This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/bc07da42-b25f-3b39-8188-196620d13c0f.roa
File:                     bc07da42-b25f-3b39-8188-196620d13c0f.roa (raw, json)
Hash identifier:          txi9EKiy4NsIFk1qOklZKN8nzuvnfLeawIX2YnCqml0=
Subject key identifier:   65:12:8D:5B:EF:69:A0:CF:DE:74:00:C0:B5:11:06:11:ED:BC:BB:D6
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584B0B76B576505C89968587CC80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/bc07da42-b25f-3b39-8188-196620d13c0f.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     13576
IP address blocks:        64.33.224.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b5:76:50:5c:89:96:85:87:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=2755a2fd-0f2d-447f-a714-5c317d944332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:6f:a9:62:fd:96:af:e8:f8:d0:e7:82:35:
                    af:79:59:8a:12:35:71:99:12:79:4c:a7:d4:cd:8c:
                    b8:e2:f8:a3:0f:ed:99:23:82:b7:a2:45:e2:cb:9e:
                    6e:82:9b:a2:bc:4b:5c:34:64:48:18:30:7b:db:b4:
                    47:ab:af:14:dc:58:57:78:61:fa:65:45:b0:cf:39:
                    97:6a:da:b4:84:86:37:ac:8e:40:c0:96:9c:f9:fd:
                    17:a3:e1:ae:ac:e4:bb:54:0e:15:51:b2:27:c8:75:
                    f1:04:be:a9:52:68:1f:dc:a5:f7:c3:95:b2:7d:25:
                    b5:49:d6:ea:b9:b0:97:7e:32:1f:0c:cc:ba:ef:02:
                    ec:91:2c:fd:d5:59:a7:fe:1b:50:aa:aa:4f:d6:a6:
                    6d:bd:b1:88:1c:cc:b6:25:2a:f9:f6:b2:75:a7:e8:
                    6c:d9:0d:f3:cf:50:7f:5b:44:7d:49:43:79:5e:09:
                    6a:6c:c2:00:1d:10:4b:34:e9:55:6c:66:44:04:97:
                    9e:5a:81:ae:af:81:53:32:54:64:5c:ef:f7:4c:5a:
                    05:b7:be:a6:b4:3a:e4:db:d1:29:b8:6b:45:c4:e7:
                    9c:bf:38:ee:45:83:40:4d:2e:5a:75:fb:84:23:0f:
                    60:13:13:e3:c8:52:f3:e1:e3:46:c2:fd:d6:84:da:
                    5a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:12:8D:5B:EF:69:A0:CF:DE:74:00:C0:B5:11:06:11:ED:BC:BB:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/bc07da42-b25f-3b39-8188-196620d13c0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.33.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8c:21:be:90:f1:57:62:93:65:a0:2c:32:16:01:37:12:cd:
         67:e5:8a:6a:0d:37:a7:16:36:51:04:ab:83:4e:2e:a5:27:2e:
         62:f1:7e:13:f4:e7:5e:02:cf:68:3a:6f:ee:77:c0:49:0f:53:
         79:12:60:8f:fc:8c:21:d2:ce:7b:7b:5f:c2:b4:27:a2:da:cb:
         64:df:bd:d5:ec:84:a8:41:88:d2:7c:23:a2:3f:c5:54:9e:72:
         da:6a:81:ea:27:7a:1e:4e:b5:d1:59:8d:88:07:e2:10:d9:65:
         81:56:f3:ba:bc:6b:3c:15:62:4e:87:f8:e2:b8:72:0d:c7:83:
         b9:27:e5:47:08:f0:aa:92:a0:1a:fb:eb:30:8b:f2:dd:84:90:
         4c:8b:40:fd:16:19:eb:86:6b:29:04:fa:10:87:2e:b0:48:94:
         c3:84:ac:42:35:66:5f:bf:f7:53:de:1c:75:c7:0c:42:bf:8e:
         25:e0:59:35:e1:30:d5:ac:24:1a:3b:da:2c:e2:86:93:5e:88:
         80:1a:21:6d:b4:86:47:7e:cb:15:2a:92:7c:4a:a5:15:da:c5:
         8f:af:82:73:4d:30:d0:58:d8:ce:a9:80:63:83:91:1a:c8:3d:
         63:f5:f6:37:ad:42:e1:fc:68:57:ed:e9:d7:1c:1b:dc:ca:22:
         ce:99:e9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----