This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ee856cd-65b8-3fa5-b87d-e2d0f4771bb4.roa
File:                     2ee856cd-65b8-3fa5-b87d-e2d0f4771bb4.roa (raw, json)
Hash identifier:          pjoDL8sy5mRH388TObLrRiNXOeXdgGcEu94VUUp2tSo=
Subject key identifier:   43:06:55:7D:91:ED:98:90:FB:2D:37:B3:96:44:37:50:2F:8D:B6:5D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A0B6AD707321F0AABE1CE00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ee856cd-65b8-3fa5-b87d-e2d0f4771bb4.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.222.40.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:0b:6a:d7:07:32:1f:0a:ab:e1:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8d98f5db-8446-4691-b280-3a31ee20a643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:86:a9:e2:18:f6:6b:96:de:04:ed:e4:2f:
                    e2:85:e5:65:7f:e1:5d:b8:5d:19:0b:0a:be:56:6c:
                    35:16:77:c1:33:3a:6b:5e:83:07:01:04:40:f3:ca:
                    89:5a:c2:df:31:cc:a9:48:a5:6a:c0:f1:dc:19:be:
                    96:82:6a:a2:88:dd:35:d2:d5:c0:ac:4d:c6:3b:fb:
                    bb:2a:42:c6:ac:32:a0:66:83:ea:d1:ba:31:57:43:
                    e9:f4:0e:18:07:0b:94:c3:90:51:8a:26:95:0e:b9:
                    e7:44:eb:b2:1e:71:47:f3:94:fa:f2:db:a2:5a:a0:
                    bb:9e:a4:d2:01:3f:92:b1:fa:b6:47:43:98:3c:ae:
                    5b:58:d7:72:65:d3:a2:97:18:ae:1e:80:9f:ef:57:
                    b0:c5:4b:96:72:36:20:6d:a4:d1:c3:bb:7c:60:37:
                    a0:9c:ea:5f:73:8f:25:43:78:b7:74:2a:41:a2:aa:
                    33:5a:58:73:7e:b4:3f:32:e4:a9:2b:da:78:7d:f0:
                    64:0b:e0:36:63:0c:b8:45:1a:8d:d8:df:0e:ba:a9:
                    ef:40:ec:2d:7a:a6:2f:bf:43:46:bc:31:12:47:f0:
                    c6:41:54:e8:b0:e3:ba:c7:17:0f:df:9d:f6:50:4c:
                    45:18:ef:8a:27:8f:1d:56:a6:d6:47:73:51:6e:89:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:06:55:7D:91:ED:98:90:FB:2D:37:B3:96:44:37:50:2F:8D:B6:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ee856cd-65b8-3fa5-b87d-e2d0f4771bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.222.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3f:1d:b6:36:7b:45:b5:a2:1c:72:c3:a2:72:cf:d0:1c:a9:
         8d:8f:7e:c1:d7:9f:b6:79:f2:65:0c:bf:05:d0:c9:93:a8:95:
         e2:06:8a:d8:3a:b3:5b:db:02:39:a7:af:51:7f:49:2c:d9:14:
         92:4e:f0:7e:31:57:b0:41:78:db:05:68:f0:3b:81:89:e5:0e:
         ae:f7:69:7d:7d:84:8e:41:87:36:69:31:31:52:07:74:31:e8:
         fe:b9:00:e9:7a:40:cd:0c:94:a1:44:19:15:9b:ee:78:0a:11:
         6f:e3:2c:6e:7a:84:44:d8:38:c6:b0:44:4e:db:59:0d:6a:d3:
         f2:8e:29:ce:26:68:75:b1:b7:8f:7c:52:0d:dd:14:4f:a8:e3:
         1c:fe:f1:53:98:c5:b7:2a:09:4a:d2:c3:54:bc:f8:04:55:99:
         ab:f9:dd:e4:e5:57:4d:3e:8a:c6:5c:98:38:62:07:fb:1b:6e:
         8b:1f:b8:0a:a0:06:7b:15:38:06:76:7d:5d:a7:7b:19:32:6a:
         2a:78:c4:a9:dd:78:5c:47:d9:18:35:a4:63:49:cb:df:42:9f:
         5a:e0:bb:e5:54:24:84:db:2f:e3:1e:c7:95:56:2e:46:5f:60:
         60:50:6a:8c:f7:97:f6:a3:0b:be:c5:7e:4d:6c:86:e5:a2:17:
         50:b8:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:14:02 2025 by rpki-client