This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e42e6d1f-2ccf-3fd7-b79a-7bd2000deca0.roa
File:                     e42e6d1f-2ccf-3fd7-b79a-7bd2000deca0.roa (raw, json)
Hash identifier:          r99V8UkVguRzRS0cP4A2RQrgfUwZJrdO0Z/+ruw9jIE=
Subject key identifier:   35:6E:F6:51:8F:AC:E3:69:18:3B:55:FF:9B:C8:E5:53:AA:D0:4E:E3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7C32D2F84EBC72AB5728480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e42e6d1f-2ccf-3fd7-b79a-7bd2000deca0.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.84.224.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c3:2d:2f:84:eb:c7:2a:b5:72:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=b56ba542-f8bd-40ce-ac36-fd5b02b9fd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:49:17:4c:fc:98:6c:a9:35:a7:09:f2:a6:
                    d1:6f:d7:fc:c5:3b:86:a0:14:c4:22:76:e5:57:31:
                    90:ea:cf:88:dd:e1:25:7a:fd:23:83:20:f2:c7:37:
                    d0:f5:a7:ac:04:85:44:92:11:23:89:3f:3b:77:04:
                    47:fb:4c:31:6c:7c:84:3e:51:ae:ed:29:1a:5c:99:
                    77:aa:f2:2e:ea:56:55:ca:68:db:07:86:ba:68:d9:
                    ab:ca:e4:ce:4b:fe:72:08:37:31:0a:79:c7:69:a0:
                    2d:cf:b4:6a:8e:0a:2e:2d:44:89:72:33:42:52:55:
                    b1:51:95:c7:ea:6b:32:bb:cb:3c:bb:83:af:2c:5a:
                    2b:57:9e:35:04:f5:22:7e:8c:71:d4:c6:36:45:d1:
                    35:f8:25:0c:8f:44:19:ba:28:3f:2a:ed:56:a5:c1:
                    ac:07:c9:7d:e4:a0:af:d7:f7:d8:be:70:72:75:f9:
                    39:b6:e3:b2:33:b9:6e:ac:79:4d:f3:6f:7a:90:0f:
                    f9:32:42:fe:93:18:65:af:87:02:de:25:9b:9f:4a:
                    32:de:4a:03:43:88:3e:4f:58:76:70:3d:9c:a0:db:
                    a1:96:68:c4:67:58:f6:b0:0e:6f:0c:c2:40:a9:44:
                    0c:cb:bf:5a:45:4a:d8:74:cd:ef:49:d5:88:4c:f4:
                    19:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6E:F6:51:8F:AC:E3:69:18:3B:55:FF:9B:C8:E5:53:AA:D0:4E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e42e6d1f-2ccf-3fd7-b79a-7bd2000deca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.84.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:6b:5b:0f:54:e5:95:2d:e4:44:eb:57:34:a7:f6:a3:8e:46:
         c7:e3:ef:8e:f8:d2:96:35:d4:47:e3:90:f8:d4:7c:42:1c:56:
         c8:92:0b:90:94:27:91:1e:34:5d:0b:03:a5:27:1e:54:eb:7b:
         18:71:03:d7:72:d0:c9:bb:20:4d:b7:ed:75:7e:66:b7:7b:44:
         34:47:2b:65:77:36:a7:d8:55:6c:c0:3c:a9:75:bb:77:99:50:
         a2:60:9a:58:16:f1:65:f2:24:05:a4:d9:a9:78:3d:8b:88:00:
         d6:78:3f:23:70:85:33:a5:fd:ea:53:b5:39:64:f1:c3:d8:fe:
         68:5b:1f:d6:b3:d8:d7:da:8c:f5:d2:14:07:7c:59:e9:20:fb:
         82:9f:3f:98:d6:8f:4d:8c:f6:a9:6c:ba:55:ce:59:48:fa:88:
         0f:98:a5:6c:2e:d3:8e:41:43:4c:50:12:26:b0:ad:e9:66:1a:
         53:cf:43:c0:77:78:67:c1:ee:e5:83:8a:a0:66:19:aa:55:e2:
         56:fc:2a:d5:da:75:f7:b9:4c:ad:48:1a:41:15:3f:1f:7f:6a:
         46:b7:ba:1c:0b:9b:3c:cd:7a:27:db:b0:5d:a6:c1:8a:ae:ed:
         85:7e:ab:20:56:88:a5:cd:52:2c:45:c4:31:2c:27:ca:33:c9:
         01:71:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----