This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66ac81c7-0880-3768-9a5d-01647a0ad2d9.roa
File:                     66ac81c7-0880-3768-9a5d-01647a0ad2d9.roa (raw, json)
Hash identifier:          0X4bf0MMp/WyPYQTDQVDoZZPR2cabUD2qS63SXJdiTI=
Subject key identifier:   B9:C2:38:E7:A4:2D:D1:24:4E:33:6F:7F:7D:2E:F3:3E:54:B7:BF:92
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285842DDA97DE729661037EA203C80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66ac81c7-0880-3768-9a5d-01647a0ad2d9.roa
Signing time:             Sun 13 Aug 2023 01:00:23 +0000
ROA not before:           Sun 13 Aug 2023 01:00:23 +0000
ROA not after:            Sat 11 Nov 2023 02:00:23 +0000
asID:                     60721
IP address blocks:        166.1.187.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:dd:a9:7d:e7:29:66:10:37:ea:20:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Aug 13 01:00:23 2023 GMT
            Not After : Nov 11 02:00:23 2023 GMT
        Subject: CN=d3a1c2d1-5e7e-4ae0-b1d9-40bfdad18b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:02:24:3f:0f:61:d4:b3:5e:79:00:07:52:
                    fc:bc:e0:60:b0:65:b3:65:f7:c2:7d:dc:31:70:d2:
                    82:0c:39:1d:72:c7:de:6a:44:88:f7:f2:53:69:9b:
                    35:ab:00:9f:28:b9:69:52:cf:9d:4e:89:7e:62:76:
                    f3:09:77:e3:bc:45:9b:9c:b7:e9:70:e2:95:f1:f8:
                    ac:7c:68:ac:35:87:cb:ee:e9:d5:ca:3c:05:6a:24:
                    d4:5a:2d:ef:59:f2:35:80:e4:cb:1a:27:52:e0:0b:
                    6c:74:0b:fc:13:18:35:2a:cb:86:bb:82:0c:5d:15:
                    66:65:db:4e:b2:63:e4:f4:fb:5b:08:e4:43:74:27:
                    30:0e:7e:08:5d:b4:fc:27:df:07:0f:11:d2:41:42:
                    34:d7:94:20:4e:b2:9f:bc:75:e2:a4:2a:a5:6b:93:
                    ef:b0:12:b5:c1:e8:67:2f:3c:89:ec:31:3a:c4:2c:
                    a9:20:b4:51:75:a3:9c:15:d0:b5:ff:b1:6f:6f:74:
                    a6:0c:40:98:c3:ac:c2:77:53:85:ad:99:b1:85:1c:
                    64:7b:42:ee:4e:88:da:db:6a:95:4d:b3:28:ca:b3:
                    e8:f9:b0:2a:10:f8:00:99:32:5b:ed:f1:67:6c:ef:
                    f0:77:83:e3:2b:71:dd:33:aa:89:37:ac:0e:03:c6:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C2:38:E7:A4:2D:D1:24:4E:33:6F:7F:7D:2E:F3:3E:54:B7:BF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66ac81c7-0880-3768-9a5d-01647a0ad2d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:13:4d:64:06:67:2c:81:53:5d:fd:cf:62:54:df:ca:80:c6:
         91:cb:13:94:a1:d4:69:58:e2:bb:da:10:da:de:de:62:bb:cf:
         aa:bd:4e:24:65:1e:a2:4b:57:73:91:e2:8b:5d:51:6f:30:88:
         99:3e:d6:88:35:04:e3:9e:88:13:50:fc:2a:f1:4c:19:55:f2:
         9a:2b:18:a7:38:c1:b5:34:91:1e:e4:1d:dc:57:07:fa:3a:ea:
         31:f8:fa:df:57:fa:0e:f6:2d:21:ba:44:d4:a8:08:a5:e5:08:
         db:c3:16:04:b9:41:4a:81:51:9e:ae:c3:31:89:1f:c0:58:28:
         cc:54:15:08:14:96:05:5e:92:25:f7:83:af:bf:51:d8:69:77:
         dc:a9:58:fb:94:ac:b5:cd:ac:97:74:ff:20:13:9b:a4:d0:57:
         43:97:e0:6d:2d:39:81:fa:33:b2:aa:53:29:9a:bf:e8:f3:70:
         bb:09:f0:47:50:48:96:4b:93:31:f4:9b:eb:59:60:0c:9b:77:
         36:34:61:9a:8d:27:c8:dc:3a:54:df:43:e2:b8:0d:30:36:67:
         4b:48:57:66:62:5f:43:a8:16:df:5f:ce:a4:00:9a:62:84:fb:
         83:c7:80:50:0f:38:d3:6e:14:30:23:05:bf:b4:5a:d9:bc:49:
         e2:07:84:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----