This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4db556c-ed99-346c-97cc-99a6330e6e71.roa
File:                     a4db556c-ed99-346c-97cc-99a6330e6e71.roa (raw, json)
Hash identifier:          VZ4P/j6ilSjhVsY+Dc7LtujrogI3Sl4s0vGwEuVtbE4=
Subject key identifier:   8F:21:E0:73:E8:D4:A4:40:06:3A:35:7A:2D:40:C6:CD:48:45:EE:AA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309F6C53438674CF5F2466000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4db556c-ed99-346c-97cc-99a6330e6e71.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.231.0.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f6:c5:34:38:67:4c:f5:f2:46:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ae2b4d00-903f-4638-a909-703fc60b51a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a0:eb:ed:67:9c:f2:45:0d:c4:cd:2f:23:27:
                    6a:0f:94:bf:ff:38:a6:e0:bd:73:8b:9f:a0:5b:29:
                    1d:66:d1:1c:6d:43:69:52:5e:ef:68:c2:46:55:ad:
                    57:41:ef:b3:f5:d9:da:6e:a9:f4:4f:4d:c0:90:db:
                    52:e3:8d:55:49:3c:a8:f1:fa:4b:91:86:f4:a2:c8:
                    5c:95:b4:b5:82:57:a9:74:e8:74:c1:df:53:64:a4:
                    53:37:a2:a4:06:ae:f1:75:fb:34:15:10:5c:4f:00:
                    ec:52:7e:dc:c5:6e:04:21:0c:f5:32:5a:68:d6:29:
                    6f:fa:c4:6f:4e:da:aa:f3:99:bc:be:fa:ac:ed:65:
                    2f:3c:16:d0:96:c6:d2:8a:18:df:bf:2a:4d:6a:b7:
                    c5:c1:b1:1c:fe:a4:6c:63:e8:f3:d8:db:13:af:46:
                    bd:f2:64:1d:14:64:b3:16:10:b3:75:ea:cf:04:4e:
                    46:d0:02:04:ff:b9:c3:c0:e8:38:a0:58:8d:3b:f7:
                    96:37:8c:ca:3d:47:3a:6c:f6:66:71:70:5a:6a:ef:
                    f6:cb:80:1c:1c:26:1c:bf:2d:6c:1e:f7:79:3a:89:
                    c6:64:74:e4:3b:90:22:8e:e1:77:a6:e0:0c:43:b3:
                    ad:0a:58:c4:c0:cc:a0:59:38:75:93:cb:ed:36:97:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:21:E0:73:E8:D4:A4:40:06:3A:35:7A:2D:40:C6:CD:48:45:EE:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4db556c-ed99-346c-97cc-99a6330e6e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.231.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:19:77:79:3b:98:c7:01:0b:16:ed:7c:47:21:6a:ac:06:aa:
         4c:22:9f:73:91:5e:4f:b9:1e:f7:08:5d:40:ce:66:ce:36:59:
         6f:c8:e7:f1:48:9d:b6:25:3d:e5:76:40:cd:a5:dd:dd:83:8b:
         0c:92:a1:8b:b2:2b:2e:bc:90:b9:bc:a4:53:71:a3:68:09:c0:
         8f:da:65:25:77:c0:06:5e:4c:d1:7b:d7:3c:35:4e:c5:38:75:
         89:0b:2f:ca:54:42:4b:02:ce:77:67:bc:7c:b8:0a:84:c5:f0:
         c2:ed:01:e3:3a:2c:18:02:6a:92:4f:e0:5c:9f:df:fb:7c:ea:
         69:54:64:8f:18:6a:b8:88:16:67:96:fd:a9:7b:c9:9a:a8:3e:
         12:5f:d4:ae:83:7b:6b:77:e2:66:d4:59:52:8f:6c:11:51:ea:
         26:04:32:c2:05:ca:13:d5:4f:3f:ed:1e:7a:07:a1:ba:bd:43:
         be:57:99:9c:7d:de:f9:2b:8c:a9:40:bb:e4:14:4e:3e:ca:01:
         bf:23:43:7d:08:cf:2f:16:cd:63:7c:35:e4:b3:3a:65:b0:fe:
         70:3c:4f:ce:d3:cc:eb:84:32:95:c7:2a:6c:81:79:ac:46:88:
         9a:43:04:9f:4a:59:d5:8f:69:1f:45:51:8b:60:88:0b:7c:17:
         32:b0:59:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----