Route Origin Authorization
$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a3a2f33372d3337203d3e20323030343534.roa
File: 323630323a666161353a3a2f33372d3337203d3e20323030343534.roa (raw, json)
Hash identifier: 7Ldzx60obAAdlR2KrL0+ag9/K6eXJSyDhfONc7pvjAQ=
Subject key identifier: 8D:C8:6C:93:CD:73:E6:3A:E1:97:D9:C8:AB:3A:D6:80:65:CD:2D:4B
Certificate issuer: /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial: 79B5613DAA5E7B24A0098EF1079D482CCC797E7C
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a3a2f33372d3337203d3e20323030343534.roa
Signing time: Mon 17 Aug 2026 22:48:10 +0000
ROA not before: Mon 17 Aug 2026 22:43:10 +0000
ROA not after: Mon 16 Aug 2027 22:48:10 +0000
asID: 200454
IP address blocks: 2602:faa5::/37 maxlen: 37
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b5:61:3d:aa:5e:7b:24:a0:09:8e:f1:07:9d:48:2c:cc:79:7e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Validity
Not Before: Aug 17 22:43:10 2026 GMT
Not After : Aug 16 22:48:10 2027 GMT
Subject: CN=8DC86C93CD73E63AE197D9C8AB3AD68065CD2D4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5a:42:b3:54:e0:94:ae:33:82:e1:c8:c1:15:
a4:c9:75:ed:ed:8b:fd:84:4d:6d:e4:cc:89:a1:38:
eb:1e:cc:cb:eb:a3:ae:bb:35:82:e5:9c:51:d0:e1:
26:1d:a9:c1:1a:ab:6c:82:26:39:f6:d1:9f:17:bf:
f7:2c:ca:23:cd:eb:f1:95:bf:32:55:03:2e:72:61:
40:ab:cd:cb:56:39:b4:df:d8:51:10:fa:2e:16:3e:
44:7b:28:b6:1c:87:6a:08:76:75:73:24:3a:ab:86:
c6:83:2f:f3:35:85:7e:0f:c9:03:b8:93:56:07:6c:
ac:1f:14:34:47:4f:f3:a7:c0:07:18:33:91:c2:3f:
1d:1f:07:e6:87:36:eb:8c:c1:48:50:5b:6f:55:43:
e3:73:c1:53:eb:7a:62:8e:c4:ed:1c:09:fc:d4:fd:
cf:4c:5e:56:d5:42:14:24:a7:39:a1:f8:27:6d:bc:
5a:a2:41:98:17:8a:f4:8e:40:bc:5a:09:7a:24:28:
44:29:c8:68:08:47:f6:32:9d:4c:ca:43:03:74:bf:
e8:53:11:1c:ea:89:fa:e5:87:df:08:dd:24:ac:ab:
64:ed:a1:62:25:b0:cf:d2:58:23:30:96:21:96:eb:
78:73:b7:11:1e:eb:a0:aa:f7:fe:b7:00:ee:59:09:
4e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C8:6C:93:CD:73:E6:3A:E1:97:D9:C8:AB:3A:D6:80:65:CD:2D:4B
X509v3 Authority Key Identifier:
keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a3a2f33372d3337203d3e20323030343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:faa5::/37
Signature Algorithm: sha256WithRSAEncryption
2c:0a:59:45:a3:45:f1:2f:20:97:64:f8:b1:b5:6c:60:52:9f:
e5:a3:0a:62:da:62:29:74:b3:0d:b5:92:b7:96:e0:a1:93:82:
a0:32:bd:e4:e3:85:11:12:61:51:d4:6d:c1:7b:e5:1a:71:8b:
d6:ac:ab:46:eb:0a:9b:a1:8f:22:e7:a4:96:f0:73:38:21:97:
e1:31:6e:be:4d:a2:69:a2:e3:c3:ac:92:f1:3f:d8:48:a0:ed:
81:91:e5:f9:a0:4b:94:fa:c5:0a:ab:ff:79:fd:48:a9:3d:01:
df:da:07:d4:43:9a:e2:1d:61:45:40:ea:9f:a3:b8:af:f5:42:
38:51:32:18:20:a6:ef:e9:f0:5b:f3:66:74:40:49:62:ed:5d:
9f:78:cd:bb:8c:f8:41:d9:bc:b1:82:06:f8:16:5d:a9:b8:8a:
d1:c1:cd:da:c9:3f:d2:b1:f1:cd:e7:20:26:74:91:04:eb:5b:
3b:28:13:20:99:32:ab:81:19:20:f2:67:7c:6d:7d:c9:1f:27:
0a:c7:18:35:d4:e8:5f:32:bc:54:6d:40:cd:85:0a:82:6f:88:
8b:93:02:62:fc:2b:25:1f:17:1d:76:47:73:2a:01:d4:e4:92:
aa:ff:7b:bd:c7:2d:f2:e1:3e:a4:4d:86:87:f3:75:a8:a2:33:
dc:ed:93:df
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUebVhPapeeySgCY7xB51ILMx5fnwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDEyODZkNTQxMWI1M2Y4OTNhNGE1NjlkZjlkNmQ5MzNk
MjlhNjUzYWJkYjgxMDg2NDMwHhcNMjYwODE3MjI0MzEwWhcNMjcwODE2MjI0ODEw
WjAzMTEwLwYDVQQDEyg4REM4NkM5M0NENzNFNjNBRTE5N0Q5QzhBQjNBRDY4MDY1
Q0QyRDRCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FpCs1TglK4z
guHIwRWkyXXt7Yv9hE1t5MyJoTjrHszL66OuuzWC5ZxR0OEmHanBGqtsgiY59tGf
F7/3LMojzevxlb8yVQMucmFAq83LVjm039hREPouFj5Eeyi2HIdqCHZ1cyQ6q4bG
gy/zNYV+D8kDuJNWB2ysHxQ0R0/zp8AHGDORwj8dHwfmhzbrjMFIUFtvVUPjc8FT
63pijsTtHAn81P3PTF5W1UIUJKc5ofgnbbxaokGYF4r0jkC8Wgl6JChEKchoCEf2
Mp1MykMDdL/oUxEc6on65YffCN0krKtk7aFiJbDP0lgjMJYhlut4c7cRHuugqvf+
twDuWQlOawIDAQABo4IChzCCAoMwHQYDVR0OBBYEFI3IbJPNc+Y64ZfZyKs61oBl
zS1LMB8GA1UdIwQYMBaAFKFWTM4unHMk0xj8tKCKALsJ87RpMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kubGVpdGVjYXN0cm8u
Y29tL3JlcG8vQ0FTVFJPLUlOVEVSTkVULzEvQTE1NjRDQ0UyRTlDNzMyNEQzMThG
Q0I0QTA4QTAwQkIwOUYzQjQ2OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFi
N2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI2Y2U0MDhkLTU1ODEt
NDgzZC05MGIzLTUxMTlmYzgzMDA2NC8wMTI4NmQ1NDExYjUzZjg5M2E0YTU2OWRm
OWQ2ZDkzM2QyOWE2NTNhYmRiODEwODY0My5jZXIwgYoGCCsGAQUFBwELBH4wfDB6
BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLmxlaXRlY2FzdHJvLmNvbS9yZXBvL0NB
U1RSTy1JTlRFUk5FVC8xLzMyMzYzMDMyM2E2NjYxNjEzNTNhM2EyZjMzMzcyZDMz
MzcyMDNkM2UyMDMyMzAzMDM0MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAyYC+qUAMA0GCSqGSIb3
DQEBCwUAA4IBAQAsCllFo0XxLyCXZPixtWxgUp/lowpi2mIpdLMNtZK3luChk4Kg
Mr3k44UREmFR1G3Be+UacYvWrKtG6wqboY8i56SW8HM4IZfhMW6+TaJpouPDrJLx
P9hIoO2BkeX5oEuU+sUKq/95/UipPQHf2gfUQ5riHWFFQOqfo7iv9UI4UTIYIKbv
6fBb82Z0QEli7V2feM27jPhB2byxggb4Fl2puIrRwc3ayT/SsfHN5yAmdJEE61s7
KBMgmTKrgRkg8md8bX3JHycKxxg11OhfMrxUbUDNhQqCb4iLkwJi/CslHxcddkdz
KgHU5JKq/3u9xy3y4T6kTYaH83WoojPc7ZPf
-----END CERTIFICATE-----
Generated at Fri Oct 9 07:25:16 2026 by rpki-client