This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a55d331-0a97-3895-ad75-a9d5436eeb67.roa
File:                     7a55d331-0a97-3895-ad75-a9d5436eeb67.roa (raw, json)
Hash identifier:          9daMloOcarNY7jXSkTP0hlWRTQMc2i7tPyjG+pMpLQA=
Subject key identifier:   AD:13:A1:F7:27:FA:A5:D1:A6:6C:28:0D:88:C6:82:33:5E:A2:90:8B
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584280CC09B4F5310153588EAD40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a55d331-0a97-3895-ad75-a9d5436eeb67.roa
Signing time:             Mon 10 Jul 2023 18:39:51 +0000
ROA not before:           Mon 10 Jul 2023 18:39:51 +0000
ROA not after:            Sun 08 Oct 2023 18:39:51 +0000
asID:                     11798
IP address blocks:        166.1.33.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:80:cc:09:b4:f5:31:01:53:58:8e:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 10 18:39:51 2023 GMT
            Not After : Oct  8 18:39:51 2023 GMT
        Subject: CN=26ad8102-ce13-4ead-a347-1580baebc89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:c3:fc:f6:c4:c7:cd:7f:35:db:7e:b9:50:
                    6e:be:75:48:e0:b9:74:89:56:40:73:c1:05:ba:87:
                    5d:af:02:c5:fb:24:b9:e1:da:c1:2c:19:55:54:06:
                    67:7f:da:f7:62:5f:8d:65:60:b8:c7:62:8e:b2:f8:
                    39:af:c3:cd:da:ef:e4:f2:ff:3f:67:50:cc:46:9b:
                    51:84:6c:ff:60:5b:9b:80:62:bb:fe:06:b4:dd:97:
                    57:f2:e0:b1:17:2f:35:24:44:16:ca:37:23:3b:6c:
                    a9:89:3b:40:2e:ae:d7:7b:b2:b9:69:04:0b:65:ee:
                    1e:f1:16:0d:9f:9a:a5:46:61:3c:86:66:22:6e:ff:
                    ba:96:fd:c9:ff:7b:f3:74:b4:f5:d8:67:a3:29:66:
                    6d:44:ed:27:d1:39:a4:0b:a8:8f:4c:1a:84:62:55:
                    8e:41:bc:dd:a2:fc:49:6c:fe:9e:ca:96:03:2b:34:
                    27:78:50:d7:e0:38:ef:5f:54:1c:0c:c0:34:03:dd:
                    b7:19:0d:27:79:59:23:04:ca:47:58:91:ce:fc:e5:
                    24:31:f9:30:74:0d:e0:7a:ab:4b:46:71:d8:0e:d0:
                    b3:29:a0:8d:70:70:62:67:21:04:74:89:13:e3:09:
                    0e:69:0e:52:96:05:60:c9:29:ed:92:7f:69:8b:7f:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:13:A1:F7:27:FA:A5:D1:A6:6C:28:0D:88:C6:82:33:5E:A2:90:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a55d331-0a97-3895-ad75-a9d5436eeb67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:16:9a:24:5b:41:c6:c3:6c:06:44:27:8e:ae:70:64:58:f2:
         1e:bf:1c:ab:4c:a2:8b:b3:d5:e7:a6:22:9b:ab:1e:35:7b:fa:
         aa:fb:27:5a:19:a7:3f:be:8a:e1:f4:c8:f9:45:61:27:25:f4:
         2d:7e:37:00:45:26:e0:19:13:63:28:16:26:06:35:0f:d3:fa:
         ed:3a:32:bd:83:39:24:40:d6:9d:6e:35:22:33:22:02:f0:42:
         f1:2f:db:eb:6c:46:b0:47:77:e0:7d:0a:cf:dd:da:4b:52:9c:
         e2:28:90:9b:8c:8d:74:27:44:a0:d3:ad:9e:1a:c7:19:f5:de:
         ec:f0:41:0f:48:be:0a:4e:f9:46:09:aa:6d:42:b6:f6:16:b0:
         6c:8f:cc:f3:52:7a:0a:c6:6c:85:9e:bf:59:1e:f7:24:2e:32:
         78:6d:ec:ac:4f:35:79:38:f5:89:57:15:bc:6c:4f:22:24:1f:
         e7:84:a1:1f:cb:72:0a:d2:8f:4c:c7:e8:84:1c:dc:3d:99:54:
         e5:89:01:d4:43:fa:25:03:53:1a:a6:2e:da:d9:96:cc:c6:cc:
         78:e7:c4:86:b8:ee:c9:3c:a0:3f:be:e3:17:c0:41:b8:39:37:
         ff:0b:97:03:55:0e:1c:7e:75:00:7a:56:70:21:8c:6c:1a:68:
         23:82:c4:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKAzAm09TEBU1iOrUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDcxMDE4Mzk1MVoXDTIzMTAwODE4Mzk1MVowLzEtMCsGA1UEAxMk
MjZhZDgxMDItY2UxMy00ZWFkLWEzNDctMTU4MGJhZWJjODljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzvD/PbEx81/Ndt+uVBuvnVI4Ll0iVZAc8EF
uoddrwLF+yS54drBLBlVVAZnf9r3Yl+NZWC4x2KOsvg5r8PN2u/k8v8/Z1DMRptR
hGz/YFubgGK7/ga03ZdX8uCxFy81JEQWyjcjO2ypiTtALq7Xe7K5aQQLZe4e8RYN
n5qlRmE8hmYibv+6lv3J/3vzdLT12GejKWZtRO0n0TmkC6iPTBqEYlWOQbzdovxJ
bP6eypYDKzQneFDX4DjvX1QcDMA0A923GQ0neVkjBMpHWJHO/OUkMfkwdA3geqtL
RnHYDtCzKaCNcHBiZyEEdIkT4wkOaQ5SlgVgySntkn9pi39Z7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK0Tofcn+qXRpmwoDYjGgjNeopCLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvN2E1NWQzMzEtMGE5Ny0z
ODk1LWFkNzUtYTlkNTQzNmVlYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgEhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKUWmiRbQcbDbAZEJ46ucGRY8h6/HKtMoouz1eemIpurHjV7+qr7J1oZ
pz++iuH0yPlFYScl9C1+NwBFJuAZE2MoFiYGNQ/T+u06Mr2DOSRA1p1uNSIzIgLw
QvEv2+tsRrBHd+B9Cs/d2ktSnOIokJuMjXQnRKDTrZ4axxn13uzwQQ9IvgpO+UYJ
qm1CtvYWsGyPzPNSegrGbIWev1ke9yQuMnht7KxPNXk49YlXFbxsTyIkH+eEoR/L
cgrSj0zH6IQc3D2ZVOWJAdRD+iUDUxqmLtrZlszGzHjnxIa47sk8oD++4xfAQbg5
N/8LlwNVDhx+dQB6VnAhjGwaaCOCxOE=
-----END CERTIFICATE-----