This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0012ac56-41f0-342f-b2cb-f9d9be715d60.roa
File:                     0012ac56-41f0-342f-b2cb-f9d9be715d60.roa (raw, json)
Hash identifier:          d980RUw7zL+6F0ZzHSiyDKTtRvygX4arhRhz6r5T8UE=
Subject key identifier:   A3:C7:57:60:60:C9:A2:04:C3:83:54:7A:29:FB:65:96:6A:9F:B4:1C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D59656D5D897DE247AD98DD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0012ac56-41f0-342f-b2cb-f9d9be715d60.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.50.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:59:65:6d:5d:89:7d:e2:47:ad:98:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=d136a60c-500d-4622-bc64-aed8f66a1363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4e:1f:34:0b:d2:98:e1:44:f9:91:24:36:0d:
                    aa:89:74:70:55:a3:dd:69:79:b2:32:5a:f5:14:cf:
                    0e:39:e0:0e:44:8e:6e:07:3e:4f:64:3b:76:44:57:
                    47:66:cf:90:f8:6c:61:5c:dc:6a:b4:bc:2d:2b:8b:
                    ef:26:61:d6:c0:98:0d:bc:37:84:74:a1:71:8f:64:
                    98:58:f9:45:31:a2:62:7c:15:da:f8:ef:0d:a1:b4:
                    50:30:9f:b3:3d:00:da:c8:f9:91:f9:b9:2d:e4:1c:
                    09:73:b2:8e:9d:48:06:e5:8e:cb:f8:fb:9d:cf:00:
                    6c:df:db:5e:43:07:83:f5:7b:48:81:30:f4:8e:3a:
                    56:a6:ae:95:ad:84:20:71:ca:3f:d2:46:bf:c6:d1:
                    74:c1:44:89:2d:c4:3f:41:4b:35:39:53:69:39:ec:
                    6c:de:05:6b:bb:c5:76:ef:72:b8:58:11:22:c4:9c:
                    80:37:f6:1e:42:1a:58:41:f6:89:aa:5c:cb:60:5d:
                    0b:97:c6:b0:03:72:ce:e3:bc:32:52:f9:b4:eb:f4:
                    97:8f:e8:67:ae:b6:88:2b:3e:ee:4f:1d:88:7d:48:
                    c9:98:5c:8a:6b:65:6f:77:98:c1:c3:6d:9c:d0:37:
                    a8:67:9c:39:e5:b2:92:6f:c9:6a:17:78:e0:82:69:
                    45:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C7:57:60:60:C9:A2:04:C3:83:54:7A:29:FB:65:96:6A:9F:B4:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0012ac56-41f0-342f-b2cb-f9d9be715d60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.50.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:0d:a7:6e:41:07:7b:df:9c:ac:0e:af:7b:d1:2c:48:03:be:
         95:65:ef:15:a1:58:7a:66:d0:2d:53:bc:07:7d:8a:c7:b3:70:
         3c:23:73:3f:4a:ee:04:9b:5c:8d:5b:67:10:7f:6a:41:bb:fa:
         84:1c:ca:9a:67:39:bf:5b:e5:b4:f1:77:0a:1d:e9:93:8d:e5:
         a8:d0:ac:82:3b:2d:75:31:13:00:d0:8a:fb:ae:74:5c:20:e4:
         f3:d2:11:f0:0c:a3:d7:0b:bf:f7:0f:07:94:8b:30:34:d9:a9:
         da:9a:8f:3f:7a:ee:08:ab:4c:ef:11:c8:21:ae:c6:0b:b7:9f:
         0b:fe:da:4c:ff:96:21:9c:d8:6c:17:67:cd:ae:56:28:51:5b:
         1a:ab:d5:fa:93:09:39:2e:eb:47:8a:45:f3:30:a2:96:02:b6:
         e8:20:6f:22:42:fb:9c:7a:41:90:bb:00:26:dd:e9:8c:78:73:
         1e:05:18:8c:91:6c:36:6d:a1:2e:51:c6:58:5a:1c:5e:d7:ad:
         62:b8:a4:18:15:f1:35:20:44:75:bd:5e:58:25:aa:10:fa:2c:
         3a:cb:03:ab:15:58:6d:1f:24:01:a2:b3:2d:50:a6:f9:e4:65:
         f2:23:af:68:6a:0a:4c:dd:08:1a:23:21:04:0a:06:66:82:50:
         cc:71:12:f1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1ZZW1diX3iR62Y3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDEzNmE2MGMtNTAwZC00NjIyLWJjNjQtYWVkOGY2NmExMzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE4fNAvSmOFE+ZEkNg2qiXRwVaPdaXmyMlr1
FM8OOeAORI5uBz5PZDt2RFdHZs+Q+GxhXNxqtLwtK4vvJmHWwJgNvDeEdKFxj2SY
WPlFMaJifBXa+O8NobRQMJ+zPQDayPmR+bkt5BwJc7KOnUgG5Y7L+PudzwBs39te
QweD9XtIgTD0jjpWpq6VrYQgcco/0ka/xtF0wUSJLcQ/QUs1OVNpOexs3gVru8V2
73K4WBEixJyAN/YeQhpYQfaJqlzLYF0Ll8awA3LO47wyUvm06/SXj+hnrraIKz7u
Tx2IfUjJmFyKa2Vvd5jBw22c0DeoZ5w55bKSb8lqF3jggmlF6wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKPHV2BgyaIEw4NUein7ZZZqn7QcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDAxMmFjNTYtNDFmMC0z
NDJmLWIyY2ItZjlkOWJlNzE1ZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEjIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOQ2nbkEHe9+crA6ve9EsSAO+lWXvFaFYembQLVO8B32Kx7NwPCNzP0ru
BJtcjVtnEH9qQbv6hBzKmmc5v1vltPF3Ch3pk43lqNCsgjstdTETANCK+650XCDk
89IR8Ayj1wu/9w8HlIswNNmp2pqPP3ruCKtM7xHIIa7GC7efC/7aTP+WIZzYbBdn
za5WKFFbGqvV+pMJOS7rR4pF8zCilgK26CBvIkL7nHpBkLsAJt3pjHhzHgUYjJFs
Nm2hLlHGWFocXtetYrikGBXxNSBEdb1eWCWqEPosOssDqxVYbR8kAaKzLVCm+eRl
8iOvaGoKTN0IGiMhBAoGZoJQzHES8Q==
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:46:47 2025 by rpki-client