This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02c9939a-2fd2-3de4-a963-508e792e889c.roa
File:                     02c9939a-2fd2-3de4-a963-508e792e889c.roa (raw, json)
Hash identifier:          SAXePvYmEyjmHPvDQTerNml0OvwuDk0SsIdnK9PWVn0=
Subject key identifier:   46:50:89:80:3E:DE:B1:89:CE:CA:72:C7:31:9D:45:34:39:A1:80:FC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858409CA4DDD391FC949C1CDF3780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02c9939a-2fd2-3de4-a963-508e792e889c.roa
Signing time:             Tue 17 Jan 2023 12:00:00 +0000
ROA not before:           Tue 17 Jan 2023 12:00:00 +0000
ROA not after:            Wed 22 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        148.55.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:9c:a4:dd:d3:91:fc:94:9c:1c:df:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 17 12:00:00 2023 GMT
            Not After : Feb 22 05:00:00 2023 GMT
        Subject: CN=837109dc-0ce9-4039-850e-97c9029b0196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f3:4d:2b:dc:d6:9d:92:e5:b2:2e:dd:7a:44:
                    3c:a0:d6:40:88:2c:80:ec:6b:2f:a6:51:8e:41:ad:
                    06:44:f6:a4:85:5f:f1:2b:df:f8:dd:52:dc:3f:76:
                    8c:ef:53:d8:d7:4e:51:6a:18:da:0c:ca:45:3f:6e:
                    45:90:e4:32:df:24:a3:9f:4d:11:07:46:30:96:dc:
                    86:0b:1e:a0:bf:9e:90:07:01:a0:95:2c:aa:76:8c:
                    33:7a:71:b7:bc:b4:a2:b0:a4:01:16:39:ad:fa:0d:
                    22:e7:26:77:84:c4:70:4d:4b:47:be:21:1c:c0:4e:
                    8c:8f:cb:7d:f4:c7:69:63:0d:c2:a4:76:3a:ad:2f:
                    f2:09:a1:25:fa:88:b1:e5:a4:ee:82:62:44:dc:c7:
                    28:02:7d:d8:6b:57:1e:c6:79:0d:74:63:0c:58:b2:
                    76:1d:59:3e:42:08:07:74:8e:81:c7:d9:5a:eb:4c:
                    7f:e0:9e:8f:5b:49:11:0f:b4:65:d9:bd:f7:a2:39:
                    a7:4d:a2:a4:ef:8f:68:ab:1d:3a:b0:c2:30:db:97:
                    06:95:3b:78:74:e3:7d:41:26:8b:f0:98:5c:b6:57:
                    e1:de:c0:ef:92:93:19:02:50:a3:c8:5b:ea:9a:32:
                    a7:3e:65:5f:06:3d:b9:87:47:6b:85:fc:d0:bc:c9:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:50:89:80:3E:DE:B1:89:CE:CA:72:C7:31:9D:45:34:39:A1:80:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02c9939a-2fd2-3de4-a963-508e792e889c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c5:84:1b:6c:d3:76:3d:41:4b:ec:29:e2:0c:3e:70:81:36:
         5c:62:9b:de:6c:33:ea:ea:dc:39:00:d4:ef:dd:3b:d2:4a:2c:
         0a:12:5d:83:c7:9b:f4:11:bb:2d:a3:a9:1e:07:74:09:c1:39:
         ff:0a:d4:42:99:a9:22:47:ea:2c:9a:8f:86:5d:51:43:f0:1f:
         86:fe:d3:72:51:c4:10:b5:18:ab:04:84:6c:23:5f:04:42:a5:
         b5:8f:45:71:b5:39:f7:30:72:0f:68:05:47:09:a1:47:1b:9c:
         80:fb:19:1d:42:f0:eb:1e:45:d0:a3:92:e9:28:a0:20:de:c8:
         b5:d8:f3:49:75:ea:17:93:c7:75:d0:61:b9:4f:39:15:6d:c4:
         83:22:c5:6f:d3:d4:12:34:54:ba:e3:95:f4:02:b5:17:1d:86:
         46:bb:2c:41:f3:01:17:2b:c6:8b:5c:4f:0c:e9:74:55:fa:e9:
         2a:84:32:41:57:31:6e:08:86:85:30:45:ab:69:30:80:1d:6b:
         f6:89:7b:f5:26:24:79:ee:7f:33:58:fb:7f:51:05:8d:d8:22:
         7d:24:62:c3:ed:b4:a9:d6:99:42:c4:dc:a8:4a:ef:87:8c:1f:
         94:17:3f:47:9a:76:f4:56:ff:8d:a9:43:53:d2:91:c1:f2:96:
         3a:8a:06:19
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECcpN3TkfyUnBzfN4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExNzEyMDAwMFoXDTIzMDIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
ODM3MTA5ZGMtMGNlOS00MDM5LTg1MGUtOTdjOTAyOWIwMTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPNNK9zWnZLlsi7dekQ8oNZAiCyA7GsvplGO
Qa0GRPakhV/xK9/43VLcP3aM71PY105RahjaDMpFP25FkOQy3ySjn00RB0YwltyG
Cx6gv56QBwGglSyqdowzenG3vLSisKQBFjmt+g0i5yZ3hMRwTUtHviEcwE6Mj8t9
9MdpYw3CpHY6rS/yCaEl+oix5aTugmJE3McoAn3Ya1cexnkNdGMMWLJ2HVk+QggH
dI6Bx9la60x/4J6PW0kRD7Rl2b33ojmnTaKk749oqx06sMIw25cGlTt4dON9QSaL
8Jhctlfh3sDvkpMZAlCjyFvqmjKnPmVfBj25h0drhfzQvMk7ZQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEZQiYA+3rGJzspyxzGdRTQ5oYD8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDJjOTkzOWEtMmZkMi0z
ZGU0LWE5NjMtNTA4ZTc5MmU4ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlDcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAX8WEG2zTdj1BS+wp4gw+cIE2XGKb3mwz6urcOQDU79070kosChJdg8eb
9BG7LaOpHgd0CcE5/wrUQpmpIkfqLJqPhl1RQ/Afhv7TclHEELUYqwSEbCNfBEKl
tY9FcbU59zByD2gFRwmhRxucgPsZHULw6x5F0KOS6SigIN7ItdjzSXXqF5PHddBh
uU85FW3EgyLFb9PUEjRUuuOV9AK1Fx2GRrssQfMBFyvGi1xPDOl0VfrpKoQyQVcx
bgiGhTBFq2kwgB1r9ol79SYkee5/M1j7f1EFjdgifSRiw+20qdaZQsTcqErvh4wf
lBc/R5p29Fb/jalDU9KRwfKWOooGGQ==
-----END CERTIFICATE-----