This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1527a07b-7abf-332d-9956-6257da3b5052.roa
File:                     1527a07b-7abf-332d-9956-6257da3b5052.roa (raw, json)
Hash identifier:          ZTb4aMx9mDgce8uvUYo6arnJb+OlPG6xIHwwvAbseNI=
Subject key identifier:   50:6B:60:11:31:C3:6D:13:29:C0:F7:BD:CA:BC:C5:FF:56:6D:35:D4
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858425C7037972C1619096F4F8D00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1527a07b-7abf-332d-9956-6257da3b5052.roa
Signing time:             Tue 27 Jun 2023 18:05:44 +0000
ROA not before:           Tue 27 Jun 2023 18:05:44 +0000
ROA not after:            Mon 25 Sep 2023 18:05:44 +0000
asID:                     834
IP address blocks:        166.0.54.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:5c:70:37:97:2c:16:19:09:6f:4f:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jun 27 18:05:44 2023 GMT
            Not After : Sep 25 18:05:44 2023 GMT
        Subject: CN=6d2b15ce-6b9d-415e-b8b7-7958dba99424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:ed:3f:19:3e:60:4c:a4:35:da:25:e9:f8:
                    2e:19:72:cb:47:d3:6d:4f:85:35:3f:ec:5f:a7:2c:
                    a6:4f:27:90:e7:c5:95:07:a2:14:e6:e3:fb:e2:a2:
                    e9:03:fa:39:83:f6:d8:be:b9:88:68:9d:20:14:4b:
                    d9:55:ba:4d:e7:6d:58:13:ef:e7:07:60:59:3f:33:
                    61:a5:17:f0:27:33:18:5a:51:8e:ca:2f:4b:b6:fd:
                    a1:60:2f:03:b1:30:3a:30:18:d7:bc:3c:b3:35:72:
                    a2:56:ba:fd:22:4d:ac:1f:69:4b:09:0b:a5:38:ff:
                    39:70:52:b8:fe:b6:5e:df:85:44:82:96:52:87:7d:
                    5d:b5:a9:00:27:44:7e:ce:37:3b:65:78:c8:ef:c0:
                    6d:c6:d7:bf:7e:ae:21:0a:cf:c9:98:79:c6:b2:c7:
                    59:d0:8d:a6:eb:83:32:0b:fa:fe:8d:f0:46:e7:a1:
                    b4:b0:2e:5f:c5:b7:e2:b1:cc:ea:b8:30:84:5c:cb:
                    e0:b4:05:df:4f:b9:ae:11:d6:1c:94:0e:40:55:33:
                    81:85:fe:d6:5c:21:9b:fd:7a:91:55:7f:29:9d:d8:
                    7f:9c:17:45:a0:41:52:63:86:2c:5f:fb:ca:98:0f:
                    01:20:e8:da:e9:5e:f9:3e:1a:c8:13:37:92:b3:cd:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6B:60:11:31:C3:6D:13:29:C0:F7:BD:CA:BC:C5:FF:56:6D:35:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1527a07b-7abf-332d-9956-6257da3b5052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:80:f8:5a:be:c7:ec:3d:64:28:c0:0d:97:73:c4:3b:e6:92:
         45:ff:bf:b7:92:0a:0d:57:95:1d:65:e9:ce:a2:d2:a0:97:13:
         4e:eb:5f:fb:76:3a:14:4f:81:62:96:2b:05:03:20:c8:37:13:
         f5:2c:fc:be:6b:f6:a9:c4:6e:20:17:85:79:5f:9a:bd:cb:8e:
         36:b6:87:25:06:8c:45:80:18:73:b7:a8:49:94:fe:83:ba:dc:
         c7:26:3b:2e:0a:86:d8:16:91:43:9d:1a:db:34:17:3d:a4:7b:
         8a:48:44:a7:96:34:cd:18:68:80:ae:7f:23:39:ad:c0:cc:84:
         4b:7f:b6:30:d8:11:1a:2f:20:89:85:f2:98:ac:fe:69:e1:96:
         56:c1:0c:8b:da:9b:32:88:f1:80:90:e2:00:f1:04:7a:d0:13:
         7f:61:50:02:e6:ca:b7:20:a1:fb:6d:14:d6:45:ad:82:59:33:
         10:3a:18:0c:0f:48:36:7c:18:76:22:8c:d3:f1:be:32:3a:9b:
         fb:df:c8:ed:aa:63:47:01:07:66:bd:1f:64:5f:19:2a:cb:a9:
         cb:95:9e:01:eb:d3:5d:2b:65:38:d3:07:cc:d0:bb:74:34:1e:
         19:bf:89:b2:29:68:d7:a8:4b:cb:7e:eb:5a:bc:78:e8:6c:03:
         c2:b0:32:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----