Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31313a3a2f34382d3438203d3e203532303235.roa
File:                     323630323a666137653a31313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          JxTTA0l7FxHSriD/f3Ao7iuB5QTCvNSLAqTf81Oi4j8=
Subject key identifier:   D2:CA:1B:C9:54:DE:30:4A:07:2E:D6:FB:9F:67:B2:7A:1D:23:3B:D6
Certificate issuer:       /CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
Certificate serial:       505DEE6E4BE94B2F8D75914DB8B8405C31847BA3
Authority key identifier: 26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sat 04 Oct 2025 02:26:23 +0000
ROA not before:           Sat 04 Oct 2025 02:21:23 +0000
ROA not after:            Sat 03 Oct 2026 02:26:23 +0000
asID:                     52025
IP address blocks:        2602:fa7e:11::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5d:ee:6e:4b:e9:4b:2f:8d:75:91:4d:b8:b8:40:5c:31:84:7b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08
        Validity
            Not Before: Oct  4 02:21:23 2025 GMT
            Not After : Oct  3 02:26:23 2026 GMT
        Subject: CN=D2CA1BC954DE304A072ED6FB9F67B27A1D233BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2a:c7:c9:56:ef:6c:93:40:0e:8e:22:e4:59:
                    5c:1a:81:d2:31:ff:94:a3:b3:fb:5d:09:9a:93:c5:
                    bd:10:a8:35:f5:59:29:d8:17:57:58:63:a9:6d:5f:
                    2d:f3:a6:86:08:e5:66:96:cd:8f:a2:d2:c6:52:56:
                    0e:51:ab:ef:a8:96:6e:13:37:49:d0:23:12:81:30:
                    05:aa:8d:9d:83:36:f3:2a:26:2c:15:bf:25:a6:19:
                    a7:c5:ca:59:78:7c:aa:51:0a:5a:6d:d5:b9:ec:6d:
                    c2:36:2f:82:95:d1:1e:76:17:b6:b6:9a:28:ac:e5:
                    78:42:58:e5:98:2f:22:95:10:6b:2c:03:dd:06:e9:
                    0b:65:63:e9:65:71:2c:06:f3:fb:ff:13:3b:a5:a8:
                    99:cd:3f:ed:fb:f0:a8:e5:a5:71:3b:8c:5e:a5:b8:
                    d9:9e:b1:77:d5:8d:08:85:95:2e:63:2d:de:fc:85:
                    29:d2:18:fe:c8:01:2a:b7:f9:8a:63:01:7e:43:bf:
                    c4:d2:ac:97:a4:2c:32:0c:a5:76:86:a3:1c:f1:dc:
                    44:a2:87:26:4e:c1:41:e2:e1:3d:c4:dc:1c:6a:c8:
                    d5:20:8b:7f:cc:28:3f:fa:16:e1:8c:77:87:be:aa:
                    d0:b2:58:41:37:03:0e:98:4a:9b:26:e4:af:bb:6a:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CA:1B:C9:54:DE:30:4A:07:2E:D6:FB:9F:67:B2:7A:1D:23:3B:D6
            X509v3 Authority Key Identifier:
                keyid:26:29:24:3C:9E:8D:A7:B1:4D:0A:BD:25:66:0A:74:AC:40:81:C8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/2629243C9E8DA7B14D0ABD25660A74AC4081C88B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c88f518-5118-4680-a0ba-d2cc67b27b07/edff5ee9c6c74e18ab3cd3244d38ecf6acc07c9835684cca08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/4/323630323a666137653a31313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa7e:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:1f:48:1f:fb:4a:c5:2b:5a:52:91:98:ba:24:5a:9a:89:b2:
         b6:dd:c3:f6:1d:d6:b4:c6:f3:6e:22:5f:b4:23:d7:c8:24:a4:
         90:bb:94:2e:b4:bc:67:96:c4:36:14:c9:30:dc:05:3e:c4:2f:
         13:77:29:37:22:71:c5:67:a2:4b:24:cb:8e:30:0d:08:57:42:
         c8:85:95:48:61:e5:b9:59:d5:91:ed:99:d2:27:4d:01:0c:ca:
         d8:f3:94:a5:c7:4a:2f:ef:37:1a:45:98:2b:56:3e:bf:64:cb:
         92:64:7a:de:39:b7:de:68:d0:d6:b2:27:92:3c:5d:48:21:ac:
         bc:b9:5a:e4:f8:4c:d2:c1:a5:54:b9:3c:56:1c:48:c1:ca:4a:
         d0:6f:f5:4e:07:53:30:26:93:53:eb:7b:29:61:e8:70:b0:b6:
         4c:e7:b7:8c:c1:17:65:3e:28:d6:13:f0:65:19:65:c6:58:3a:
         dc:5c:d0:e0:68:5e:73:f6:35:ed:f1:7b:17:13:cf:04:b6:c8:
         2d:9a:9a:bd:28:b5:37:25:e4:4b:f4:4f:33:d9:ec:b3:5e:91:
         d3:54:14:94:7f:67:a5:88:8e:b3:d1:39:08:e4:fb:7c:05:4f:
         55:6d:a8:1f:df:4a:ff:1e:5d:7d:f9:17:0b:7b:d1:ab:4b:d5:
         1d:66:f1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 10:46:50 2025 by rpki-client