This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de94b6d6-562b-392b-b72a-b85d5f763e4d.roa
File:                     de94b6d6-562b-392b-b72a-b85d5f763e4d.roa (raw, json)
Hash identifier:          KAH2CIYXDlWwZ5MYEHMazdl8booCPi9uqjtw9jQgYvg=
Subject key identifier:   FF:7F:69:00:5E:B0:E5:D7:7F:A7:8E:69:76:FD:9E:18:A2:81:12:43
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7C2156BCEAEFB0D3922F700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de94b6d6-562b-392b-b72a-b85d5f763e4d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        104.196.192.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c2:15:6b:ce:ae:fb:0d:39:22:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=3b5621be-264f-456f-a8e3-749f51a49eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:99:82:7b:5e:04:b7:f9:a6:52:bb:63:68:
                    01:04:f2:e4:c3:6f:aa:66:29:85:b1:64:30:06:1b:
                    ea:74:98:6f:18:70:02:15:79:99:64:1b:a7:bb:75:
                    d7:07:e9:4b:99:19:1a:85:f8:10:71:c7:19:d9:4f:
                    e5:a8:fa:fd:94:ed:3b:fc:2e:bc:ee:e9:38:e2:85:
                    3a:8b:b4:5a:3b:55:82:5c:b5:d9:95:11:ec:f5:3a:
                    1c:d5:14:48:eb:f7:97:3d:fa:59:c1:3c:e0:f4:a2:
                    81:39:1b:9c:c3:d8:4e:f0:76:c5:0b:3c:97:49:9a:
                    ed:d9:c4:b7:98:1c:1d:17:0b:81:f2:ae:e1:e8:87:
                    f9:8e:88:e7:87:c9:19:44:99:8e:53:01:bb:5f:b7:
                    3e:2e:f3:4e:78:da:ae:97:aa:0f:f8:3a:5e:ff:8b:
                    f6:68:6e:b9:c3:e9:1a:df:5c:48:1c:b4:16:06:88:
                    cf:b5:d5:cf:65:d7:5b:56:d0:7a:80:b9:cb:04:04:
                    ef:fe:97:14:aa:09:ff:c7:cc:bd:88:18:de:c7:2e:
                    34:60:4c:90:69:69:76:65:be:9c:ca:8f:89:50:b5:
                    52:16:18:6f:d7:2b:b6:c8:2c:61:68:47:6c:58:65:
                    79:2e:3c:d3:bd:8b:a4:dd:e2:69:a9:8e:b1:06:30:
                    e1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7F:69:00:5E:B0:E5:D7:7F:A7:8E:69:76:FD:9E:18:A2:81:12:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de94b6d6-562b-392b-b72a-b85d5f763e4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:7c:2c:e4:5b:84:cb:41:89:72:e8:3e:e2:a7:ea:3f:97:3f:
         90:c3:cd:fb:8a:0e:36:ce:82:e4:e5:0e:c5:e2:20:f4:47:76:
         e0:c7:27:61:73:f6:e8:ef:92:7b:a4:f3:d1:3c:19:8a:d0:24:
         ba:72:6f:5d:d2:aa:13:9a:2e:46:ff:5e:d9:8c:fb:cb:f0:74:
         74:06:e0:1e:77:26:b2:c8:14:4e:03:17:0d:22:3f:72:7c:18:
         65:45:e4:60:6f:b7:25:ef:5d:d7:ff:88:09:a7:b4:38:60:9a:
         64:f9:48:45:ed:ca:8e:31:f5:45:94:c4:a2:49:39:47:86:f4:
         79:49:de:1e:b8:c6:5b:fd:cf:ed:e5:bd:30:3b:a1:69:67:9f:
         15:77:3a:5c:0e:23:c5:7d:85:3a:14:30:be:b0:c5:a9:7a:aa:
         a0:de:76:92:3a:38:f1:d1:91:91:bb:06:43:7c:45:fe:5c:28:
         1b:77:2d:6a:6e:84:86:1e:da:ef:c4:7f:ba:a2:ad:21:ed:a0:
         5d:3a:16:36:23:20:d1:1c:2d:d1:f0:79:17:59:a8:1e:b9:c8:
         44:8d:11:e4:16:69:ad:7f:09:2d:31:d6:af:14:90:ad:e3:0c:
         3e:e6:9e:f3:27:18:cd:b4:71:93:c8:a9:ec:c7:c5:44:a3:5d:
         16:c5:61:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnwhVrzq77DTki9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
M2I1NjIxYmUtMjY0Zi00NTZmLWE4ZTMtNzQ5ZjUxYTQ5ZWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4mZgnteBLf5plK7Y2gBBPLkw2+qZimFsWQw
BhvqdJhvGHACFXmZZBunu3XXB+lLmRkahfgQcccZ2U/lqPr9lO07/C687uk44oU6
i7RaO1WCXLXZlRHs9Toc1RRI6/eXPfpZwTzg9KKBORucw9hO8HbFCzyXSZrt2cS3
mBwdFwuB8q7h6If5jojnh8kZRJmOUwG7X7c+LvNOeNqul6oP+Dpe/4v2aG65w+ka
31xIHLQWBojPtdXPZddbVtB6gLnLBATv/pcUqgn/x8y9iBjexy40YEyQaWl2Zb6c
yo+JULVSFhhv1yu2yCxhaEdsWGV5LjzTvYuk3eJpqY6xBjDhSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9/aQBesOXXf6eOaXb9nhiigRJDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGU5NGI2ZDYtNTYyYi0z
OTJiLWI3MmEtYjg1ZDVmNzYzZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMTAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI58LORbhMtBiXLoPuKn6j+XP5DDzfuKDjbOguTlDsXiIPRHduDHJ2Fz
9ujvknuk89E8GYrQJLpyb13SqhOaLkb/XtmM+8vwdHQG4B53JrLIFE4DFw0iP3J8
GGVF5GBvtyXvXdf/iAmntDhgmmT5SEXtyo4x9UWUxKJJOUeG9HlJ3h64xlv9z+3l
vTA7oWlnnxV3OlwOI8V9hToUML6wxal6qqDedpI6OPHRkZG7BkN8Rf5cKBt3LWpu
hIYe2u/Ef7qirSHtoF06FjYjINEcLdHweRdZqB65yESNEeQWaa1/CS0x1q8UkK3j
DD7mnvMnGM20cZPIqezHxUSjXRbFYWk=
-----END CERTIFICATE-----