This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e07dff5-0137-3cb3-be1a-f4b35741b888.roa
File:                     0e07dff5-0137-3cb3-be1a-f4b35741b888.roa (raw, json)
Hash identifier:          sfh97kTmL1dt/p5BhWtluFCyOflO+w1fL5mt3jI85bo=
Subject key identifier:   5C:95:CB:59:63:AA:04:C9:33:D0:1C:EB:22:4B:2A:98:78:41:55:A9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F9E29114C309836CBCAAF3E30
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e07dff5-0137-3cb3-be1a-f4b35741b888.roa
Signing time:             Tue 18 Oct 2022 12:00:00 +0000
ROA not before:           Tue 18 Oct 2022 12:00:00 +0000
ROA not after:            Wed 23 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        146.65.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9e:29:11:4c:30:98:36:cb:ca:af:3e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 18 12:00:00 2022 GMT
            Not After : Nov 23 05:00:00 2022 GMT
        Subject: CN=efb81c62-d48a-4b9d-baad-8d7d4e243aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:28:05:b3:8d:85:70:56:82:47:ae:ce:fb:ba:
                    c9:a8:94:a8:6d:7e:6d:3e:ec:d2:59:f9:8c:d9:15:
                    f1:44:24:d4:d2:b2:ff:23:25:99:ea:36:ba:90:5b:
                    1a:9e:cc:84:8c:07:1d:7a:cd:45:63:95:e8:62:e1:
                    05:78:54:08:30:28:12:3c:6e:15:67:c7:c7:6b:8f:
                    d6:1a:55:bd:66:ee:84:e9:4d:ae:9d:2e:5f:2b:be:
                    06:56:87:8d:7f:27:ea:47:ff:2f:ea:80:93:64:66:
                    16:f5:b3:8c:7c:2b:35:07:f6:a8:77:30:86:00:93:
                    b4:cd:30:46:ec:c9:66:4a:59:ad:19:9e:94:7c:91:
                    92:fd:91:05:9c:2c:f5:39:c8:3e:c5:2d:c5:de:61:
                    83:1c:58:c8:38:f0:7c:ca:39:4a:8c:40:59:23:d3:
                    36:94:8f:39:4b:17:bc:cf:5f:88:ea:eb:d6:93:3f:
                    9e:bc:4e:2a:09:12:42:16:ae:a7:89:0a:33:27:3a:
                    17:07:bf:56:8c:6d:ce:a9:d7:f8:b4:96:bd:ff:86:
                    1d:26:c7:5a:53:b4:39:23:94:8a:d1:44:8c:24:6e:
                    07:70:9a:2a:11:29:c0:12:1c:6f:b7:7a:bd:18:07:
                    7a:a6:5d:c8:27:21:9f:f2:1d:f3:92:21:6a:95:30:
                    7b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:95:CB:59:63:AA:04:C9:33:D0:1C:EB:22:4B:2A:98:78:41:55:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e07dff5-0137-3cb3-be1a-f4b35741b888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.65.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:c3:9e:cb:c3:f0:da:33:0c:d7:05:6c:55:18:55:d7:e4:a3:
         6f:b1:d7:3a:9f:68:96:80:88:5f:15:71:17:bf:a4:ca:1f:aa:
         e0:8f:87:75:fa:0f:70:0a:3b:53:84:74:86:d7:8a:87:56:3c:
         ee:89:24:9d:6f:90:51:7b:83:e1:ff:89:9b:62:db:4c:b0:23:
         cb:08:74:c9:e4:a6:95:48:e3:a9:6e:a4:c8:79:c3:d8:6c:39:
         62:e1:20:ba:34:14:4a:36:d3:ca:ea:b8:32:34:3b:1f:72:95:
         e3:ec:6b:14:e9:ed:d4:b3:be:a8:49:e5:17:ea:2d:06:7a:f4:
         dc:9f:97:bb:39:43:8f:6a:32:76:95:68:96:66:e6:c7:15:ed:
         ca:8e:3a:af:73:ed:73:65:c5:7e:4e:bb:1e:0e:a1:3a:5f:52:
         d9:09:de:b4:e1:43:e0:12:10:5a:bc:ad:01:4d:ab:95:5f:6b:
         27:5e:7f:25:6e:75:9a:89:ba:29:15:e2:46:84:c5:0f:e2:23:
         1d:cd:53:60:76:3d:3e:e4:5d:f6:2a:e6:53:5f:8e:95:fb:21:
         1c:0a:3f:9f:07:17:3c:bc:9f:18:5c:f5:67:38:5d:55:20:26:
         e8:78:40:71:45:6c:29:80:23:8c:08:28:9b:93:8b:f0:bd:45:
         79:8a:26:c5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+eKRFMMJg2y8qvPjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAxODEyMDAwMFoXDTIyMTEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZWZiODFjNjItZDQ4YS00YjlkLWJhYWQtOGQ3ZDRlMjQzYWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CgFs42FcFaCR67O+7rJqJSobX5tPuzSWfmM
2RXxRCTU0rL/IyWZ6ja6kFsansyEjAcdes1FY5XoYuEFeFQIMCgSPG4VZ8fHa4/W
GlW9Zu6E6U2unS5fK74GVoeNfyfqR/8v6oCTZGYW9bOMfCs1B/aodzCGAJO0zTBG
7MlmSlmtGZ6UfJGS/ZEFnCz1Ocg+xS3F3mGDHFjIOPB8yjlKjEBZI9M2lI85Sxe8
z1+I6uvWkz+evE4qCRJCFq6niQozJzoXB79WjG3Oqdf4tJa9/4YdJsdaU7Q5I5SK
0USMJG4HcJoqESnAEhxvt3q9GAd6pl3IJyGf8h3zkiFqlTB7JQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFyVy1ljqgTJM9Ac6yJLKph4QVWpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGUwN2RmZjUtMDEzNy0z
Y2IzLWJlMWEtZjRiMzU3NDFiODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkkEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqcOey8Pw2jMM1wVsVRhV1+Sjb7HXOp9oloCIXxVxF7+kyh+q4I+HdfoP
cAo7U4R0hteKh1Y87okknW+QUXuD4f+Jm2LbTLAjywh0yeSmlUjjqW6kyHnD2Gw5
YuEgujQUSjbTyuq4MjQ7H3KV4+xrFOnt1LO+qEnlF+otBnr03J+XuzlDj2oydpVo
lmbmxxXtyo46r3Ptc2XFfk67Hg6hOl9S2QnetOFD4BIQWrytAU2rlV9rJ15/JW51
mom6KRXiRoTFD+IjHc1TYHY9PuRd9irmU1+OlfshHAo/nwcXPLyfGFz1ZzhdVSAm
6HhAcUVsKYAjjAgom5OL8L1FeYomxQ==
-----END CERTIFICATE-----