Route Origin Authorization

$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6631313a3a2f34382d3438203d3e20323134343739.roa
File:                     323630323a666161353a6631313a3a2f34382d3438203d3e20323134343739.roa (raw, json)
Hash identifier:          5wbuMSGl2Nmrj8rV/+JY0cGxIQljDVI1yc2jwHaS18s=
Subject key identifier:   F1:C1:DF:70:F6:CB:B8:30:25:6F:DC:B6:10:81:76:D2:30:D1:25:31
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       4941436CB5D6E83D36D130CC99CA5334DB8A1E6A
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6631313a3a2f34382d3438203d3e20323134343739.roa
Signing time:             Mon 17 Aug 2026 22:48:10 +0000
ROA not before:           Mon 17 Aug 2026 22:43:10 +0000
ROA not after:            Mon 16 Aug 2027 22:48:10 +0000
asID:                     214479
IP address blocks:        2602:faa5:f11::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:41:43:6c:b5:d6:e8:3d:36:d1:30:cc:99:ca:53:34:db:8a:1e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Aug 17 22:43:10 2026 GMT
            Not After : Aug 16 22:48:10 2027 GMT
        Subject: CN=F1C1DF70F6CBB830256FDCB6108176D230D12531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:26:15:55:8e:35:0f:8f:0d:e6:35:87:96:
                    3d:d7:8e:5e:bb:41:b0:44:6a:46:66:c7:48:3d:ef:
                    a3:f2:b2:45:ee:1e:06:6e:7c:72:f5:8d:60:fe:41:
                    1a:2e:40:19:d8:32:08:8a:95:e6:82:f5:c4:41:67:
                    fe:ee:f0:92:c3:72:5c:9b:70:71:78:14:dd:bc:11:
                    c8:b6:1a:6c:58:01:4d:b4:9d:8f:7b:f7:95:4e:0a:
                    f5:8b:ba:a0:1f:e5:50:26:1f:d0:70:e1:b1:38:90:
                    b7:98:65:f9:bd:5a:85:e2:86:db:fa:c9:13:de:fb:
                    b3:56:f7:56:4c:81:59:1f:8f:a7:45:9b:e0:74:db:
                    e8:31:8a:ab:99:c2:7a:99:a9:1a:ce:af:14:e8:5b:
                    1c:33:f6:27:21:08:e7:c9:ff:89:9b:40:b3:29:34:
                    d1:67:39:88:fd:c5:00:95:17:6b:c8:bc:4b:86:84:
                    1e:09:ed:75:24:dd:92:13:3d:a5:7e:34:9d:dc:0c:
                    67:eb:a9:88:b8:3a:53:de:d3:75:90:6e:8a:dd:5f:
                    c2:c6:ba:e6:9b:e8:88:81:1d:81:f6:62:01:dd:08:
                    53:1a:c3:8d:12:e8:15:62:6a:76:12:8a:f4:3f:17:
                    e0:76:30:7b:34:33:57:2a:09:f2:77:92:98:10:b5:
                    cb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C1:DF:70:F6:CB:B8:30:25:6F:DC:B6:10:81:76:D2:30:D1:25:31
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6631313a3a2f34382d3438203d3e20323134343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f11::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:9f:b5:ef:6f:a1:31:b9:a1:ed:60:0d:e1:80:ba:69:c9:51:
         48:78:1b:6d:f7:16:e4:01:5f:fe:98:e2:31:c4:d3:5f:a6:70:
         2e:11:3f:94:3c:b9:e9:41:19:00:10:84:ea:ab:c5:ad:87:59:
         9d:eb:4a:d6:c1:29:26:24:4e:3c:d9:43:b9:f0:e8:e5:82:1e:
         6d:42:2c:62:31:d9:93:3c:40:ad:1f:0d:de:b8:ce:8b:af:c8:
         d7:d9:81:36:a2:b3:d2:92:b2:46:16:94:19:db:5b:39:8b:65:
         e6:5b:55:2d:63:7b:50:0f:e9:5b:00:ad:49:02:60:a6:4f:16:
         5a:4b:48:c6:33:6d:30:44:7b:0b:5a:ea:2a:d4:12:5d:d7:8a:
         2e:9b:a5:50:b3:7f:70:ae:fb:81:4b:16:e9:19:4f:57:ae:2a:
         69:c3:cf:5a:88:2d:cd:a8:97:ab:68:f9:85:61:6c:c0:35:b3:
         41:03:b4:0d:83:16:5e:14:de:91:fa:d4:c1:a2:a8:d7:22:4d:
         cf:df:47:e5:15:37:57:5b:6d:0e:75:50:0c:85:0c:94:5d:cb:
         c4:c0:25:d9:74:13:be:c2:d5:9a:e4:18:5c:52:b6:5d:51:c4:
         f5:ce:fa:f4:a0:8b:64:38:27:79:66:d8:26:ec:b6:16:53:e7:
         15:f5:3d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----