This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/233a0102-08e5-3132-8734-cafae1c8bd28.roa
File:                     233a0102-08e5-3132-8734-cafae1c8bd28.roa (raw, json)
Hash identifier:          jqcFltt3melTY9TAmAxmbz2rN2h7dBnkLdXDPb/E3+E=
Subject key identifier:   26:76:74:E0:4F:5F:00:AB:67:C9:55:C8:2D:1A:44:FD:F7:60:D4:06
Certificate issuer:       /CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5
Certificate serial:       010D0C9F4328584A30504001272EB09E0C532380
Authority key identifier: 3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/233a0102-08e5-3132-8734-cafae1c8bd28.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     53356
IP address blocks:        167.253.16.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:40:01:27:2e:b0:9e:0c:53:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=536a9b43-2eae-4474-a7d0-e91bc004d9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7a:f7:51:d6:89:c1:90:fa:b6:c5:d9:9b:69:
                    b7:a8:ef:92:ae:cb:13:d4:39:33:6f:c8:84:03:43:
                    ca:47:cd:5e:65:cd:53:bc:38:c7:46:a2:21:54:ce:
                    42:73:5c:fb:98:31:f3:40:ce:d3:87:3b:49:63:0c:
                    87:ed:e9:02:d3:f3:39:33:bb:46:5b:28:00:89:80:
                    e4:56:d9:e3:21:e2:30:7d:0b:8c:7f:e6:32:92:82:
                    50:cc:d8:0f:3b:a3:26:92:92:c6:79:cc:df:20:90:
                    71:96:26:03:f0:6d:e9:31:99:2e:03:0a:33:83:f3:
                    ab:4a:b8:14:83:87:f0:e5:0f:66:24:49:07:4c:56:
                    2c:fe:dc:81:59:94:50:e4:19:6f:a6:61:a8:03:ac:
                    73:65:09:83:c8:67:c5:3f:dc:07:c3:40:dc:22:ee:
                    32:9c:d1:dc:1f:b8:ba:31:55:0d:1e:63:a0:80:a7:
                    f9:11:77:97:ac:53:fe:49:d9:2e:4a:33:38:41:59:
                    9f:5f:6a:e0:0e:02:33:1c:4a:a8:64:54:3b:5b:25:
                    61:37:83:83:5f:74:bc:34:df:76:f6:00:61:cf:05:
                    7f:5c:df:4a:f6:c2:c6:46:1b:79:74:4d:18:ea:bc:
                    48:24:ab:26:fa:fd:11:f1:ca:46:3d:f3:c8:ed:70:
                    6f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:76:74:E0:4F:5F:00:AB:67:C9:55:C8:2D:1A:44:FD:F7:60:D4:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/233a0102-08e5-3132-8734-cafae1c8bd28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.crl

            X509v3 Authority Key Identifier:
                keyid:3D:CC:92:ED:AA:88:DE:1A:64:44:15:F6:EC:41:AE:0E:FF:5D:84:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4dfc51d6-7e1e-48c4-ac9b-dbc0025203b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:bc:53:5f:e7:ed:49:29:4f:58:3c:a4:36:9c:32:80:a9:82:
         6f:c0:1b:b5:1a:23:f5:87:ca:9e:b7:c2:38:11:58:ac:b2:93:
         56:a9:58:cc:1a:b8:41:01:af:80:8e:0e:db:2b:18:69:b2:22:
         5b:75:c8:35:7a:2c:fc:71:e3:81:84:4d:eb:c3:c9:8e:d6:fa:
         96:cb:d7:ee:43:92:f3:31:ed:db:7e:32:da:aa:7d:95:0b:36:
         ee:1f:32:79:ba:88:2d:7d:32:f6:77:43:89:39:91:8d:29:c7:
         95:ce:95:57:18:f7:3d:a2:64:32:76:57:a8:a8:66:75:03:47:
         18:1a:b7:a4:f8:b7:3c:28:67:41:1d:a1:df:d2:44:d3:8e:17:
         57:84:11:62:13:34:78:56:c9:3a:d4:59:c5:3b:e9:e7:c6:0f:
         64:1c:58:d5:ed:57:7c:09:48:9f:5d:7a:61:42:5e:aa:74:6e:
         03:2a:c2:61:4c:3f:02:f0:2c:53:64:7d:3a:f5:98:6c:ab:82:
         f0:dc:b9:5b:c3:98:91:64:60:83:70:ef:b4:b0:ff:88:11:26:
         1e:d4:16:dc:66:71:8a:8f:de:ce:bf:7d:40:63:82:a1:c2:67:
         2b:29:7c:dc:9d:95:e6:9e:e0:e1:f0:21:e1:ed:7c:29:3c:7d:
         41:b8:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----