This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b0905ad3-288d-36d9-8cce-730939f79e62.roa
File:                     b0905ad3-288d-36d9-8cce-730939f79e62.roa (raw, json)
Hash identifier:          79+vf5ZfDfysM33925A4Mt89OVmTeAas4i+vDilgNv4=
Subject key identifier:   7C:D8:F2:AB:BE:D8:17:6E:7C:CE:1F:BC:78:5A:CE:9B:35:CF:6C:98
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285840B3AE18DF993B5E2EFB3B50C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b0905ad3-288d-36d9-8cce-730939f79e62.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 30 Apr 2025 04:00:00 +0000
asID:                     834
IP address blocks:        23.26.252.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b3:ae:18:df:99:3b:5e:2e:fb:3b:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Apr 30 04:00:00 2025 GMT
        Subject: CN=d9ec110c-0f01-427c-b264-ee2353826800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ea:d4:c5:ac:f2:5d:30:3b:cc:13:62:83:5f:
                    54:67:0c:94:ff:a2:db:5a:61:cc:28:b6:d2:05:b5:
                    a1:69:f5:33:f0:40:f5:e6:20:dd:4d:09:9c:b4:90:
                    a8:09:a2:b8:1f:95:14:69:e8:3f:90:02:43:1d:28:
                    96:4a:f1:85:0e:27:cc:1c:f8:a2:78:a6:92:9d:95:
                    89:39:31:52:e9:fd:32:8d:b5:65:c3:45:f5:db:ce:
                    61:03:26:3f:3c:2f:8f:1f:bb:69:c8:56:59:67:83:
                    58:e1:05:fa:71:7f:87:d3:96:e5:31:b1:99:82:e9:
                    6a:29:90:ab:69:39:83:ba:00:73:6b:7a:ea:70:71:
                    55:8a:5e:80:1a:93:46:cc:80:3e:c1:06:2c:04:07:
                    86:54:14:c3:de:51:dd:a3:ea:80:44:d1:14:69:fb:
                    e2:c3:cf:ba:16:b3:4d:38:89:a6:88:02:08:e4:e6:
                    a3:4c:21:0e:51:01:0f:79:60:b5:3a:29:e1:7b:e0:
                    b2:b1:f5:2d:a9:58:46:f8:5b:e8:54:e7:af:9a:e2:
                    86:68:11:db:f8:02:59:74:4b:27:cc:c2:6f:da:1b:
                    5e:2d:68:5c:70:50:00:9e:63:9d:57:d1:79:04:bb:
                    6e:d2:c7:a5:3e:f7:82:64:bd:b0:b1:92:56:57:31:
                    7f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D8:F2:AB:BE:D8:17:6E:7C:CE:1F:BC:78:5A:CE:9B:35:CF:6C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b0905ad3-288d-36d9-8cce-730939f79e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:1d:9c:b4:8d:b4:c3:5a:ab:11:aa:8c:e9:33:20:ac:45:f1:
         e3:3b:e9:a9:d8:5d:3e:f1:cc:7d:05:be:79:d0:85:19:2e:d1:
         e8:7e:41:f1:7b:35:c4:67:ab:fc:40:a8:91:8c:aa:6e:d2:a3:
         f1:32:a8:8f:cf:c2:98:fe:4b:61:50:08:b9:87:48:ea:44:83:
         6e:bd:40:1e:80:1b:e5:2a:5e:94:86:c6:53:89:ab:c5:74:ac:
         66:1a:0e:d1:42:b2:7a:d1:85:5f:93:22:7e:71:4b:1c:1e:5f:
         29:7c:0e:18:c0:d7:b7:58:c9:b6:dd:83:68:af:e9:b1:d0:75:
         0b:60:20:9a:54:fc:e9:4b:9d:cd:d6:79:d8:0d:ef:be:aa:9b:
         4b:51:54:e6:8c:e7:57:75:95:2e:be:72:a0:9f:b2:dd:78:63:
         51:b7:5e:62:76:e3:0c:6b:c7:1b:e3:23:09:d7:44:72:6f:20:
         97:66:13:7f:ab:bf:da:c9:fa:63:a1:ac:9f:36:58:e8:c1:4f:
         5b:99:b1:6c:1e:72:3b:57:8c:fe:ca:6e:4f:1d:0f:5d:51:ab:
         62:94:78:95:59:39:e4:77:b1:21:cb:6a:80:d4:33:a9:9a:7e:
         3f:01:37:de:16:3d:83:87:9e:5c:ce:1f:cd:7d:8b:3d:d2:c7:
         7c:c9:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----