Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/04b2c7af-e188-3fdd-81f2-ac0ed18551da.roa
File: 04b2c7af-e188-3fdd-81f2-ac0ed18551da.roa (raw, json)
Hash identifier: MgJkAcgJmluyWs59H5ZqtbUzrqRuAwoXwA37UdQHOLU=
Subject key identifier: B2:FE:A4:FA:CC:D9:5A:43:DC:BE:E7:8A:C2:E2:3D:2B:1E:A9:76:A0
Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial: 010D0C9F432858492E13C112B448F35F1416CA80
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/04b2c7af-e188-3fdd-81f2-ac0ed18551da.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 400400
IP address blocks: 199.250.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:c1:12:b4:48:f3:5f:14:16:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=ff88e9ba-885b-475c-b1bd-e4b4e957d3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0f:d7:96:84:35:93:84:1d:ae:d4:7b:e1:cc:
e7:4d:21:25:81:19:59:49:2f:fe:9f:c7:7f:a1:1a:
73:ff:da:72:84:80:de:8f:3c:1c:59:df:11:f0:07:
f4:96:29:ca:61:06:af:22:25:2d:a3:b8:7c:de:eb:
00:5c:03:a6:37:76:06:a5:6a:3a:8a:a3:c7:ca:b2:
92:b4:04:86:38:be:f4:1b:cb:ec:b6:f8:9d:84:2c:
80:f9:c7:d8:95:c7:ca:a1:9d:c0:33:12:f6:48:88:
0e:33:b4:56:59:1d:9c:58:93:b2:da:fa:dd:fc:f7:
a7:09:10:12:b8:2e:b3:3e:c5:51:45:35:08:f9:4c:
ee:e8:37:a9:19:22:5a:00:08:1d:cf:9f:a9:a4:58:
bc:56:a7:f4:50:01:a4:a8:8a:8a:03:f7:45:d6:26:
4c:92:10:cd:72:b3:03:d3:fc:13:8e:05:0f:d2:ad:
d1:e0:b1:29:28:f6:80:dd:b0:52:ad:f7:71:81:39:
ef:96:47:50:9b:8b:16:16:04:dc:7e:89:a6:4e:a3:
54:e8:25:2a:c0:97:05:f4:b3:3b:7c:44:b9:4f:2a:
65:9e:2d:ab:16:e8:f8:32:c6:dc:8b:a2:3c:d9:d6:
cf:79:9c:5f:7d:80:8b:7d:e2:12:6b:0d:6c:71:9e:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FE:A4:FA:CC:D9:5A:43:DC:BE:E7:8A:C2:E2:3D:2B:1E:A9:76:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/04b2c7af-e188-3fdd-81f2-ac0ed18551da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
X509v3 Authority Key Identifier:
keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.250.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:16:b6:06:89:db:3e:98:5d:18:58:2f:dc:46:6a:11:e7:5f:
c4:df:52:e5:b7:44:7b:37:b6:ab:3a:1b:e5:8c:05:70:d2:5d:
1b:c3:cd:d3:60:01:3e:57:ce:11:a5:32:18:51:2e:d1:28:79:
c6:97:b9:17:eb:d5:a2:a1:ca:30:c4:8a:f9:f3:92:eb:5f:52:
c4:22:8b:02:10:b3:fa:e8:5a:4d:18:10:d9:dd:4a:26:94:59:
6e:13:cc:55:ca:c7:b0:55:c1:4c:18:f5:8f:7d:2f:cf:b8:36:
c6:12:f6:00:5b:c4:d0:45:a0:0a:10:65:03:72:40:12:b1:cc:
8a:6f:1f:69:3d:8d:e7:03:99:d7:69:ed:15:12:19:67:da:7c:
ef:95:23:34:7b:34:99:22:49:6d:a1:3d:be:9e:77:f6:05:17:
74:a1:3f:29:74:7a:de:c1:41:cf:b9:77:30:ee:84:25:6d:94:
29:36:d4:8b:45:5f:5b:eb:61:2a:ef:cd:c5:db:4d:fe:16:9c:
05:e6:f0:9f:9d:51:be:79:9f:76:e8:9c:7b:23:84:76:ce:b7:
0b:7c:21:3e:05:86:f2:c5:e1:8b:d4:62:fa:33:24:8e:4c:00:
37:21:d5:a1:c9:a4:bb:68:e8:2a:72:66:a7:c4:05:bd:6f:c5:
7a:ed:ec:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE8EStEjzXxQWyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl
ZGI0MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZmY4OGU5YmEtODg1Yi00NzVjLWIxYmQtZTRiNGU5NTdkM2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ/XloQ1k4QdrtR74cznTSElgRlZSS/+n8d/
oRpz/9pyhIDejzwcWd8R8Af0linKYQavIiUto7h83usAXAOmN3YGpWo6iqPHyrKS
tASGOL70G8vstvidhCyA+cfYlcfKoZ3AMxL2SIgOM7RWWR2cWJOy2vrd/PenCRAS
uC6zPsVRRTUI+Uzu6DepGSJaAAgdz5+ppFi8Vqf0UAGkqIqKA/dF1iZMkhDNcrMD
0/wTjgUP0q3R4LEpKPaA3bBSrfdxgTnvlkdQm4sWFgTcfommTqNU6CUqwJcF9LM7
fES5Typlni2rFuj4Msbci6I82dbPeZxffYCLfeISaw1scZ6yNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLL+pPrM2VpD3L7nisLiPSseqXagMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj
NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvMDRiMmM3YWYtZTE4OC0z
ZmRkLTgxZjItYWMwZWQxODU1MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh
MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My
ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi
MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/r6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGoWtgaJ2z6YXRhYL9xGahHnX8TfUuW3RHs3tqs6G+WMBXDSXRvDzdNg
AT5XzhGlMhhRLtEoecaXuRfr1aKhyjDEivnzkutfUsQiiwIQs/roWk0YENndSiaU
WW4TzFXKx7BVwUwY9Y99L8+4NsYS9gBbxNBFoAoQZQNyQBKxzIpvH2k9jecDmddp
7RUSGWfafO+VIzR7NJkiSW2hPb6ed/YFF3ShPyl0et7BQc+5dzDuhCVtlCk21ItF
X1vrYSrvzcXbTf4WnAXm8J+dUb55n3bonHsjhHbOtwt8IT4FhvLF4YvUYvozJI5M
ADch1aHJpLto6CpyZqfEBb1vxXrt7O4=
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:56:46 2025 by rpki-client