0:ff:75:ad:6d:2a:4c:9c:84:bf:0d:55:13:
         89:20:13:c4:eb:7c:a0:64:0b:b5:9a:c8:8e:60:c8:97:ce:96:
         91:17:bd:60:1c:fe:46:95:30:7a:7b:63:ab:99:c4:ec:e4:29:
         9d:e6:fb:0a:b9:4c:95:6e:f7:d0:b7:41:ad:19:df:6c:39:0d:
         ed:88:c6:7e:0c:bf:e3:1e:49:20:b8:06:96:38:f6:5a:24:be:
         2c:86:db:9c:b4:bf:cb:3e:19:ec:4a:0a:ea:91:f2:b7:f3:14:
         ba:12:d8:b7:9a:1a:0b:a5:eb:16:26:72:b6:79:bd:53:80:89:
         8a:4d:42:3e:5e:37:24:9f:a9:02:ec:a1:43:69:77:c4:e1:2b:
         dc:98:f6:96:24:80:4d:b4:cc:fa:eb:2c:8f:c5:fb:6c:54:a1:
         c4:b7:3f:6b:5a:43:3b:4d:da:13:65:01:7e:94:30:e9:d2:9d:
         50:97:7a:fb:68:6e:24:38:a4:56:15:33:b6:2e:27:54:40:d8:
         01:81:cf:5c:36:37:a6:04:f5:21:8f:fd:9c:8e:fa:16:88:72:
         5a:ba:3f:6d:be:30:93:41:4f:86:18:53:4d:7d:db:c0:83:d5:
         5e:35:d0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----