This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/035acf2e-8287-39e4-842f-3a48f99dea0d.roa
File:                     035acf2e-8287-39e4-842f-3a48f99dea0d.roa (raw, json)
Hash identifier:          qT4akSqgD0MEiJU05g+x8XQSlU7jgGELREMCdgUG560=
Subject key identifier:   21:1D:2B:7E:AD:07:26:F6:11:85:20:DD:95:16:9F:B6:E1:62:1B:F7
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285849C3DB82A495F5124EB1347968
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/035acf2e-8287-39e4-842f-3a48f99dea0d.roa
Signing time:             Tue 06 May 2025 16:38:44 +0000
ROA not before:           Tue 06 May 2025 16:38:44 +0000
ROA not after:            Mon 04 Aug 2025 16:38:44 +0000
asID:                     834
IP address blocks:        139.177.156.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:db:82:a4:95:f5:12:4e:b1:34:79:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May  6 16:38:44 2025 GMT
            Not After : Aug  4 16:38:44 2025 GMT
        Subject: CN=d70f2dfe-d950-4ed8-b6ce-646fefb3e4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:74:a2:0b:69:f6:91:aa:74:a5:5e:99:6e:aa:
                    c6:c3:e5:ef:83:ef:1b:44:2d:42:24:08:bc:6c:0c:
                    49:c2:97:8a:f6:3a:c9:9a:b3:2b:ce:32:77:ba:b8:
                    98:8e:b2:0a:de:d4:28:d7:d8:07:ea:8d:db:57:69:
                    f5:bc:b3:44:74:80:a6:58:03:06:d1:27:97:8d:8d:
                    c6:85:26:c4:47:4a:b1:80:62:98:b1:18:ce:35:bd:
                    2b:9f:eb:88:5f:01:eb:8f:7a:00:19:78:f9:f6:b9:
                    4e:55:73:74:06:aa:91:94:ba:ec:4c:78:34:ff:09:
                    77:00:da:ab:38:dd:69:3f:b1:5f:1b:62:d8:24:db:
                    a8:b5:ed:cf:71:2d:f5:11:c4:d2:59:d9:44:00:7e:
                    2c:8a:0e:18:9f:3b:c2:36:ec:5d:59:f6:1d:7d:8e:
                    b9:f2:3a:e2:30:ca:ec:03:ec:16:cf:6b:d3:cc:d1:
                    19:5a:e9:22:51:be:ad:0c:0b:57:c0:48:ae:3d:0d:
                    02:b5:b7:d5:4b:27:62:da:3a:87:6e:3b:4d:ed:16:
                    f4:67:c6:c3:1d:de:b8:bb:fc:93:8f:9e:11:19:6b:
                    94:f8:a8:69:03:65:23:29:0f:76:78:d2:18:e2:00:
                    57:86:4e:59:53:b0:20:89:e4:bd:48:a1:3f:25:b9:
                    6c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1D:2B:7E:AD:07:26:F6:11:85:20:DD:95:16:9F:B6:E1:62:1B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/035acf2e-8287-39e4-842f-3a48f99dea0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:87:01:39:49:b1:0b:9a:a4:47:84:47:21:3b:17:11:49:ad:
         d3:b8:dd:ec:92:80:5b:78:3c:d4:92:93:2e:ed:0c:81:08:e7:
         ed:58:61:f1:b0:45:d8:fb:f5:53:3d:9c:92:75:0b:b2:c9:f2:
         78:3d:51:db:c8:71:95:cf:be:54:8c:94:12:2c:9a:71:8b:76:
         01:4e:4b:49:a8:89:1c:7f:bf:3b:e0:49:d1:a5:7f:87:dc:fc:
         62:b3:2e:75:05:ca:5a:52:14:74:5f:d6:e1:1d:26:1d:28:27:
         e6:2f:45:7e:66:90:8d:02:0b:91:d0:b6:af:e2:cd:28:f1:fc:
         33:b2:06:94:11:00:52:c9:c9:50:90:2f:2b:0b:b5:80:ec:2b:
         78:82:9b:db:77:16:7a:88:ff:56:0d:68:ec:4b:81:16:d7:db:
         93:a0:27:c1:6e:41:d4:6a:6b:5b:13:c2:20:71:f7:2c:70:08:
         2c:57:93:43:a9:e1:ce:39:8e:b8:3c:0a:b5:c0:5f:c3:0a:d4:
         76:e2:17:39:48:29:25:06:76:2e:ba:d3:c2:61:4f:eb:04:04:
         ec:3b:8a:e6:75:39:a2:22:4e:05:1e:a6:b3:f2:81:98:2b:8a:
         05:b8:87:b7:29:98:34:1e:5f:fd:f5:cf:62:77:22:08:14:95:
         c0:82:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----