This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/658a74c2-30ad-3f27-8835-674260b4161a.roa
File:                     658a74c2-30ad-3f27-8835-674260b4161a.roa (raw, json)
Hash identifier:          Cq+D8158vQtpfAuujLb2YYAQCcSdOgNJk5Lm/uJ8wPs=
Subject key identifier:   18:92:42:1B:4D:E7:EB:10:56:38:10:85:43:34:51:10:9A:1E:7B:D3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858409E5C93535A2A93051265F600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/658a74c2-30ad-3f27-8835-674260b4161a.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Tue 22 Apr 2025 04:00:00 +0000
asID:                     396982
IP address blocks:        166.0.228.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9e:5c:93:53:5a:2a:93:05:12:65:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Apr 22 04:00:00 2025 GMT
        Subject: CN=2ef090ec-9af0-4914-b0a3-a0ff9a57392f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:92:06:6a:25:20:ba:33:b8:6e:0a:3a:be:
                    a7:e3:2d:2f:d4:7d:18:c5:9c:15:3e:6a:7a:62:90:
                    35:a1:9a:42:75:85:95:19:b0:d8:55:ba:d8:cc:a3:
                    d4:20:64:f0:cd:93:05:78:16:26:cb:b2:48:b2:53:
                    9f:20:e9:b6:9b:3e:bc:f5:c1:7b:3f:9f:18:0e:37:
                    f0:fe:ed:60:94:a0:da:81:6e:98:1a:82:8e:07:10:
                    e3:76:2c:ac:bc:23:88:c8:ff:cb:f0:11:63:de:cd:
                    40:b3:72:56:d7:9a:48:dc:eb:53:3f:82:fe:3e:8d:
                    c8:16:12:6a:82:69:26:3b:89:bb:d3:25:34:82:43:
                    64:ec:d0:56:cb:9e:c0:8e:bf:c3:8d:d6:f6:1c:b8:
                    ab:79:76:54:ae:9f:a5:70:47:7b:88:e6:86:a5:b4:
                    0a:d5:83:9b:dd:af:6c:ce:2b:3f:aa:5e:ad:dd:a6:
                    b4:05:d9:9f:ff:36:33:0d:5c:cd:8c:77:23:d8:60:
                    b8:4a:3d:fd:49:cf:a6:dd:e5:fb:7f:90:d0:48:06:
                    77:b1:49:aa:7b:42:1d:04:14:32:08:7a:fa:88:79:
                    65:bf:a2:6c:be:0d:76:c2:72:77:56:dc:16:d9:6c:
                    bc:d2:88:10:62:58:a8:ac:a6:7c:2c:d8:ad:36:14:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:92:42:1B:4D:E7:EB:10:56:38:10:85:43:34:51:10:9A:1E:7B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/658a74c2-30ad-3f27-8835-674260b4161a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:11:02:38:d4:6d:15:b0:1e:ca:a1:79:c9:1b:de:c7:77:70:
         2f:bf:be:9b:70:0e:77:41:0d:34:bc:2f:04:38:f3:27:6a:10:
         12:e1:bf:3d:4e:14:3e:97:9a:9b:65:b6:11:d4:6b:53:9e:55:
         49:a1:5f:bb:c5:68:9f:52:76:c1:e4:31:9e:15:a8:c2:13:c6:
         31:9d:40:e9:74:45:0d:6c:54:cc:a4:b0:f5:7d:d2:32:6a:25:
         8e:2c:88:a2:94:3a:dd:61:df:fb:20:61:48:22:fb:6c:b5:10:
         32:2d:df:7e:0c:fe:d6:90:1c:1c:43:69:81:a5:60:1c:b3:61:
         08:81:b3:2d:a3:39:ac:34:97:c4:da:63:27:3e:66:e8:4a:1d:
         16:2a:01:80:70:02:ec:dc:c1:8f:45:04:2a:0f:dd:a3:6c:02:
         7f:4a:9d:9b:eb:17:74:1b:33:2b:35:14:44:06:a6:76:d5:d3:
         82:de:8b:de:3d:67:da:43:61:97:40:1e:0d:44:54:e7:85:39:
         e7:fc:b6:67:76:19:fe:e9:bd:5c:13:10:03:d1:a3:70:19:37:
         d0:9d:f4:b7:0c:76:2b:7d:1f:9f:34:d2:dd:c8:5b:ca:bd:91:
         41:3a:e2:23:65:35:49:47:8b:5b:2c:8d:28:37:b5:47:4b:98:
         5c:b7:2f:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECeXJNTWiqTBRJl9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIwMDUwNTE3MzMzN1oXDTI1MDQyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MmVmMDkwZWMtOWFmMC00OTE0LWIwYTMtYTBmZjlhNTczOTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0buSBmolILozuG4KOr6n4y0v1H0YxZwVPmp6
YpA1oZpCdYWVGbDYVbrYzKPUIGTwzZMFeBYmy7JIslOfIOm2mz689cF7P58YDjfw
/u1glKDagW6YGoKOBxDjdiysvCOIyP/L8BFj3s1As3JW15pI3OtTP4L+Po3IFhJq
gmkmO4m70yU0gkNk7NBWy57Ajr/Djdb2HLireXZUrp+lcEd7iOaGpbQK1YOb3a9s
zis/ql6t3aa0Bdmf/zYzDVzNjHcj2GC4Sj39Sc+m3eX7f5DQSAZ3sUmqe0IdBBQy
CHr6iHllv6Jsvg12wnJ3VtwW2Wy80ogQYliorKZ8LNitNhQ8iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiSQhtN5+sQVjgQhUM0URCaHnvTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNjU4YTc0YzItMzBhZC0z
ZjI3LTg4MzUtNjc0MjYwYjQxNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIRAjjUbRWwHsqheckb3sd3cC+/vptwDndBDTS8LwQ48ydqEBLhvz1O
FD6XmptlthHUa1OeVUmhX7vFaJ9SdsHkMZ4VqMITxjGdQOl0RQ1sVMyksPV90jJq
JY4siKKUOt1h3/sgYUgi+2y1EDIt334M/taQHBxDaYGlYByzYQiBsy2jOaw0l8Ta
Yyc+ZuhKHRYqAYBwAuzcwY9FBCoP3aNsAn9KnZvrF3QbMys1FEQGpnbV04Lei949
Z9pDYZdAHg1EVOeFOef8tmd2Gf7pvVwTEAPRo3AZN9Cd9LcMdit9H5800t3IW8q9
kUE64iNlNUlHi1ssjSg3tUdLmFy3L1w=
-----END CERTIFICATE-----