Route Origin Authorization

$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630643a3a2f34382d3438203d3e20323134393133.roa
File:                     323630323a666161353a6630643a3a2f34382d3438203d3e20323134393133.roa (raw, json)
Hash identifier:          pQe/OQfqOaTaMwtOXxuTmJTblPRAdTWsNjvOZ80CU3Y=
Subject key identifier:   21:6B:C3:D1:D5:2D:B7:2A:26:69:7E:FC:D5:C0:4F:29:40:39:9A:1E
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       1B859CD5900BD0065FC8AF3343753F9A6136FD7B
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630643a3a2f34382d3438203d3e20323134393133.roa
Signing time:             Mon 17 Aug 2026 22:48:10 +0000
ROA not before:           Mon 17 Aug 2026 22:43:10 +0000
ROA not after:            Mon 16 Aug 2027 22:48:10 +0000
asID:                     214913
IP address blocks:        2602:faa5:f0d::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:85:9c:d5:90:0b:d0:06:5f:c8:af:33:43:75:3f:9a:61:36:fd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Aug 17 22:43:10 2026 GMT
            Not After : Aug 16 22:48:10 2027 GMT
        Subject: CN=216BC3D1D52DB72A26697EFCD5C04F2940399A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:86:99:5e:cc:3e:e3:52:b8:3f:b4:c3:ee:
                    1e:e6:05:53:43:80:5d:8e:25:3d:4b:9d:25:27:32:
                    03:90:f3:00:9b:71:60:18:f3:ab:1e:be:fd:8c:1e:
                    85:7c:b9:c8:85:2e:d6:36:77:c1:ac:69:61:ce:9c:
                    94:4a:71:38:b0:9d:80:85:77:18:82:9d:d5:5b:29:
                    61:8a:30:0d:4b:a2:73:0b:88:83:d4:36:56:f0:fd:
                    0b:2c:7a:a4:b7:89:98:00:59:1f:b4:9c:06:35:30:
                    55:c7:0f:85:39:06:55:db:d7:18:ef:8a:7a:85:47:
                    46:9c:bc:22:7d:dc:d4:01:7c:da:d5:38:26:a9:29:
                    d8:85:99:e1:f5:89:00:f3:ff:2b:fd:40:c1:25:73:
                    9d:e3:f4:08:ce:70:5d:63:6c:d6:69:52:05:31:9b:
                    57:ac:48:7c:ec:6d:66:9c:bd:79:1f:fc:80:76:4f:
                    01:b4:65:cb:e7:25:4e:6f:09:63:78:ae:73:57:cf:
                    e1:64:fb:4f:20:b5:b2:bd:75:8b:06:bd:2d:13:f4:
                    ae:b0:75:cb:ef:80:cb:72:f3:0d:d2:ed:88:94:f6:
                    7a:48:6c:f8:d0:7d:51:12:27:01:13:70:3e:72:82:
                    0d:c4:98:4b:a5:a1:95:c2:d0:19:0b:71:a5:21:e7:
                    57:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6B:C3:D1:D5:2D:B7:2A:26:69:7E:FC:D5:C0:4F:29:40:39:9A:1E
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630643a3a2f34382d3438203d3e20323134393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f0d::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:73:ef:18:e5:51:31:b1:d0:4f:f5:85:e9:82:43:69:6c:4c:
         8d:52:9a:e5:01:d8:5f:ac:bb:07:a7:80:53:25:ee:c5:e9:e3:
         aa:6a:58:03:88:d0:9d:08:c1:c8:b9:1b:4d:8e:0e:10:79:db:
         30:fc:71:0a:98:7a:9a:d5:cc:42:14:ee:30:91:90:32:c1:9e:
         de:e4:e7:23:bf:bb:62:26:85:7d:da:ed:49:cb:1f:03:a9:e5:
         1f:9f:3b:11:46:26:96:bd:2d:8c:b6:5a:35:75:91:8a:cb:bb:
         a3:5c:e4:b4:f7:b9:b8:ba:28:f9:94:0c:41:35:f0:c7:c3:19:
         52:2b:45:66:e8:88:65:42:af:ac:68:5e:30:a5:50:44:97:95:
         22:d7:d0:c2:52:e4:b8:7d:76:43:e6:fb:93:f1:7c:9d:1c:af:
         65:3f:5e:9f:e7:6c:7a:3b:e1:66:7a:4e:a3:2a:84:e1:a6:84:
         61:05:51:5e:13:d8:f1:e1:53:b7:e2:e2:37:f9:01:f6:c9:5a:
         8b:66:04:65:af:fc:49:94:ba:90:00:26:4a:e8:1b:f2:51:8a:
         3e:09:70:5a:d0:9a:02:e7:09:74:17:5e:f8:71:6a:b2:de:e8:
         01:55:d2:47:28:d6:49:a2:70:70:70:e7:bc:9e:23:d6:b9:eb:
         ba:43:0c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----