Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31303a3a2f34382d3438203d3e203532303235.roa
File:                     323630323a666137653a31303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          PpAUd/4Bh0nTs/zGyg4SHrD8ohsjODWTuk+ittVf+4A=
Subject key identifier:   EC:48:3D:33:F5:06:73:36:3C:3D:DA:42:95:56:5B:8B:7C:E3:27:3D
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       552C26688F1B010EC87EA6BFDD603654A3DD083C
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31303a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sun 28 Sep 2025 20:26:21 +0000
ROA not before:           Sun 28 Sep 2025 20:21:21 +0000
ROA not after:            Sun 27 Sep 2026 20:26:21 +0000
asID:                     52025
IP address blocks:        2602:fa7e:10::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2c:26:68:8f:1b:01:0e:c8:7e:a6:bf:dd:60:36:54:a3:dd:08:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Sep 28 20:21:21 2025 GMT
            Not After : Sep 27 20:26:21 2026 GMT
        Subject: CN=EC483D33F50673363C3DDA4295565B8B7CE3273D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:c8:ed:77:1f:a4:b0:5b:68:c3:52:9f:93:
                    33:bc:3b:8b:15:9d:c9:04:b1:82:8a:f4:92:74:3c:
                    11:e5:c1:ec:5f:4c:84:2c:28:5e:70:30:f5:d8:0a:
                    fe:8f:a5:b5:0e:43:67:5e:de:d6:18:2f:e3:9a:d4:
                    cc:78:39:98:cb:ca:3e:65:ec:53:d0:e1:f6:e1:a4:
                    f0:d6:46:6e:72:93:84:5d:ea:ec:da:8f:95:cf:e3:
                    f7:06:f4:0f:96:f5:48:e9:69:38:f0:62:2b:51:6b:
                    de:30:42:88:1a:37:53:32:24:e0:3d:b3:5e:23:53:
                    ee:fa:ff:ee:3b:c0:18:a2:fa:37:1e:83:46:19:84:
                    2d:cf:17:56:15:e3:97:8d:14:04:06:b2:62:54:2f:
                    a4:0e:ec:6c:ef:05:8a:93:21:df:44:26:62:45:7c:
                    16:73:39:fa:e2:1d:8f:3a:c0:2f:a1:a1:06:06:e7:
                    3e:8f:fe:e3:f4:32:16:c5:07:35:44:79:e4:45:d6:
                    d5:8e:64:1c:d0:26:57:35:38:8a:2c:26:32:54:d1:
                    d2:32:47:53:79:5b:2b:50:0b:38:50:05:23:8f:ea:
                    29:8d:d6:bb:f7:8f:85:6b:a7:37:d1:ac:e4:ef:28:
                    8c:cf:07:95:b3:61:51:70:10:7e:a6:f3:a1:09:f7:
                    4f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:48:3D:33:F5:06:73:36:3C:3D:DA:42:95:56:5B:8B:7C:E3:27:3D
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31303a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:bf:85:16:a9:fe:82:24:98:60:5a:53:d9:fe:12:1a:d4:d2:
         b0:14:67:18:81:c2:04:cb:f7:75:e0:14:cc:d1:14:54:89:62:
         2d:b3:91:37:5f:07:e2:23:39:96:7a:bd:03:8a:bf:73:35:7d:
         74:ad:68:57:8a:a7:1f:fb:20:8d:06:f2:79:d6:80:8d:e0:a6:
         61:30:70:8e:c7:03:09:0a:f2:3c:ee:fb:9b:d7:8f:53:d7:2b:
         21:f5:81:d8:c9:eb:e4:eb:15:1f:15:6a:d8:92:c6:7d:0c:04:
         7f:bb:f5:15:97:49:9b:63:98:a4:95:67:0a:f9:29:d2:d0:b9:
         77:25:19:ba:00:03:bb:c9:45:62:78:17:02:ed:33:e6:94:57:
         60:e5:73:a2:08:bc:04:a8:bc:f4:2e:e7:f8:73:09:93:20:fb:
         41:ce:ef:ac:f4:cb:cb:ac:f5:1e:39:08:dc:92:8b:02:bc:f9:
         8d:01:3b:d2:e8:af:d2:a7:79:c6:56:28:ff:a2:04:91:21:3d:
         8c:e8:05:70:c6:a8:b5:a3:62:12:d9:99:06:b3:65:49:73:62:
         db:ba:8a:fc:3f:f2:07:21:10:99:2f:f2:86:0a:f8:18:4f:e1:
         92:c8:ab:29:b2:6a:c9:ab:5c:3f:f4:da:5b:1a:91:50:94:cd:
         33:72:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----