Route Origin Authorization

$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630633a3a2f34382d3438203d3e20323135313533.roa
File:                     323630323a666161353a6630633a3a2f34382d3438203d3e20323135313533.roa (raw, json)
Hash identifier:          3Sc99zENDMojh4lLkLMYxU9Wa5c5OLg6lSLxsQfYETk=
Subject key identifier:   B5:E0:E8:4F:D4:31:BA:0A:E4:E2:DE:7E:C6:D1:F5:43:DB:0E:F2:59
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       4E971EBD769E3B6A48ED12DC981488F77DB8FE72
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630633a3a2f34382d3438203d3e20323135313533.roa
Signing time:             Mon 17 Aug 2026 22:48:09 +0000
ROA not before:           Mon 17 Aug 2026 22:43:09 +0000
ROA not after:            Mon 16 Aug 2027 22:48:09 +0000
asID:                     215153
IP address blocks:        2602:faa5:f0c::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:97:1e:bd:76:9e:3b:6a:48:ed:12:dc:98:14:88:f7:7d:b8:fe:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Aug 17 22:43:09 2026 GMT
            Not After : Aug 16 22:48:09 2027 GMT
        Subject: CN=B5E0E84FD431BA0AE4E2DE7EC6D1F543DB0EF259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:0c:76:3a:5d:8b:0d:1b:5a:b4:f0:bd:51:
                    f1:7b:c2:74:3e:87:3c:50:ea:49:fa:90:d1:6d:f6:
                    75:6d:96:99:15:6d:a2:e3:e3:67:52:c1:b5:a5:ab:
                    68:10:9b:3f:93:d2:b3:0a:f9:07:88:a2:13:fb:23:
                    e0:18:da:c4:88:3b:88:ea:59:3c:34:76:19:20:9e:
                    cc:6c:e8:da:49:e4:a4:d0:71:f6:e3:a7:64:0e:65:
                    54:59:60:8e:ce:f3:0a:4c:8b:aa:be:fa:ce:cb:2a:
                    a1:56:70:5b:b1:44:23:86:e1:d5:d8:59:b9:c7:cd:
                    f3:0e:e7:41:26:1a:ed:ef:8d:b2:d7:99:cd:81:af:
                    c8:37:8b:b0:67:9e:8d:fe:28:c6:0c:ca:ed:e0:3e:
                    a9:2a:e2:8e:66:0b:30:d6:0a:20:30:1f:c0:74:62:
                    43:d6:e2:42:ac:8e:b6:e1:df:42:5c:68:a3:77:b9:
                    8c:a5:cf:29:1c:e0:b2:f6:c6:dc:df:c4:63:b9:36:
                    d3:e0:01:4b:c9:33:fb:e7:97:96:4f:f6:23:06:e2:
                    7d:7d:fd:8e:47:74:91:00:90:60:80:cd:14:a9:33:
                    53:4f:06:59:af:8e:00:12:4c:95:9e:58:59:47:a0:
                    92:fb:ae:d5:74:cb:cf:e6:a9:03:a5:f8:eb:99:ef:
                    1c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E0:E8:4F:D4:31:BA:0A:E4:E2:DE:7E:C6:D1:F5:43:DB:0E:F2:59
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630633a3a2f34382d3438203d3e20323135313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:68:c3:31:70:10:28:cc:8f:ae:f1:da:d2:5c:23:90:40:f5:
         52:33:03:f7:ba:48:51:9e:ff:93:67:98:ee:a8:74:4f:31:3f:
         78:ac:5d:f4:77:1b:9a:92:29:8b:b7:cb:e0:c5:3b:3a:f4:3f:
         01:50:a9:2b:8d:d4:21:6a:29:24:38:79:22:61:88:4d:0d:98:
         5e:f8:41:34:58:74:52:3d:39:16:2e:ca:0d:f9:e0:12:54:83:
         a9:11:9f:40:c6:43:a6:8f:dd:85:5d:ed:a9:a6:a7:79:6d:54:
         45:d4:cd:a9:cf:3c:e3:71:e5:58:d3:c5:8b:c2:94:0c:d7:cd:
         44:9e:4c:cd:1c:1e:5d:3d:ef:6e:36:5b:90:4c:a6:31:74:e1:
         40:bf:7a:86:8f:23:d2:5d:b4:6e:b2:53:19:19:61:e4:d3:f7:
         17:c8:5b:ff:8e:ea:01:e9:ea:f4:05:20:b1:02:5e:e6:ee:7b:
         89:00:f4:25:4e:3a:07:65:b9:b1:1e:e2:e1:c4:8a:32:56:89:
         25:85:79:18:e1:6c:10:9e:5f:6b:17:51:b9:61:0b:7c:68:12:
         16:dc:23:60:71:66:88:45:35:2f:43:45:dd:5a:3f:5a:de:14:
         fe:ed:f7:1c:76:65:92:df:38:80:45:83:98:c1:0c:16:5a:aa:
         85:eb:c3:37
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUTpcevXaeO2pI7RLcmBSI9324/nIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDEyODZkNTQxMWI1M2Y4OTNhNGE1NjlkZjlkNmQ5MzNk
MjlhNjUzYWJkYjgxMDg2NDMwHhcNMjYwODE3MjI0MzA5WhcNMjcwODE2MjI0ODA5
WjAzMTEwLwYDVQQDEyhCNUUwRTg0RkQ0MzFCQTBBRTRFMkRFN0VDNkQxRjU0M0RC
MEVGMjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKwMdjpdiw0b
WrTwvVHxe8J0Poc8UOpJ+pDRbfZ1bZaZFW2i4+NnUsG1patoEJs/k9KzCvkHiKIT
+yPgGNrEiDuI6lk8NHYZIJ7MbOjaSeSk0HH246dkDmVUWWCOzvMKTIuqvvrOyyqh
VnBbsUQjhuHV2Fm5x83zDudBJhrt742y15nNga/IN4uwZ56N/ijGDMrt4D6pKuKO
Zgsw1gogMB/AdGJD1uJCrI624d9CXGijd7mMpc8pHOCy9sbc38RjuTbT4AFLyTP7
55eWT/YjBuJ9ff2OR3SRAJBggM0UqTNTTwZZr44AEkyVnlhZR6CS+67VdMvP5qkD
pfjrme8cWwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFLXg6E/UMboK5OLefsbR9UPb
DvJZMB8GA1UdIwQYMBaAFKFWTM4unHMk0xj8tKCKALsJ87RpMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kubGVpdGVjYXN0cm8u
Y29tL3JlcG8vQ0FTVFJPLUlOVEVSTkVULzEvQTE1NjRDQ0UyRTlDNzMyNEQzMThG
Q0I0QTA4QTAwQkIwOUYzQjQ2OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFi
N2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI2Y2U0MDhkLTU1ODEt
NDgzZC05MGIzLTUxMTlmYzgzMDA2NC8wMTI4NmQ1NDExYjUzZjg5M2E0YTU2OWRm
OWQ2ZDkzM2QyOWE2NTNhYmRiODEwODY0My5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmxlaXRlY2FzdHJvLmNvbS9yZXBv
L0NBU1RSTy1JTlRFUk5FVC8xLzMyMzYzMDMyM2E2NjYxNjEzNTNhNjYzMDYzM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM1MzEzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6
pQ8MMA0GCSqGSIb3DQEBCwUAA4IBAQBkaMMxcBAozI+u8drSXCOQQPVSMwP3ukhR
nv+TZ5juqHRPMT94rF30dxuakimLt8vgxTs69D8BUKkrjdQhaikkOHkiYYhNDZhe
+EE0WHRSPTkWLsoN+eASVIOpEZ9AxkOmj92FXe2ppqd5bVRF1M2pzzzjceVY08WL
wpQM181EnkzNHB5dPe9uNluQTKYxdOFAv3qGjyPSXbRuslMZGWHk0/cXyFv/juoB
6er0BSCxAl7m7nuJAPQlTjoHZbmxHuLhxIoyVoklhXkY4WwQnl9rF1G5YQt8aBIW
3CNgcWaIRTUvQ0XdWj9a3hT+7fccdmWS3ziARYOYwQwWWqqF68M3
-----END CERTIFICATE-----