Route Origin Authorization

$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6230353a3a2f34382d3438203d3e20323030343534.roa
File:                     323630323a666161353a6230353a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          i4f3Ns0fCeDWuj6tTtAfzvcA+/ILMWKZrbKsn5tZHes=
Subject key identifier:   9C:E1:5F:2D:8C:4D:21:1E:CC:B6:00:D8:B9:C6:0B:B8:B9:B5:EA:A3
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       7768BB93837F2686DDF4BBBD3CFCAECD0278D88D
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6230353a3a2f34382d3438203d3e20323030343534.roa
Signing time:             Mon 17 Aug 2026 22:48:08 +0000
ROA not before:           Mon 17 Aug 2026 22:43:08 +0000
ROA not after:            Mon 16 Aug 2027 22:48:08 +0000
asID:                     200454
IP address blocks:        2602:faa5:b05::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:68:bb:93:83:7f:26:86:dd:f4:bb:bd:3c:fc:ae:cd:02:78:d8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Aug 17 22:43:08 2026 GMT
            Not After : Aug 16 22:48:08 2027 GMT
        Subject: CN=9CE15F2D8C4D211ECCB600D8B9C60BB8B9B5EAA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cd:f6:ca:d8:75:c7:e2:3f:2d:3a:bb:da:5d:
                    ee:5e:b5:75:e8:35:33:89:60:38:0c:80:ea:91:8b:
                    ca:da:09:a7:e4:c8:0c:b1:ea:88:d8:a7:60:98:84:
                    f9:92:0d:e2:23:fe:b0:02:99:e1:e9:bf:70:28:3d:
                    50:dd:45:2c:35:02:42:36:d8:93:55:63:12:ba:55:
                    2f:88:d2:43:60:14:a9:2b:52:95:32:44:f5:89:69:
                    a2:c5:b0:69:53:9a:5c:7f:4e:0f:a3:c6:61:ab:d3:
                    60:59:64:08:ee:9e:bd:e1:12:c2:1e:b9:ac:00:aa:
                    5b:cb:89:cc:c0:48:92:fc:e5:bd:a1:98:69:18:f3:
                    3f:9a:7e:38:01:dd:0a:32:22:c4:f0:d9:eb:0d:a7:
                    7b:f4:53:72:45:a7:20:56:60:53:4b:a1:4c:81:85:
                    c2:87:ca:18:45:62:1d:52:ff:07:dd:0a:78:0b:ed:
                    9f:38:a8:70:16:c2:4d:ff:8d:97:af:29:93:45:b9:
                    cd:2f:64:66:e2:2b:7a:8a:9e:0f:a1:00:4a:35:9d:
                    1a:c1:ca:52:79:bc:46:11:35:01:10:bd:3f:85:9a:
                    78:a3:e6:43:61:83:45:50:fc:0f:c8:9c:ee:29:1b:
                    2c:12:9a:37:3a:58:81:1d:ce:b3:ea:3e:82:b6:17:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E1:5F:2D:8C:4D:21:1E:CC:B6:00:D8:B9:C6:0B:B8:B9:B5:EA:A3
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6230353a3a2f34382d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:b05::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:46:dc:7b:86:d7:84:a8:1b:77:b1:06:6d:21:f4:75:67:
         c0:51:bd:0e:32:36:4a:38:a3:ae:bb:67:7c:07:d7:a5:bf:5f:
         af:55:94:8e:12:e4:27:f1:7f:35:e2:95:de:25:dc:2c:8d:9b:
         9e:2f:cc:12:71:d1:75:e1:6c:f9:a1:c5:07:65:3d:6f:a0:e5:
         3a:f3:70:ae:e4:61:4c:5a:41:c9:2a:6a:be:48:5d:f7:2f:fd:
         a9:90:3d:80:b3:eb:cb:c2:3b:04:64:92:7a:b9:e8:2b:14:45:
         5e:f7:20:48:e0:8b:8a:00:d2:a7:db:74:43:59:da:29:eb:45:
         2e:a9:ea:44:8d:b6:6c:5e:61:aa:04:f5:5d:54:1e:5e:92:12:
         a6:a5:01:6b:6b:d5:f1:6a:fc:8a:1e:b4:21:0b:8b:c5:f9:57:
         25:23:03:ff:e9:25:97:03:02:c4:af:d3:8c:cf:dc:60:a9:84:
         2a:c8:73:04:74:62:89:81:51:88:29:ef:f0:80:1e:1f:68:3b:
         94:23:1c:59:ed:9c:c9:95:fd:5d:1c:da:7c:19:d5:ea:dd:d5:
         f9:e6:10:11:0e:d2:c0:ba:6f:ec:8b:74:62:04:bf:18:da:f6:
         64:25:47:16:63:7e:bd:0a:30:05:84:32:39:f8:c8:81:ef:66:
         34:d8:dc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----