This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7042e626-abfd-38c3-92c4-ac4548963ede.roa
File:                     7042e626-abfd-38c3-92c4-ac4548963ede.roa (raw, json)
Hash identifier:          pwVdXJ0TndxG5l0COi+W8cgc8ZW9p8/a+FStb0QljDs=
Subject key identifier:   2E:9D:2C:26:01:31:CC:17:1A:CF:63:69:88:C8:91:64:71:00:FA:1D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858458F38799C5CDD40A19B413500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7042e626-abfd-38c3-92c4-ac4548963ede.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     29802
IP address blocks:        108.165.112.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:79:9c:5c:dd:40:a1:9b:41:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=978ec2b6-b972-420b-bc90-304969060c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:ba:5b:31:c2:de:f1:7c:f6:35:26:2f:73:
                    bc:c2:d8:17:fc:a1:18:17:05:e4:18:b1:e8:7d:9e:
                    08:98:3a:7c:b5:4e:d6:bf:88:9f:04:0a:0b:70:74:
                    48:e9:c2:90:a8:e8:a5:0e:69:9a:e7:9a:99:90:20:
                    68:9a:74:7d:df:26:47:4b:a4:a7:cc:91:50:3b:da:
                    8b:88:58:6f:b7:59:8f:b6:40:05:16:67:69:c9:8f:
                    e3:20:cc:db:18:db:1e:53:37:0a:6b:50:4a:a2:bb:
                    b8:b1:82:66:8c:8f:fd:b2:bc:b1:d6:3b:79:54:fe:
                    35:51:5e:32:0c:c5:00:3e:bb:2f:44:a9:11:5e:19:
                    91:4a:82:71:08:3e:35:d6:a5:ba:3e:99:70:1c:a3:
                    0c:b2:c3:5d:6c:4a:c6:17:75:5d:e9:75:ed:b1:b9:
                    48:6a:1e:d3:4d:59:fa:54:27:33:f0:35:01:ea:21:
                    23:db:3e:35:2b:7b:a8:0e:73:6b:7e:80:79:23:8d:
                    2d:87:d1:77:f5:50:37:ed:ea:a6:13:0f:18:61:d1:
                    76:06:4a:83:a5:77:00:f6:bd:ec:e5:11:f7:d6:ef:
                    22:61:47:9b:63:1b:71:b9:1e:ff:97:0b:34:42:a5:
                    77:91:75:48:27:2c:ee:23:37:83:e6:8b:04:66:d7:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9D:2C:26:01:31:CC:17:1A:CF:63:69:88:C8:91:64:71:00:FA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7042e626-abfd-38c3-92c4-ac4548963ede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:63:9a:16:b3:5c:cf:b5:77:f1:b9:dc:34:77:23:f6:d4:
         14:fe:1b:5c:8d:4a:89:d3:7e:8d:aa:be:78:31:89:69:c6:bc:
         04:a2:d9:11:16:ae:b5:c4:45:de:70:f3:03:31:70:f6:84:af:
         4e:14:7f:65:bd:9a:09:f1:3b:c7:16:f3:72:f2:ca:36:9d:ac:
         59:29:b3:23:cd:65:58:1d:b9:3d:be:ac:73:b1:6a:0a:b2:d9:
         d5:0e:ff:52:b8:1b:01:be:29:e5:78:36:cf:c8:8a:f9:e0:a6:
         8a:62:d7:7a:fc:14:e4:df:b0:12:0a:1f:49:b5:d5:98:82:31:
         22:ff:fb:0d:da:01:86:6f:a8:6e:de:8c:07:22:25:69:58:6f:
         df:87:a7:6c:23:13:36:98:06:f8:15:7e:16:b6:72:99:b9:3c:
         49:c4:97:9b:bd:61:f2:d5:fe:c8:e8:aa:73:06:cb:30:9c:98:
         f8:cb:1b:74:39:c8:52:89:7f:29:4d:6d:68:43:bb:ff:31:d2:
         b6:73:dd:a5:aa:e3:28:08:d1:43:db:54:33:0a:23:4a:ff:49:
         7b:36:b6:37:31:2d:bd:5a:f4:a2:6e:b6:ab:7c:64:82:a6:a0:
         58:f1:03:e5:30:5f:92:51:27:3b:19:21:d1:9b:4f:3f:3e:fb:
         78:1b:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----