This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/986d6f74-7df5-3e78-b54c-7accb969f257.roa
File:                     986d6f74-7df5-3e78-b54c-7accb969f257.roa (raw, json)
Hash identifier:          nFaJzq2iLB8IdIPXFk6aklYRCd2XJmeP60oYKuE9o1Q=
Subject key identifier:   83:AB:A0:57:8B:43:63:50:3F:06:91:1C:9F:E4:DA:C3:1A:7D:FD:FC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858412334CFE085B28C43D001C940
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/986d6f74-7df5-3e78-b54c-7accb969f257.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 09 Jun 2025 04:00:00 +0000
asID:                     207279
IP address blocks:        166.0.133.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:23:34:cf:e0:85:b2:8c:43:d0:01:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun  9 04:00:00 2025 GMT
        Subject: CN=cd63721c-5f8d-4cf8-8d1b-8004d3cc7b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:50:60:02:e6:e7:f5:c3:9d:a2:a9:dd:95:89:
                    6f:ca:1f:4a:bf:d9:ed:08:a3:ae:3c:97:56:a9:3d:
                    a7:92:35:46:f5:f7:76:05:d5:66:42:8b:35:8b:6c:
                    83:7d:ff:d1:7f:47:2d:2f:0a:b7:91:d9:ff:b0:c5:
                    c0:ee:12:2c:fe:37:81:3c:c5:91:0e:cb:b1:1c:2d:
                    3d:55:54:de:83:30:a1:61:61:2e:0f:f0:ea:2b:e9:
                    ac:6d:f6:f2:01:48:2e:4d:62:6a:69:8a:d9:2c:45:
                    b7:83:5d:89:44:ea:63:df:2a:ee:44:1b:d6:96:7f:
                    40:69:6e:16:98:b2:47:98:90:15:af:5b:19:da:ba:
                    bb:10:04:67:27:29:6c:b3:23:a3:ba:84:f8:b2:04:
                    da:f8:67:aa:26:dc:8c:77:8a:6c:71:91:33:ef:02:
                    ec:60:b5:db:81:61:cd:4c:8f:ae:0b:63:1b:ea:ea:
                    ba:93:ba:90:be:c5:c3:b6:de:ce:ff:ee:fa:47:9a:
                    00:12:de:1b:2c:3b:61:8d:73:2b:0b:c6:8c:fc:c1:
                    56:cd:2d:38:a3:a9:14:e6:e2:62:ce:d9:f6:93:31:
                    88:d9:21:4d:ab:f1:aa:e4:64:bc:40:6e:76:d5:a0:
                    5a:8a:00:e6:3d:fc:3a:09:26:a2:10:75:3a:a6:34:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AB:A0:57:8B:43:63:50:3F:06:91:1C:9F:E4:DA:C3:1A:7D:FD:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/986d6f74-7df5-3e78-b54c-7accb969f257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:dc:e4:c8:87:c3:47:90:56:ac:7a:5d:fe:e7:e1:94:c6:10:
         0b:17:c0:51:4b:8b:9b:b4:49:2b:77:7b:69:f5:4b:6b:a9:2f:
         b5:a2:59:d2:b4:d1:70:34:22:86:0d:3a:9c:01:9c:b9:83:e7:
         3b:7c:51:f8:e7:09:d0:3a:da:07:ff:3b:bb:ba:e6:3f:15:e4:
         f1:b4:64:0b:0e:93:06:67:80:01:02:c1:99:4d:1b:ce:90:05:
         b5:f1:bf:96:47:e2:61:42:76:f9:09:57:a1:f3:2f:c1:1a:bc:
         8f:39:97:88:69:cb:45:f8:f7:f1:30:3d:d9:0b:17:91:c4:22:
         4b:1f:be:f6:53:71:d0:ac:70:7e:05:72:89:31:62:6d:fd:4f:
         d9:dc:80:6b:3e:68:03:29:63:b9:0c:84:6f:f9:5c:3d:c8:90:
         07:a9:48:0c:2e:16:4d:6e:5e:fe:66:2c:ba:aa:58:40:56:c8:
         c9:cd:d6:ac:76:a8:71:00:cd:5f:56:e2:67:8c:09:d2:90:23:
         f8:ec:f3:ff:2b:99:a0:12:9c:19:24:eb:6e:ac:aa:47:ce:71:
         e0:bd:58:24:31:db:c3:f2:52:ab:5f:9e:f8:39:1f:73:95:c6:
         e1:fe:94:10:89:bd:87:d7:3b:5e:ee:55:7d:04:19:39:60:24:
         9a:62:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----