This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/005f151d-f304-3c84-a034-6890bcebec80.roa
File:                     005f151d-f304-3c84-a034-6890bcebec80.roa (raw, json)
Hash identifier:          iaMiZRxqAzU02GOUuyo9VSnpH2TXIY1PyWyH+WP73os=
Subject key identifier:   A9:54:B1:C6:C8:64:7A:CF:CE:04:79:9A:88:C1:C5:29:8C:DA:7D:4E
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584230EA46415463D9EA553C2E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/005f151d-f304-3c84-a034-6890bcebec80.roa
Signing time:             Mon 12 Jun 2023 03:56:06 +0000
ROA not before:           Mon 12 Jun 2023 03:56:06 +0000
ROA not after:            Sun 10 Sep 2023 03:56:06 +0000
asID:                     174
IP address blocks:        108.165.211.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:30:ea:46:41:54:63:d9:ea:55:3c:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 12 03:56:06 2023 GMT
            Not After : Sep 10 03:56:06 2023 GMT
        Subject: CN=862dcb31-ac3a-4514-bf65-92bc383416d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:db:a0:c0:f6:ca:31:9b:73:54:85:ec:eb:
                    5b:1c:1f:6d:62:32:c5:58:ae:af:c8:11:cf:52:08:
                    22:64:29:1f:19:d2:69:2a:b1:4f:a1:4e:7d:49:b9:
                    fc:b9:9e:5c:9c:ff:20:d2:c1:13:f2:c9:a5:da:79:
                    18:c4:be:9d:97:4f:c7:25:2f:c8:71:55:ac:24:fa:
                    32:38:2c:ca:ec:be:31:20:28:d7:d3:7e:7d:43:39:
                    7a:63:4f:1c:cb:8b:50:f9:ff:5d:0d:51:b8:30:8d:
                    7b:7c:07:5e:38:83:ad:cd:0b:59:8c:8f:74:f7:ac:
                    63:a4:25:b3:c9:81:5f:a6:0c:dc:40:79:f3:82:8f:
                    13:8c:91:86:c0:ae:e9:c3:f8:3d:6e:47:73:50:2d:
                    f5:f8:64:35:e6:57:93:3c:e0:90:11:b2:ba:fb:ff:
                    69:ed:ab:52:91:90:6b:3e:89:a5:18:ec:20:69:f0:
                    14:57:6a:1f:09:de:6a:df:55:f6:f0:30:76:46:ff:
                    94:d4:68:1b:1b:5d:d6:08:25:ea:63:30:21:f7:84:
                    19:4a:fa:74:10:11:4b:89:dd:a0:41:0d:c6:d0:aa:
                    11:56:b3:6f:38:92:4d:00:87:3b:88:a7:5f:6d:91:
                    51:a4:92:a7:d3:ef:ae:ce:57:51:a4:3a:4f:98:92:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:54:B1:C6:C8:64:7A:CF:CE:04:79:9A:88:C1:C5:29:8C:DA:7D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/005f151d-f304-3c84-a034-6890bcebec80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:28:1a:11:8f:dd:4e:14:4b:32:ef:03:8c:e9:9c:6c:f1:53:
         0d:c1:6d:1f:71:4c:cd:6c:8e:42:48:30:52:40:cf:c7:29:60:
         bb:8a:2f:f1:ae:37:10:5b:d5:c6:87:88:54:b3:3f:b0:4d:1d:
         f5:36:2c:ff:e7:2e:26:28:a3:83:82:8f:64:36:42:fa:75:e7:
         02:0c:0f:97:e8:89:1c:7b:0b:88:f6:b9:76:37:88:11:82:b1:
         f4:41:54:e4:77:ea:57:ad:96:bf:1f:f0:65:ae:ac:87:42:54:
         ee:56:04:f1:fc:69:1f:a4:8d:fd:79:f5:d5:91:9d:f9:3e:b3:
         fa:50:19:cf:d2:e4:85:ed:a5:81:e8:1d:f9:f7:5e:af:b3:d6:
         5a:0c:50:58:f5:e3:8f:25:26:0a:27:ce:29:e5:ba:cf:9f:ea:
         eb:ef:ac:68:d5:44:5b:98:61:14:61:a3:77:b8:86:bd:e8:58:
         da:9c:8b:e6:e1:56:1f:64:2e:b5:66:4e:da:f7:87:ed:99:e8:
         7a:d0:19:e3:05:a3:b2:5e:20:94:84:c4:08:8d:6f:a1:91:03:
         e3:59:c6:c3:38:56:f6:dd:d8:d3:61:cc:81:42:e8:bd:c3:71:
         49:bb:f2:f8:f0:f3:61:40:c7:14:9e:78:e2:aa:a3:9b:eb:8c:
         ae:c7:80:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIw6kZBVGPZ6lU8LgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDYxMjAzNTYwNloXDTIzMDkxMDAzNTYwNlowLzEtMCsGA1UEAxMk
ODYyZGNiMzEtYWMzYS00NTE0LWJmNjUtOTJiYzM4MzQxNmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRXboMD2yjGbc1SF7OtbHB9tYjLFWK6vyBHP
UggiZCkfGdJpKrFPoU59Sbn8uZ5cnP8g0sET8sml2nkYxL6dl0/HJS/IcVWsJPoy
OCzK7L4xICjX0359Qzl6Y08cy4tQ+f9dDVG4MI17fAdeOIOtzQtZjI9096xjpCWz
yYFfpgzcQHnzgo8TjJGGwK7pw/g9bkdzUC31+GQ15leTPOCQEbK6+/9p7atSkZBr
PomlGOwgafAUV2ofCd5q31X28DB2Rv+U1GgbG13WCCXqYzAh94QZSvp0EBFLid2g
QQ3G0KoRVrNvOJJNAIc7iKdfbZFRpJKn0++uzldRpDpPmJLVdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlUscbIZHrPzgR5mojBxSmM2n1OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMDA1ZjE1MWQtZjMwNC0z
Yzg0LWEwMzQtNjg5MGJjZWJlYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4oGhGP3U4USzLvA4zpnGzxUw3BbR9xTM1sjkJIMFJAz8cpYLuKL/Gu
NxBb1caHiFSzP7BNHfU2LP/nLiYoo4OCj2Q2Qvp15wIMD5foiRx7C4j2uXY3iBGC
sfRBVOR36letlr8f8GWurIdCVO5WBPH8aR+kjf159dWRnfk+s/pQGc/S5IXtpYHo
Hfn3Xq+z1loMUFj1448lJgonzinlus+f6uvvrGjVRFuYYRRho3e4hr3oWNqci+bh
Vh9kLrVmTtr3h+2Z6HrQGeMFo7JeIJSExAiNb6GRA+NZxsM4Vvbd2NNhzIFC6L3D
cUm78vjw82FAxxSeeOKqo5vrjK7HgME=
-----END CERTIFICATE-----