This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e20383334.roa
File:                     3231362e3234372e3130362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          7VQpeqNTwgZ79z82P4T3ZMiK2U2BGO1i06gb31l3Eyo=
Subject key identifier:   D1:4C:69:1E:8F:C4:8D:03:6B:32:80:4E:F9:22:54:C2:D2:71:13:A4
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       0D7BE4BB6A80279BF7BEBB202D40E0BE0EA4DBD8
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e20383334.roa
Signing time:             Tue 02 Sep 2025 00:10:07 +0000
ROA not before:           Tue 02 Sep 2025 00:05:07 +0000
ROA not after:            Tue 01 Sep 2026 00:10:07 +0000
asID:                     834
IP address blocks:        216.247.106.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 02 Sep 2025 08:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7b:e4:bb:6a:80:27:9b:f7:be:bb:20:2d:40:e0:be:0e:a4:db:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep  2 00:05:07 2025 GMT
            Not After : Sep  1 00:10:07 2026 GMT
        Subject: CN=D14C691E8FC48D036B32804EF92254C2D27113A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:68:0d:45:05:09:c2:a9:fe:ec:02:a0:23:
                    80:e3:72:76:87:b9:29:a0:3b:d1:d2:ab:27:0c:41:
                    1f:bc:0f:b8:d8:28:f6:52:1e:54:ec:d5:78:d7:54:
                    26:f7:f1:ed:27:81:20:2f:62:7c:2a:c0:33:56:68:
                    f8:46:38:66:fe:91:9e:26:5b:11:c7:8a:5b:6d:bb:
                    ac:f1:28:5d:51:d8:d7:ae:c1:f8:ad:3d:94:13:08:
                    e1:49:25:f1:2f:22:d2:64:fa:14:52:8b:23:e9:b2:
                    d7:7e:c1:a2:79:2d:68:b2:d3:88:f6:4d:68:ab:ed:
                    7a:68:68:94:be:dd:b5:61:3e:c5:98:6f:13:ea:eb:
                    21:1f:41:31:8d:b6:06:38:c6:c2:f9:17:57:43:fe:
                    77:01:92:81:c3:bc:31:b8:a7:4a:6d:e3:5a:11:82:
                    58:a0:cd:85:31:f9:9c:a2:bc:e2:82:ef:6e:fa:69:
                    b0:3e:a6:7f:64:cf:cf:12:eb:4b:6f:a2:63:cc:62:
                    ef:e7:79:d7:68:48:23:74:2d:d6:8c:da:88:99:2a:
                    42:89:68:da:ee:c7:36:c0:1b:67:a7:30:48:30:5d:
                    f8:2d:33:e6:3a:67:bc:7e:26:6d:bc:3d:1b:b3:7b:
                    0c:ab:a3:f2:68:36:6e:2c:a2:18:45:56:6d:ac:9e:
                    55:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4C:69:1E:8F:C4:8D:03:6B:32:80:4E:F9:22:54:C2:D2:71:13:A4
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:29:33:69:a4:57:bb:85:bb:a9:dd:95:b7:ae:60:05:16:90:
         2f:a6:f6:cf:d5:77:8a:24:49:77:2d:5f:d1:0b:3c:66:1e:3e:
         ce:a7:48:3a:15:78:1b:e2:54:44:db:fa:6d:d5:dc:f9:c7:71:
         cf:6b:a6:4c:6e:42:43:b2:29:29:6d:36:a1:ac:f6:db:6e:5b:
         0a:bc:ad:d7:e8:d2:f1:da:38:0a:5f:52:86:b2:e3:42:3e:67:
         92:6d:8b:f6:a7:67:a7:1c:0d:b6:7a:14:cb:e8:f5:0c:c6:8e:
         b8:19:b3:43:f3:f1:d7:ab:42:58:2e:6f:12:dc:d3:bf:ee:95:
         e1:e5:3e:fb:03:b4:40:b8:55:08:d3:58:ad:5f:58:e3:5e:2c:
         69:e0:b3:3a:9f:37:e2:6d:61:64:f8:2e:89:0d:6d:43:67:72:
         43:4c:c9:66:b5:a4:5f:1f:ef:68:45:4f:3f:f8:69:aa:89:06:
         5d:69:21:5a:07:52:15:ee:3a:d9:45:20:a0:20:65:d8:87:d4:
         04:ae:ea:b4:f5:18:8d:44:bc:39:97:c8:92:2f:79:2a:9e:be:
         06:04:9d:e5:08:78:f0:ad:72:b2:b8:d0:15:ff:4a:ec:8c:6e:
         db:a7:a1:cd:96:88:49:2f:4f:1e:fe:01:44:d2:7e:77:76:e6:
         21:32:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----