This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/705e0a59-0a70-3ba4-93a5-0e3d8c7a0834.roa
File:                     705e0a59-0a70-3ba4-93a5-0e3d8c7a0834.roa (raw, json)
Hash identifier:          M592eowfIODiFi3UHVeWwgLiWWoHMp3Q6wBPvr58Y6U=
Subject key identifier:   E0:F4:5E:E7:83:9A:C7:BA:57:34:FA:36:B9:D3:FB:6D:DE:DF:AB:7B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309EDBC7346BB5E442D7FAE90
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/705e0a59-0a70-3ba4-93a5-0e3d8c7a0834.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.131.64.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ed:bc:73:46:bb:5e:44:2d:7f:ae:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8218808d-7722-4a56-a784-433fa1040f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:23:d1:66:c4:4a:e1:84:87:b6:7f:ac:6c:61:
                    ad:b5:2b:4d:7d:8b:7a:6f:7e:87:19:f7:3c:24:86:
                    c7:5e:ba:d1:ac:e0:91:92:34:1f:c4:76:20:2b:92:
                    b6:6a:c0:3d:05:f9:b6:ce:4a:56:25:1e:b4:66:d0:
                    9b:d2:a0:ea:ef:6a:50:28:82:05:e7:7a:41:2d:d9:
                    aa:79:db:06:1b:7e:18:bd:f6:c5:96:c4:43:05:4c:
                    16:d4:90:f8:03:40:2a:d2:bd:5a:7b:ae:c3:16:30:
                    67:ec:67:8b:c4:39:cf:d7:9c:be:60:51:df:89:f7:
                    dd:15:62:6b:d3:29:5c:6a:58:c8:9d:11:ce:67:e9:
                    90:52:6e:55:71:a5:82:64:e6:b1:90:30:61:89:1c:
                    e9:eb:16:d1:99:41:70:17:ca:35:ee:2b:be:f1:fc:
                    fe:f3:ae:b3:ba:93:4a:46:3a:94:bb:c0:34:f0:13:
                    92:1f:d7:d4:b3:11:e7:ec:fa:c2:79:0f:36:2a:b3:
                    ca:5c:37:2b:c5:ae:f3:5a:61:ba:a4:bc:01:23:1a:
                    60:2b:05:3a:57:cb:e2:e3:05:35:71:35:63:8b:44:
                    72:90:85:d1:ed:5e:54:94:a7:72:22:a8:15:2b:a9:
                    5d:b4:47:7d:6c:58:58:cf:42:dc:c0:c4:bb:6d:4f:
                    10:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F4:5E:E7:83:9A:C7:BA:57:34:FA:36:B9:D3:FB:6D:DE:DF:AB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/705e0a59-0a70-3ba4-93a5-0e3d8c7a0834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.131.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:89:4e:77:82:5b:05:93:45:07:bb:6b:fb:48:1f:99:e2:
         3b:f5:e6:1e:c1:dc:23:b2:a8:fe:66:b6:a9:5a:33:39:35:bf:
         0e:be:df:25:79:1e:06:d2:58:3b:4c:75:0e:97:bb:c3:99:1d:
         84:40:27:ef:d4:fb:6b:be:e9:bc:5c:21:a2:b4:e9:b7:a4:48:
         99:be:01:38:4c:4c:f9:1c:10:df:28:63:b4:05:c1:22:d9:a5:
         90:72:97:c5:0c:82:55:14:93:c3:b6:97:10:a2:b1:de:dc:b0:
         52:f6:aa:0e:60:be:1a:d9:e5:e8:37:06:af:53:9f:21:0a:55:
         8d:8d:26:0f:45:d2:d1:b1:55:6f:5a:e1:62:bf:b8:b6:5a:8b:
         0a:2d:73:5b:92:0d:15:39:11:50:41:3a:64:43:ee:a9:b8:4a:
         4c:19:e9:7a:92:20:3d:7f:94:23:57:8f:3c:df:34:6b:99:b5:
         56:be:14:ce:c5:b4:5e:7e:e3:03:88:42:e3:96:7f:d3:f2:e2:
         64:c9:a9:85:8a:8b:df:0a:d7:66:9f:cc:70:55:14:e9:12:4d:
         ec:c0:27:f2:48:51:b2:45:b4:af:9e:31:3a:37:4a:3b:14:2e:
         9b:3a:4a:0a:7b:ce:98:44:4d:39:a6:e5:e6:ec:55:6c:ed:3e:
         bb:d2:02:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----