This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35064cc8-9da3-38c0-9a7d-902c727ee0e3.roa
File:                     35064cc8-9da3-38c0-9a7d-902c727ee0e3.roa (raw, json)
Hash identifier:          Ke6GhSCRCG0W2tr9jCRhd4C2qtOQhFqaiCnb8Tq0mAk=
Subject key identifier:   C5:BF:2E:0E:52:17:0F:7E:2B:C5:BF:3C:6A:D0:D4:72:92:BE:0E:1D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858443C9CE47B8A0ACA69F6CB7F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35064cc8-9da3-38c0-9a7d-902c727ee0e3.roa
Signing time:             Sat 16 Dec 2023 18:03:45 +0000
ROA not before:           Sat 16 Dec 2023 18:03:45 +0000
ROA not after:            Fri 15 Mar 2024 17:03:45 +0000
asID:                     21859
IP address blocks:        108.165.42.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:3c:9c:e4:7b:8a:0a:ca:69:f6:cb:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 16 18:03:45 2023 GMT
            Not After : Mar 15 17:03:45 2024 GMT
        Subject: CN=84617e49-8469-4ac3-9cb2-3084f6c92f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f5:66:4d:54:1c:d8:f8:0b:d9:7c:66:97:16:
                    60:cc:52:a5:b7:fb:87:c8:bb:e0:86:44:2b:9a:9b:
                    02:09:03:5f:df:dc:c2:5b:ea:87:76:e4:58:73:bc:
                    76:c5:34:5d:77:da:6c:76:55:c0:dc:01:18:40:ce:
                    bf:29:cb:c4:1a:3b:6d:79:2f:eb:20:7f:ee:f8:32:
                    f8:89:9b:f8:0f:47:b5:24:c1:e8:74:d5:84:89:29:
                    94:ee:19:40:5e:5b:5e:46:87:26:52:1f:a5:c8:f9:
                    04:67:0b:d0:4e:bb:70:1f:da:1e:a8:b4:44:7e:48:
                    f2:ff:4e:c1:e8:72:c2:d4:d7:3d:70:74:bf:20:55:
                    bc:55:be:c6:41:cd:be:fc:1d:28:6f:2e:3c:c6:bb:
                    28:20:8d:ad:99:4d:e1:8e:61:a6:75:3e:19:86:1a:
                    ad:97:25:68:7e:b4:aa:f5:35:b9:76:b3:29:f7:8d:
                    3d:38:47:0e:23:71:99:32:ca:a1:67:13:21:b7:e7:
                    78:80:31:66:e0:94:b4:a2:a6:90:8e:82:ae:3b:4c:
                    d5:16:e0:40:f5:60:bc:19:7c:fe:ab:74:6f:0f:96:
                    3e:96:7d:f5:31:4c:83:95:fd:a2:75:e8:c5:a7:33:
                    5e:7d:a0:44:4f:13:03:63:c4:51:fb:d8:ef:ae:70:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BF:2E:0E:52:17:0F:7E:2B:C5:BF:3C:6A:D0:D4:72:92:BE:0E:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/35064cc8-9da3-38c0-9a7d-902c727ee0e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:80:04:8e:90:db:12:e4:b4:98:48:83:87:c6:c3:fb:3b:ea:
         46:a3:6a:08:47:2d:56:f9:8d:d1:1e:f7:c5:1c:14:09:42:60:
         5e:ff:34:c0:3f:0d:96:e4:5b:38:de:36:37:03:65:b6:21:33:
         7f:86:9b:51:01:8f:2d:1e:06:c0:9b:38:22:86:cb:32:0c:84:
         cc:d2:fe:1e:1c:e3:42:d2:72:99:11:1f:1f:9b:2b:f4:b7:5d:
         85:37:1a:97:ee:fe:39:d1:1e:9c:12:fd:6d:66:0f:3b:7f:7f:
         81:ae:42:a5:33:69:a5:f3:62:c0:34:21:08:f8:19:d4:34:91:
         64:f7:36:fd:f7:7d:c8:53:fc:a5:bb:0c:34:8b:6f:a1:ea:79:
         0e:e3:44:4f:46:1b:52:eb:65:68:41:80:43:84:b5:aa:ad:9f:
         7a:82:29:cf:ab:5e:15:44:d8:e1:d2:ad:54:a3:76:03:3a:ef:
         f1:63:29:08:f7:2a:dc:59:d1:dc:96:d7:eb:1b:1d:d0:9e:6c:
         d4:4e:a5:2c:0e:b0:70:60:ee:70:44:d8:49:d7:17:99:d9:60:
         86:ec:5c:5f:e0:ec:e9:b8:45:be:4e:82:f6:c1:01:2d:58:82:
         72:a0:a7:a3:8d:72:3b:2d:92:16:f3:5a:a2:7f:45:7b:bf:30:
         90:11:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:34:29 2025 by rpki-client