This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6e30be71-8258-3bc7-9219-1295a38218b8.roa
File:                     6e30be71-8258-3bc7-9219-1295a38218b8.roa (raw, json)
Hash identifier:          bEr0TX6EFYxiiinweob/qu16R1AtoTCX/K5EL826kaE=
Subject key identifier:   21:E4:08:6C:EF:ED:AD:65:E8:45:E0:2F:20:EE:8D:6C:EA:D7:25:E9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841C56DF8190BBD0A27156D6980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6e30be71-8258-3bc7-9219-1295a38218b8.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 06 Aug 2025 04:00:00 +0000
asID:                     11798
IP address blocks:        166.1.200.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:c5:6d:f8:19:0b:bd:0a:27:15:6d:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Aug  6 04:00:00 2025 GMT
        Subject: CN=84bc543b-eac2-4333-9757-6d4a69dd66f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:c2:65:fe:22:d2:c7:28:b8:af:ba:6a:e6:
                    ee:a0:45:ac:8e:ab:5d:80:3f:8e:bb:e4:0c:8d:6b:
                    a5:b2:cd:45:8f:62:f9:df:5b:f5:ad:16:be:b0:be:
                    ee:64:c8:e1:8e:9f:aa:3e:5b:8d:7c:41:29:6f:5d:
                    9d:21:03:ef:d8:5c:6a:13:7a:05:0d:2f:fd:00:5b:
                    1f:31:73:18:b7:c7:16:14:67:d2:d9:d8:e3:a7:d5:
                    1a:b7:3c:ba:3c:22:39:01:9d:4a:33:80:aa:0d:90:
                    f6:93:7d:25:f4:7c:f7:6f:6f:7e:de:46:82:95:f3:
                    b1:73:83:0e:2e:3b:dd:b3:fd:90:c1:f5:ec:71:98:
                    8e:13:7f:b1:a1:02:1c:67:4e:04:33:cc:ad:77:32:
                    86:47:ae:0e:ba:43:f7:e6:0e:a6:0f:4e:f8:d3:68:
                    5d:ab:56:05:5a:29:1a:6c:47:6a:d4:49:31:54:7e:
                    32:c2:a3:26:4d:98:70:66:84:87:ed:af:70:c1:c5:
                    3c:dc:b5:51:f8:f4:55:98:0b:90:76:4a:fc:d3:c9:
                    5d:7b:0a:24:94:3f:9d:48:ab:76:b6:44:d4:01:74:
                    67:0a:33:7b:81:81:bc:e2:8c:d7:33:df:dc:14:a6:
                    50:d6:17:74:8a:7c:03:44:cf:32:ef:01:23:29:69:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E4:08:6C:EF:ED:AD:65:E8:45:E0:2F:20:EE:8D:6C:EA:D7:25:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6e30be71-8258-3bc7-9219-1295a38218b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:cf:1e:af:a1:15:d6:d6:bc:ff:d2:e4:a4:6e:1c:43:12:fa:
         fb:70:e3:86:57:e9:ea:be:7e:5e:9b:4c:24:d4:9d:60:54:6d:
         33:7d:25:67:9e:09:f8:65:75:b6:83:81:a7:66:35:ab:92:5b:
         4f:e1:d0:5b:75:97:9d:8f:80:71:29:6c:47:d1:92:32:d5:4e:
         0c:c9:b3:93:99:1c:ba:90:8b:17:34:d0:2c:9f:ab:d8:d9:f9:
         9e:bc:79:6a:51:1c:66:15:90:63:9f:fd:eb:08:73:53:3a:e0:
         c6:91:db:65:3d:9e:53:29:58:eb:c1:8a:cd:1c:2c:cf:e8:a3:
         03:a8:0c:40:b6:5a:e2:b8:70:cb:0a:51:4e:90:66:81:f2:33:
         e8:0d:94:26:86:ba:c3:08:4f:6e:2e:fd:33:c9:3c:1b:fb:6a:
         4f:87:5f:7b:ba:64:30:23:91:f4:be:8c:48:66:66:98:32:a3:
         28:bd:cd:cf:2b:80:a5:aa:3b:4e:3f:51:6f:e9:f0:c2:7c:f2:
         99:a0:f9:fe:ee:28:03:00:25:24:18:98:04:0b:b9:18:96:cc:
         14:12:ad:d5:37:78:ad:a8:59:c5:2b:5a:b1:1d:26:3c:b9:16:
         3d:18:1a:9c:80:a7:0b:8d:35:0d:fa:0f:72:f8:93:b6:bc:b3:
         ff:10:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----