Route Origin Authorization

$ rpki-client -vvf repodepot.wildtky.com/repo/WTAFarms-Jan2025/0/323630323a663863363a38303a3a2f34362d3436203d3e20333936313836.roa
File:                     323630323a663863363a38303a3a2f34362d3436203d3e20333936313836.roa (raw, json)
Hash identifier:          D+BXlpqkKdFrqrv7HUti8wlGnGtc3ucmiHK7vsBsvmE=
Subject key identifier:   B7:2F:E6:53:2D:BD:FB:40:F0:88:BA:96:01:4E:4C:C2:62:BE:D1:E3
Certificate issuer:       /CN=cfc9610f6368bb4940db9ca03ba819c4d02c8fc968a360508c
Certificate serial:       352B0495F66783FCA2AF60419692F45FCF2D28C3
Authority key identifier: 39:CD:3A:1C:B3:A8:23:42:3F:9C:D6:91:88:35:F3:56:9D:04:1D:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/18991ace-3e88-491f-b286-e1996e753c3d/cfc9610f6368bb4940db9ca03ba819c4d02c8fc968a360508c.cer
Subject info access:      rsync://repodepot.wildtky.com/repo/WTAFarms-Jan2025/0/323630323a663863363a38303a3a2f34362d3436203d3e20333936313836.roa
Signing time:             Mon 02 Jun 2025 16:28:17 +0000
ROA not before:           Mon 02 Jun 2025 16:23:17 +0000
ROA not after:            Mon 01 Jun 2026 16:28:17 +0000
asID:                     396186
IP address blocks:        2602:f8c6:80::/46 maxlen: 46
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2b:04:95:f6:67:83:fc:a2:af:60:41:96:92:f4:5f:cf:2d:28:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc9610f6368bb4940db9ca03ba819c4d02c8fc968a360508c
        Validity
            Not Before: Jun  2 16:23:17 2025 GMT
            Not After : Jun  1 16:28:17 2026 GMT
        Subject: CN=B72FE6532DBDFB40F088BA96014E4CC262BED1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:13:0c:84:80:8e:46:5e:85:90:62:c4:86:
                    82:d3:02:f6:7c:f7:d9:cc:8d:84:5b:0b:04:01:dd:
                    68:ae:71:57:60:17:4a:6d:93:4a:09:71:1a:b7:76:
                    56:8d:8c:e4:a9:93:f6:2e:19:fe:5d:50:47:a5:0e:
                    19:8d:3b:8c:08:d9:c9:15:aa:28:77:7b:33:5a:ef:
                    59:7f:10:6f:e9:4b:aa:5f:05:75:ce:3c:72:cb:2b:
                    67:2e:27:ec:6e:b1:57:4a:7c:eb:0b:39:79:b6:dc:
                    05:d4:1d:76:f9:b1:03:dd:26:d6:54:27:b1:c9:97:
                    a4:07:1b:d8:14:2c:27:83:42:02:6f:7f:fe:86:0a:
                    60:76:5c:7a:24:e3:ac:74:09:11:86:cd:3b:cb:ec:
                    73:6b:5c:be:89:95:03:de:ce:e9:df:e5:bc:b9:90:
                    63:74:26:18:27:f6:c4:0b:e5:6c:78:a6:98:08:0a:
                    d7:5e:8b:46:95:d0:49:b3:56:88:19:46:12:f5:18:
                    0c:8a:44:3d:c5:33:ff:96:aa:ea:bc:c5:06:af:72:
                    b0:01:fd:b9:5c:7c:9e:0c:6e:9e:95:b1:cb:bd:a9:
                    19:31:e9:81:b7:53:89:fd:ce:f8:47:72:e9:0b:04:
                    91:65:e0:57:37:0d:4e:ed:00:a8:2c:c8:b9:05:17:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2F:E6:53:2D:BD:FB:40:F0:88:BA:96:01:4E:4C:C2:62:BE:D1:E3
            X509v3 Authority Key Identifier:
                keyid:39:CD:3A:1C:B3:A8:23:42:3F:9C:D6:91:88:35:F3:56:9D:04:1D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repodepot.wildtky.com/repo/WTAFarms-Jan2025/0/39CD3A1CB3A823423F9CD6918835F3569D041DEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/18991ace-3e88-491f-b286-e1996e753c3d/cfc9610f6368bb4940db9ca03ba819c4d02c8fc968a360508c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repodepot.wildtky.com/repo/WTAFarms-Jan2025/0/323630323a663863363a38303a3a2f34362d3436203d3e20333936313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8c6:80::/46

    Signature Algorithm: sha256WithRSAEncryption
         6e:ad:69:16:b7:f6:5e:04:75:57:9b:a6:5b:18:9b:54:fb:6a:
         59:ce:30:d0:06:86:d3:98:70:d1:b8:48:89:e9:e8:6f:93:20:
         29:b8:1a:76:0d:ae:2d:37:b0:f3:76:58:f7:dd:1d:1f:17:7d:
         fb:1a:b2:5f:01:07:c8:13:fb:44:56:a5:11:3c:3e:ff:b7:28:
         f4:e0:9a:8f:d5:bf:95:49:4a:48:56:a7:40:6c:83:1c:fc:49:
         c4:56:e6:a4:ae:49:5c:57:21:c0:3f:40:29:8c:f4:81:22:c8:
         f4:71:c6:bc:8e:76:5d:a1:0c:5f:21:fd:a8:6b:48:21:1f:0c:
         17:5d:76:2b:a2:41:f9:87:f5:86:54:51:1c:d3:1d:1b:98:55:
         57:bd:6d:78:28:bf:0d:95:3a:2d:48:a8:a2:07:5e:98:bf:03:
         75:09:9d:eb:ef:49:0f:f6:cf:2e:f4:f1:69:0b:47:cc:11:72:
         84:ff:be:de:f7:97:9b:f6:df:b3:da:69:9b:d5:a6:35:92:65:
         ac:0a:46:10:55:87:e7:a5:f4:a3:b8:4a:77:d7:94:99:60:0a:
         e1:bd:34:19:b8:b2:2b:e3:8d:3e:fb:ad:5c:d9:47:2a:11:4c:
         67:f7:60:c6:d1:94:45:36:07:36:e3:7b:66:c8:3a:d3:69:b0:
         7b:73:9b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----