This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/009d5245-5f2c-38d1-b326-3df9c38db5ea.roa
File:                     009d5245-5f2c-38d1-b326-3df9c38db5ea.roa (raw, json)
Hash identifier:          ZQK3lcWmq6SrE09ZlHXw4wLhOwAOzLzsASgtghikKh0=
Subject key identifier:   C9:80:2D:F2:E2:75:8D:AD:10:8C:B5:37:3C:FF:03:33:C2:23:E4:F1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FC5A6F0B4EC7C390EBEF46D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/009d5245-5f2c-38d1-b326-3df9c38db5ea.roa
Signing time:             Tue 01 Nov 2022 12:00:00 +0000
ROA not before:           Tue 01 Nov 2022 12:00:00 +0000
ROA not after:            Wed 07 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        158.221.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c5:a6:f0:b4:ec:7c:39:0e:be:f4:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  1 12:00:00 2022 GMT
            Not After : Dec  7 05:00:00 2022 GMT
        Subject: CN=a586bc7f-5f67-4172-967b-c8950da56831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:f5:a8:51:54:cd:0b:c6:47:b9:16:f7:aa:
                    da:ce:49:63:20:82:0d:a1:13:b5:4d:a6:b9:65:6c:
                    ec:ec:72:ae:2b:46:2f:9d:3d:a1:11:1e:35:c5:e0:
                    23:20:7d:ca:a3:18:7b:04:61:37:46:d4:8c:05:b5:
                    ec:55:5e:06:81:1a:14:71:d5:5e:07:0d:21:60:8f:
                    c8:3e:4c:91:86:21:e2:20:85:81:e9:74:a0:e1:1d:
                    74:ba:6a:3b:5f:8e:7e:ef:e6:cf:35:d5:f9:f9:ad:
                    ea:d2:c2:11:6c:5f:6d:60:e3:29:ad:23:25:d5:f5:
                    ce:00:20:af:bc:f5:56:bd:b6:1a:44:93:92:d3:d6:
                    e4:cd:f3:ef:81:bb:32:a3:7c:cb:72:21:95:b6:a2:
                    3c:04:80:49:4b:4f:e8:e9:a9:77:2a:82:8c:7b:5a:
                    3b:19:16:9a:6f:1b:31:dc:60:9a:e6:4c:fe:77:db:
                    42:31:21:f1:bc:49:e0:02:c4:c3:dc:08:23:a1:1a:
                    15:b1:35:a6:3c:73:e5:f7:09:b4:93:3d:16:79:71:
                    58:5a:8a:da:96:b3:af:30:bf:f8:1e:06:f7:12:31:
                    69:2b:f5:39:06:c7:a7:21:82:be:3e:3a:8d:e8:1e:
                    b0:46:6c:5d:04:cb:20:ba:b9:85:64:f7:a6:9d:38:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:80:2D:F2:E2:75:8D:AD:10:8C:B5:37:3C:FF:03:33:C2:23:E4:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/009d5245-5f2c-38d1-b326-3df9c38db5ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.221.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e5:7d:31:44:2a:28:e6:25:27:aa:da:e8:59:e4:22:5b:0b:
         d0:c0:ec:38:a8:e2:23:74:3f:53:ac:4f:f2:f9:29:f4:10:48:
         f0:ef:b4:94:b0:bf:a8:c9:37:dd:3b:b7:4e:2d:f8:ad:d5:5c:
         97:11:eb:1b:6e:44:60:a9:b4:87:c9:8d:44:79:48:d8:bd:00:
         dc:f1:8f:fb:ec:c3:b5:08:bd:4a:e0:e9:1e:8f:06:62:15:7c:
         58:54:a9:a2:b8:5c:b6:cd:96:a3:92:7a:63:54:25:be:17:50:
         a4:92:cc:63:30:d9:1c:fe:43:13:21:85:3f:c6:6a:e0:5a:3e:
         25:8e:8d:b4:76:f3:6a:08:80:eb:c0:66:d8:65:91:9a:7b:70:
         e2:62:1e:f3:c2:74:de:ff:30:d0:bb:75:c2:a9:9c:1f:d5:bb:
         33:22:18:f0:4a:19:aa:e5:4b:c6:11:b2:76:c9:90:65:d5:fe:
         9f:d7:d5:42:77:74:85:25:aa:2f:1c:00:08:bc:ea:28:45:50:
         e4:84:97:6d:ea:4d:7d:42:4a:87:d6:e5:56:25:e6:66:de:d8:
         84:19:d6:17:75:90:16:d7:4a:13:ee:ad:93:d2:08:ed:f2:90:
         42:25:9c:d4:a9:43:54:d7:1a:ed:a2:6c:5d:92:b6:6a:72:8a:
         88:45:0d:24
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/FpvC07Hw5Dr70bQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwMTEyMDAwMFoXDTIyMTIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
YTU4NmJjN2YtNWY2Ny00MTcyLTk2N2ItYzg5NTBkYTU2ODMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc31qFFUzQvGR7kW96razkljIIINoRO1Taa5
ZWzs7HKuK0YvnT2hER41xeAjIH3Koxh7BGE3RtSMBbXsVV4GgRoUcdVeBw0hYI/I
PkyRhiHiIIWB6XSg4R10umo7X45+7+bPNdX5+a3q0sIRbF9tYOMprSMl1fXOACCv
vPVWvbYaRJOS09bkzfPvgbsyo3zLciGVtqI8BIBJS0/o6al3KoKMe1o7GRaabxsx
3GCa5kz+d9tCMSHxvEngAsTD3AgjoRoVsTWmPHPl9wm0kz0WeXFYWoralrOvML/4
Hgb3EjFpK/U5BsenIYK+PjqN6B6wRmxdBMsgurmFZPemnThZ6QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMmALfLidY2tEIy1Nzz/AzPCI+TxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDA5ZDUyNDUtNWYyYy0z
OGQxLWIzMjYtM2RmOWMzOGRiNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnt0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaeV9MUQqKOYlJ6ra6FnkIlsL0MDsOKjiI3Q/U6xP8vkp9BBI8O+0lLC/
qMk33Tu3Ti34rdVclxHrG25EYKm0h8mNRHlI2L0A3PGP++zDtQi9SuDpHo8GYhV8
WFSporhcts2Wo5J6Y1QlvhdQpJLMYzDZHP5DEyGFP8Zq4Fo+JY6NtHbzagiA68Bm
2GWRmntw4mIe88J03v8w0Lt1wqmcH9W7MyIY8EoZquVLxhGydsmQZdX+n9fVQnd0
hSWqLxwACLzqKEVQ5ISXbepNfUJKh9blViXmZt7YhBnWF3WQFtdKE+6tk9II7fKQ
QiWc1KlDVNca7aJsXZK2anKKiEUNJA==
-----END CERTIFICATE-----
Generated at Sun Dec 21 02:59:11 2025 by rpki-client