This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e203232343237.roa
File:                     3230392e38372e3136372e302f32342d3234203d3e203232343237.roa (raw, json)
Hash identifier:          kjlrrtv9sYH5RIyiP/hkTfAkYCpyLXiN9222bC5wzLU=
Subject key identifier:   F1:31:6B:99:D3:5C:DE:E6:17:80:E1:2D:0A:47:32:C0:96:0E:65:B1
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       611C0EE09CF68DCEB9A60EA3A40B2141E6C3E96A
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e203232343237.roa
Signing time:             Tue 06 May 2025 09:29:36 +0000
ROA not before:           Tue 06 May 2025 09:24:36 +0000
ROA not after:            Tue 05 May 2026 09:29:36 +0000
asID:                     22427
IP address blocks:        209.87.167.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 29 Jul 2025 00:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1c:0e:e0:9c:f6:8d:ce:b9:a6:0e:a3:a4:0b:21:41:e6:c3:e9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: May  6 09:24:36 2025 GMT
            Not After : May  5 09:29:36 2026 GMT
        Subject: CN=F1316B99D35CDEE61780E12D0A4732C0960E65B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fc:6c:a2:61:96:4b:42:f1:88:ea:20:57:12:
                    8a:84:29:d6:8f:cc:ef:2f:1f:27:e0:13:f0:b6:03:
                    64:8c:8e:00:a0:3b:09:f9:7c:ba:0b:37:6b:f3:85:
                    3d:50:b8:29:d0:e5:08:66:8e:29:b8:50:38:c2:81:
                    49:96:3a:58:8c:4a:99:c7:ab:42:89:95:93:4c:fd:
                    29:68:76:24:20:47:34:17:38:e6:29:be:86:3f:7d:
                    28:70:9c:81:f7:a0:a8:f2:92:f7:de:e8:18:58:a1:
                    d5:66:ee:09:29:d6:5a:a4:00:6a:05:05:53:fa:93:
                    eb:cf:ac:aa:08:0c:52:50:a3:0d:3a:b8:95:50:51:
                    12:91:33:01:6e:72:08:11:0e:b5:17:7b:c8:8a:23:
                    26:68:58:d4:cc:a9:5a:c8:f1:24:12:64:01:05:8a:
                    6a:c7:fe:b0:46:1d:9e:ee:7b:eb:42:5e:5e:e3:17:
                    91:6c:96:fd:9f:44:7c:62:61:75:1e:e5:ce:1a:da:
                    9b:b6:9d:f1:e8:ac:9f:48:02:dc:8f:1f:7a:73:f6:
                    3f:b2:f2:dc:23:fe:c9:03:57:b4:43:3f:9a:ed:0b:
                    59:b5:0f:4b:7c:b4:dc:ef:ec:52:09:dd:9b:f9:68:
                    28:33:17:46:f4:33:f7:80:c9:a0:80:52:bf:16:3e:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:31:6B:99:D3:5C:DE:E6:17:80:E1:2D:0A:47:32:C0:96:0E:65:B1
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e203232343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:55:08:ab:e9:5f:37:87:6c:2f:cd:e2:40:a5:88:0a:29:df:
         51:7c:a9:52:9c:38:07:f5:86:ff:53:d5:7e:fc:3b:9d:bb:5e:
         66:c8:ba:d0:32:be:db:9b:7b:77:f4:84:16:f0:f0:42:34:e6:
         b5:cd:db:ee:05:6e:b0:13:9d:13:5a:ea:38:1e:ab:58:4d:3b:
         64:15:a6:89:c3:5a:90:b9:d9:15:03:7c:4f:93:21:43:f1:0f:
         83:3f:5f:b8:24:e0:a5:f9:17:8a:44:41:7e:31:59:9a:f7:6c:
         2b:1c:20:9e:c8:dd:fe:1a:58:d6:37:49:32:87:bb:c7:30:0b:
         51:1b:1e:66:cf:a3:fb:2d:99:b1:22:ec:bd:bb:56:a9:7a:ad:
         88:66:0b:24:92:05:05:ed:a9:1b:80:bd:1e:20:8b:dd:42:06:
         01:50:6f:41:eb:ec:6b:16:d4:05:92:fc:f4:8b:f7:9a:4c:05:
         8c:13:10:4d:11:71:f0:8a:63:70:c6:a8:3f:c1:23:da:22:7d:
         17:6e:e1:ed:5e:f6:2a:9a:38:8e:1a:e4:10:be:7c:c7:6d:73:
         d6:64:c4:dd:6d:81:df:10:86:0e:23:33:72:1d:b3:94:c2:28:
         f2:ba:16:8f:8f:90:75:fe:1f:eb:02:f5:8c:9a:fa:2f:ae:25:
         58:3a:bf:f0
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUYRwO4Jz2jc65pg6jpAshQebD6WowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj
YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUwNTA2MDkyNDM2WhcNMjYwNTA1MDkyOTM2
WjAzMTEwLwYDVQQDEyhGMTMxNkI5OUQzNUNERUU2MTc4MEUxMkQwQTQ3MzJDMDk2
MEU2NUIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfxsomGWS0Lx
iOogVxKKhCnWj8zvLx8n4BPwtgNkjI4AoDsJ+Xy6Czdr84U9ULgp0OUIZo4puFA4
woFJljpYjEqZx6tCiZWTTP0paHYkIEc0FzjmKb6GP30ocJyB96Co8pL33ugYWKHV
Zu4JKdZapABqBQVT+pPrz6yqCAxSUKMNOriVUFESkTMBbnIIEQ61F3vIiiMmaFjU
zKlayPEkEmQBBYpqx/6wRh2e7nvrQl5e4xeRbJb9n0R8YmF1HuXOGtqbtp3x6Kyf
SALcjx96c/Y/svLcI/7JA1e0Qz+a7QtZtQ9LfLTc7+xSCd2b+WgoMxdG9DP3gMmg
gFK/Fj4KhwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFPExa5nTXN7mF4DhLQpHMsCW
DmWxMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv
NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi
Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlNTIzODFkMDE4ZTg1
OTM4ODRkMmEzMC8wLzMyMzAzOTJlMzgzNzJlMzEzNjM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMjM0MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANFXpzANBgkqhkiG9w0BAQsF
AAOCAQEAXlUIq+lfN4dsL83iQKWICinfUXypUpw4B/WG/1PVfvw7nbteZsi60DK+
25t7d/SEFvDwQjTmtc3b7gVusBOdE1rqOB6rWE07ZBWmicNakLnZFQN8T5MhQ/EP
gz9fuCTgpfkXikRBfjFZmvdsKxwgnsjd/hpY1jdJMoe7xzALURseZs+j+y2ZsSLs
vbtWqXqtiGYLJJIFBe2pG4C9HiCL3UIGAVBvQevsaxbUBZL89Iv3mkwFjBMQTRFx
8IpjcMaoP8Ej2iJ9F27h7V72Kpo4jhrkEL58x21z1mTE3W2B3xCGDiMzch2zlMIo
8roWj4+Qdf4f6wL1jJr6L64lWDq/8A==
-----END CERTIFICATE-----