Route Origin Authorization

$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa
File:                     326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa (raw, json)
Hash identifier:          cZs+7mqWYVEZ9ra2hDwyBP0f5EQYySDokYBR3RB7WbU=
Subject key identifier:   09:D1:5B:43:A2:A7:0A:65:DA:51:CF:B0:32:5C:02:44:C6:B9:99:C3
Certificate issuer:       /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
Certificate serial:       7C1DD9F12C17453A3246E299693B84C8E3E1B98D
Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
Subject info access:      rsync://rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa
Signing time:             Tue 23 Sep 2025 03:29:00 +0000
ROA not before:           Tue 23 Sep 2025 03:24:00 +0000
ROA not after:            Tue 22 Sep 2026 03:29:00 +0000
asID:                     202673
IP address blocks:        2a14:7583:f800::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1d:d9:f1:2c:17:45:3a:32:46:e2:99:69:3b:84:c8:e3:e1:b9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
        Validity
            Not Before: Sep 23 03:24:00 2025 GMT
            Not After : Sep 22 03:29:00 2026 GMT
        Subject: CN=09D15B43A2A70A65DA51CFB0325C0244C6B999C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a7:39:e5:d2:67:b5:20:e0:68:58:4a:85:14:
                    b8:a9:76:24:6d:7c:e3:04:fb:7c:fe:78:99:15:13:
                    6f:2a:5a:0f:e3:35:9e:16:65:87:b9:bb:dd:af:43:
                    9d:ea:7a:52:1d:9d:c7:2b:aa:ac:7f:e5:34:10:7f:
                    d9:b4:85:b6:5b:33:b1:7a:72:c6:4a:79:45:7d:5d:
                    39:18:1b:9a:a3:e6:62:04:32:18:8d:4e:d8:9f:61:
                    80:64:6d:60:db:30:6b:7e:cc:ba:01:d5:be:ef:96:
                    a8:8b:1c:13:9e:4c:18:68:c1:b4:a1:f4:14:52:07:
                    fa:7e:1c:43:59:38:3b:14:de:1e:54:73:c7:6f:9d:
                    9f:8a:1a:ad:46:b3:11:eb:4b:bd:2f:78:c3:c1:c5:
                    d9:17:f9:f1:d9:dd:53:01:34:1b:2b:0e:50:bb:33:
                    61:47:e4:c3:e0:c9:b8:84:ac:21:b9:07:7f:e0:84:
                    43:49:0b:13:c9:fc:5a:38:a3:96:dd:20:76:5b:75:
                    e7:de:0d:5a:99:3e:3a:55:6b:49:a4:3b:4e:fd:ff:
                    d9:57:52:75:74:f7:56:bb:47:d8:d4:29:04:55:5c:
                    87:ef:37:35:6b:3b:dd:2f:f5:1f:d1:74:ef:c6:53:
                    90:98:d2:97:ed:07:35:4d:fc:9a:19:49:18:21:c6:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D1:5B:43:A2:A7:0A:65:DA:51:CF:B0:32:5C:02:44:C6:B9:99:C3
            X509v3 Authority Key Identifier:
                keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f800::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:13:21:ae:31:f8:5c:42:e7:a0:57:d1:f2:e4:96:0e:99:
         70:29:87:7d:8c:51:70:7c:6c:a4:3b:a0:ee:0e:91:ef:5e:32:
         66:4b:60:3f:da:ca:2c:ca:5c:21:fd:0b:8b:1a:c5:06:8b:94:
         54:75:9d:20:77:b0:55:c0:a8:9d:c1:7a:11:7c:0c:19:9c:b3:
         0c:e1:2b:0b:4f:e5:84:6a:0f:a7:87:0a:ba:5c:4d:b5:5f:ca:
         c7:26:7d:65:38:dc:22:79:5a:4d:9c:58:ee:74:9c:40:8e:e4:
         3d:45:0d:8f:bb:9a:e5:91:25:e1:22:03:91:2a:8b:6f:97:7e:
         a9:5d:b8:ca:19:50:10:8e:c8:60:f0:53:e5:8f:27:87:a4:99:
         b1:a8:23:34:c0:06:62:66:55:88:f6:ca:54:4d:49:ce:e0:7d:
         43:6a:c8:f9:02:1c:be:2f:fa:e1:27:42:dc:1e:a1:e4:d2:f7:
         92:d1:2e:03:f9:7d:f8:18:bc:68:ff:4a:36:b9:6c:aa:88:22:
         1d:5f:be:55:27:72:e9:82:aa:74:b5:d0:4e:55:00:b6:82:3e:
         0c:e6:bc:a4:1b:cc:1c:d0:06:b0:40:29:be:9e:a9:da:5e:74:
         60:71:d2:62:5d:2d:25:51:92:53:13:ab:7c:1c:be:1d:2e:81:
         24:83:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----