Route Origin Authorization

$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630353a3a2f34382d3438203d3e20313939353138.roa
File:                     323630323a666161353a6630353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          SvNoIx6A4Tb1/llflBxenfntSFAJGNuPP0JmwRgFgd0=
Subject key identifier:   8D:E1:41:28:CE:C2:1F:8A:A4:48:5E:AE:72:97:A8:68:A5:85:BF:F7
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       2EF8882E21AC1262D487ED966CB2023B3F36B142
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630353a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Mon 17 Aug 2026 22:48:09 +0000
ROA not before:           Mon 17 Aug 2026 22:43:09 +0000
ROA not after:            Mon 16 Aug 2027 22:48:09 +0000
asID:                     199518
IP address blocks:        2602:faa5:f05::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f8:88:2e:21:ac:12:62:d4:87:ed:96:6c:b2:02:3b:3f:36:b1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Aug 17 22:43:09 2026 GMT
            Not After : Aug 16 22:48:09 2027 GMT
        Subject: CN=8DE14128CEC21F8AA4485EAE7297A868A585BFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:5c:5c:b9:67:c0:5e:21:36:43:ec:e2:03:
                    73:6d:4e:df:02:fc:34:7a:79:ec:45:95:d4:14:1c:
                    f6:c6:99:6b:ed:89:f2:a4:82:f6:fd:ee:b4:d8:03:
                    15:36:14:cd:28:90:d3:14:4c:63:c8:5e:93:be:69:
                    1a:49:1d:ed:2a:bb:56:56:0e:cc:d0:f7:b5:3f:da:
                    e7:0c:30:6d:bc:38:f8:65:29:4e:4e:50:9a:2d:f8:
                    91:e7:3a:15:4e:86:29:49:26:76:6f:3e:9d:96:ca:
                    27:3c:eb:57:58:97:f8:ee:4b:5f:14:ef:c5:05:51:
                    5e:59:c1:fa:3b:0f:d6:d3:a0:79:42:b0:56:32:14:
                    94:8e:b8:63:7e:2e:0d:80:aa:f3:13:a6:af:ee:f8:
                    16:bd:f8:4d:6f:1a:6e:a2:c1:8f:46:3e:e3:28:e4:
                    10:27:f2:41:b0:2d:23:e1:a7:7b:0d:2e:c8:9d:cb:
                    c9:21:36:d1:a8:7f:a1:87:e5:b9:18:35:50:79:1b:
                    02:a7:0a:8a:51:26:6f:33:70:6b:28:3f:72:f4:69:
                    02:ea:7b:d9:7e:9c:f3:3e:b6:ef:43:08:65:29:88:
                    c8:64:08:be:58:9a:14:92:9f:23:5d:92:f9:36:95:
                    5a:c7:f8:fe:a1:93:52:fc:5d:40:16:6b:3e:f5:1c:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E1:41:28:CE:C2:1F:8A:A4:48:5E:AE:72:97:A8:68:A5:85:BF:F7
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630353a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f05::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:06:ea:9b:09:30:43:a2:a9:ca:4b:5b:33:55:97:ee:ed:27:
         7c:47:a4:55:d1:5b:4b:3f:1e:c3:ec:f5:c1:a6:53:a0:32:e5:
         19:7a:16:e2:1e:c2:7a:ea:a1:23:4a:7a:29:58:4f:d5:af:8f:
         2d:82:45:0d:5a:b1:18:b6:9b:cc:da:9e:b7:81:78:d3:fd:d0:
         b3:86:b4:4e:21:88:1a:84:15:cd:cb:bf:01:11:48:b8:2c:b4:
         3e:cf:9a:f1:16:8f:af:6e:88:20:00:14:4e:ed:ab:dc:00:8d:
         72:40:43:1f:7c:72:5c:b0:33:d7:fd:b7:58:08:fc:b5:ce:4c:
         a7:11:15:36:28:7d:21:aa:f2:67:a8:5f:32:c8:a4:79:f0:fb:
         f1:a1:ac:dc:36:2d:f9:c4:55:29:86:17:d0:f6:9c:de:37:74:
         34:6b:4d:91:ed:4f:2b:60:19:96:fd:c0:62:98:a7:01:c4:68:
         02:9b:c0:f6:3f:2a:82:fe:70:32:e6:f5:79:47:96:d1:df:c5:
         f3:64:2d:d1:e3:5d:cd:c9:47:65:42:76:72:d5:65:9c:d8:a2:
         78:33:c9:75:7d:58:45:71:22:06:4b:bd:77:43:1b:80:77:5f:
         d2:e3:5c:e0:4e:5e:38:15:97:fe:63:b8:1c:21:87:a0:84:73:
         45:01:54:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----