This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a4a46e3-6512-39a2-8049-822d3450d77d.roa
File:                     0a4a46e3-6512-39a2-8049-822d3450d77d.roa (raw, json)
Hash identifier:          OzmA9Z+XARri8LVEnaoxWw8HIxS5SImyUlw31j7nTjo=
Subject key identifier:   2B:59:0B:83:CE:83:6B:7F:7E:99:A3:B4:69:91:44:AD:F4:D8:74:76
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D5A35C67D3476635C6183220
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a4a46e3-6512-39a2-8049-822d3450d77d.roa
Signing time:             Tue 13 May 2025 01:30:09 +0000
ROA not before:           Tue 13 May 2025 01:30:09 +0000
ROA not after:            Mon 11 Aug 2025 01:30:09 +0000
asID:                     25145
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:a3:5c:67:d3:47:66:35:c6:18:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 13 01:30:09 2025 GMT
            Not After : Aug 11 01:30:09 2025 GMT
        Subject: CN=765d0e67-cca5-4e53-91a1-60a423d3796a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:23:8d:ff:93:84:7b:df:70:de:b3:c7:4a:3f:
                    30:e9:49:9f:82:a6:33:17:6e:58:42:d3:fd:fa:8a:
                    2b:54:e9:9a:bc:99:96:10:ac:35:40:0c:e7:1a:16:
                    ed:d6:f7:c4:f4:bb:ae:7f:b5:92:9d:9c:dc:67:da:
                    2a:98:32:4a:48:a0:cd:ef:ce:3f:5b:66:5f:f0:27:
                    23:ee:3f:00:9a:6c:1d:0d:a5:ef:27:95:7c:de:22:
                    3c:3f:4a:52:5d:2c:86:cf:c2:8f:eb:d7:2a:cc:34:
                    3f:73:de:17:1a:0e:40:8f:47:86:11:58:33:22:d8:
                    01:9a:e4:6e:a5:56:3c:fe:ce:05:e9:39:ca:4c:a9:
                    2a:79:c1:78:c2:c2:37:f9:48:8d:94:a3:db:e7:fe:
                    50:96:46:fc:5a:ab:a2:83:58:35:b0:dc:05:3d:a8:
                    19:7d:bc:3a:9d:dc:de:a3:3f:82:1a:1f:a2:9d:3a:
                    86:49:2a:32:35:7e:fd:63:8d:0b:47:63:b3:09:13:
                    f6:af:6b:3b:d2:a2:61:90:79:30:cc:54:23:03:e0:
                    6b:ba:e5:81:d8:e5:00:68:03:7c:27:35:b0:08:92:
                    55:9d:49:8f:cd:88:2c:b8:cd:fe:a8:8a:f1:a3:b1:
                    67:3b:d2:4d:6f:c7:e3:02:6a:f9:82:cd:34:2b:da:
                    0a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:59:0B:83:CE:83:6B:7F:7E:99:A3:B4:69:91:44:AD:F4:D8:74:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0a4a46e3-6512-39a2-8049-822d3450d77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:d1:6c:ab:03:05:25:cb:eb:99:b1:9b:80:7d:59:10:a0:8e:
         de:26:c5:85:24:eb:bf:e5:82:21:94:1a:ad:b8:bf:00:14:09:
         42:f3:9c:fa:0b:74:b6:de:f6:34:3f:f5:ad:e8:1c:20:f8:93:
         b6:d1:29:c2:ab:c8:52:14:14:9c:be:76:2b:98:9c:05:32:3e:
         dc:d5:ec:dd:ed:b6:8c:bf:02:fc:2c:df:ec:67:8a:3a:1f:af:
         29:36:9c:2c:e2:42:08:65:3d:6a:17:77:39:7a:eb:ac:17:09:
         77:cb:55:77:53:73:c0:65:1e:9b:49:1c:f8:c5:d5:7e:57:0c:
         79:a2:f4:77:11:03:01:d1:bb:19:44:f2:74:74:19:a2:bc:3f:
         1b:77:d7:84:7f:2b:bd:94:d3:5b:48:5d:51:a8:19:59:0f:8e:
         61:de:51:ed:1c:09:24:75:d5:ac:1d:b8:dd:38:d5:98:83:56:
         11:40:7c:90:9a:c5:7c:5a:fe:a6:62:c2:be:1b:db:74:59:be:
         0e:d0:08:91:bd:25:54:b8:ff:0c:58:51:7e:17:39:bc:6b:14:
         34:a5:3b:e7:35:68:43:81:e0:c8:f4:6f:0b:38:23:de:ef:06:
         6e:23:61:5e:61:78:fc:af:e3:92:12:45:72:2f:16:c9:90:d5:
         2a:2e:dc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:44:50 2025 by rpki-client