This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/aac4fb89-bd46-340e-b298-772c52383018.roa
File:                     aac4fb89-bd46-340e-b298-772c52383018.roa (raw, json)
Hash identifier:          /yoSloxemuDSXNZr6ZHVRF2VPt0hYXIpVUKkxJEhKS0=
Subject key identifier:   4C:64:F5:88:36:E4:C8:99:21:F2:0B:D1:50:AE:BA:B5:65:7E:8B:09
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F4328584925B3A6F66E5E970F9B1E8AC0
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/aac4fb89-bd46-340e-b298-772c52383018.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     213738
IP address blocks:        136.175.225.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:a6:f6:6e:5e:97:0f:9b:1e:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=4731e12c-04f5-40cb-8059-cd8cb5211236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:60:9d:98:83:6f:05:19:d6:6b:4c:b7:e9:23:
                    77:8a:2d:2a:4e:6c:e7:6a:22:07:13:27:54:53:66:
                    aa:6f:9a:88:67:60:9e:b9:28:db:3b:11:20:7f:fd:
                    54:65:36:d6:74:1b:08:d5:50:78:fb:5d:ad:19:41:
                    07:e5:82:c4:28:04:ad:54:a1:01:4b:7d:81:f1:bb:
                    2a:c3:3a:3c:62:60:06:b0:63:5b:65:42:5d:0c:bd:
                    4c:18:e4:e3:71:c1:8e:03:ea:a5:35:11:87:2e:33:
                    4a:ce:c7:d9:ca:0f:16:cb:9a:72:60:19:25:d5:1f:
                    23:c1:ca:d6:3c:05:23:d3:2d:34:a7:fd:43:98:d5:
                    f9:f3:14:9b:25:c3:60:68:e6:39:c2:75:2d:4f:f9:
                    86:b1:07:9e:a1:e8:56:0a:56:ed:7b:ca:f1:0f:d8:
                    f6:72:de:2c:7b:39:41:33:04:99:36:97:99:85:d9:
                    41:9a:b8:28:b9:8f:dd:92:ed:7a:d1:88:eb:bf:17:
                    20:97:42:46:4b:ba:36:05:fa:a8:42:19:9f:14:54:
                    81:3f:43:82:38:54:8b:cb:39:9c:b2:27:33:79:82:
                    1b:a9:0b:8d:63:58:5a:1e:61:f9:e1:5e:1b:2e:23:
                    43:7d:4a:63:87:af:84:e9:4f:9e:ab:59:1e:5f:67:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:64:F5:88:36:E4:C8:99:21:F2:0B:D1:50:AE:BA:B5:65:7E:8B:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/aac4fb89-bd46-340e-b298-772c52383018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:84:9c:6a:13:70:63:90:41:31:f4:6c:bf:c7:bd:43:44:1d:
         83:2c:02:d1:e0:22:d2:19:bd:af:c5:81:06:ef:80:05:cc:cc:
         56:12:61:9f:ed:73:5a:3a:40:df:8f:02:f0:44:02:32:92:01:
         b2:0e:6f:90:f6:ba:ee:bd:f9:31:1b:62:69:61:a4:ce:bb:13:
         0d:21:08:85:25:42:c1:45:91:84:57:af:ea:9f:6e:0d:d0:04:
         dc:d7:6e:a5:fa:ee:fd:27:64:e6:3f:96:aa:90:0d:8a:fd:6a:
         f5:b5:71:0d:57:a1:6d:ae:9a:d6:39:67:a0:63:70:a7:e3:ff:
         1e:8f:62:b9:39:e9:f7:bd:67:d5:5a:0e:11:60:00:72:69:14:
         40:df:dc:22:19:3a:b9:fe:57:21:17:3e:66:50:ce:cb:5b:8d:
         c4:74:82:60:36:fe:7a:07:c2:42:0c:f7:e6:d0:0b:2c:6e:f1:
         70:05:fd:02:52:4a:94:65:64:74:0b:fc:ca:ab:90:85:20:5e:
         fb:d1:39:7f:1a:8f:12:44:16:77:f7:03:87:fc:7a:ae:0c:8f:
         59:e4:3f:d1:03:53:8f:0f:41:19:2b:11:75:8a:57:27:74:4f:
         4f:c1:ff:e4:66:b4:77:20:db:76:37:db:19:e1:c4:fa:e8:8b:
         13:26:cf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----