This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb18ab48-6a36-39d9-b94d-576cdf0203c8.roa
File:                     bb18ab48-6a36-39d9-b94d-576cdf0203c8.roa (raw, json)
Hash identifier:          RQF5iO/F1Cmf4U/1BocgQiBL6mA5BzB78eQyYLNEYQ8=
Subject key identifier:   A3:33:65:96:A4:37:61:F9:BA:00:B3:52:71:3C:3E:39:D7:3A:4E:31
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858429CA8E37D9275CBDBD4C5F1A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb18ab48-6a36-39d9-b94d-576cdf0203c8.roa
Signing time:             Thu 20 Jul 2023 18:11:39 +0000
ROA not before:           Thu 20 Jul 2023 18:11:39 +0000
ROA not after:            Wed 18 Oct 2023 18:11:39 +0000
asID:                     11798
IP address blocks:        166.1.96.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9c:a8:e3:7d:92:75:cb:db:d4:c5:f1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jul 20 18:11:39 2023 GMT
            Not After : Oct 18 18:11:39 2023 GMT
        Subject: CN=b6929035-2fc9-42d7-b9d5-e0cd57406fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:3a:02:00:70:b4:7b:d6:2c:ce:d7:eb:ef:
                    a9:aa:c7:70:2d:21:70:1d:bf:7d:86:8b:32:02:59:
                    ee:31:83:0d:23:07:3e:f4:18:2b:54:2d:0a:14:2d:
                    4a:ca:86:19:61:43:21:5b:44:8d:45:8b:5e:10:8e:
                    cd:4a:bf:8b:0a:26:5d:ee:65:cf:e2:71:87:ae:b7:
                    ce:a1:1e:e3:14:ee:bb:12:e2:c0:cf:db:f1:bc:67:
                    0d:67:5a:5b:4d:e5:96:bb:8e:5a:07:59:1d:ab:d8:
                    48:8c:41:cf:7c:ea:5b:fd:3f:22:e8:75:85:b6:5b:
                    83:ab:96:52:1c:91:fb:3c:65:a6:8a:e1:f3:d5:8f:
                    69:db:99:9b:88:20:ac:a1:f3:fa:bf:68:20:be:9a:
                    7f:54:db:53:36:0d:45:c0:d9:86:31:a7:9a:fb:2f:
                    4b:10:5a:ac:f6:a5:4e:55:3b:31:e2:33:94:ac:a0:
                    1e:01:36:78:9d:22:80:6e:9e:8c:4b:de:f9:36:22:
                    8d:61:13:8f:db:46:da:f3:9c:96:41:53:62:50:ab:
                    68:3f:69:12:e1:db:a6:b6:28:9e:68:03:72:93:f4:
                    b2:a2:77:d0:d1:c5:87:f4:ce:2d:5a:76:29:95:cf:
                    4c:91:6a:f1:ed:ab:77:72:81:3a:01:af:56:19:14:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:33:65:96:A4:37:61:F9:BA:00:B3:52:71:3C:3E:39:D7:3A:4E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bb18ab48-6a36-39d9-b94d-576cdf0203c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:89:15:f3:f9:58:a3:83:60:1e:13:a4:48:f2:c0:df:c9:ae:
         54:e4:f5:84:75:11:b7:1d:9c:4b:2d:de:c2:55:63:16:50:6a:
         21:5f:29:17:b1:a7:d7:db:99:b4:71:f9:92:e5:32:5a:9a:98:
         72:5e:b8:7f:a9:f4:e0:0e:02:25:72:93:bc:8e:f3:99:f7:29:
         e1:f7:6d:82:3d:6d:b1:fd:69:74:78:f6:d0:08:ea:bf:33:5c:
         e8:a8:f3:b0:45:f7:70:51:95:9e:a7:a8:81:b8:09:d1:ea:9c:
         cf:c5:bd:4d:9b:59:9c:ef:a9:84:41:c7:cb:cd:a4:aa:45:7f:
         ad:fe:c0:df:0b:3d:34:22:47:cb:8f:95:a9:ee:4c:54:43:af:
         46:cb:43:70:20:ea:87:bb:c6:ab:36:17:81:92:84:cb:f8:76:
         ac:12:2d:45:e3:2c:06:46:67:28:c3:a3:8b:23:1a:86:66:bc:
         ff:9b:b3:05:f4:94:08:8d:78:a7:11:b0:e8:56:fa:0e:99:1c:
         9c:2e:31:48:c3:f9:5b:37:7b:b0:4c:82:d1:c9:a3:06:5a:20:
         a4:cc:7b:06:5f:8d:6a:8a:12:be:dd:98:0b:94:86:c3:01:d0:
         ba:0f:ab:6b:93:c5:fb:1c:b8:f1:c3:d5:b6:c3:49:7f:ff:1f:
         fa:13:6d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----