This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ed4ecee-5fc4-3a04-a69d-b400c529353f.roa
File:                     0ed4ecee-5fc4-3a04-a69d-b400c529353f.roa (raw, json)
Hash identifier:          IndNlHI6tW5EthP0G0OWIfke3W3BaNyOqn+VUfk16G8=
Subject key identifier:   93:78:29:4F:B1:2F:44:EE:27:F8:CC:66:A6:03:AA:5C:35:BB:32:8C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FA19EDF6E811751965E8BE900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ed4ecee-5fc4-3a04-a69d-b400c529353f.roa
Signing time:             Wed 19 Oct 2022 12:00:00 +0000
ROA not before:           Wed 19 Oct 2022 12:00:00 +0000
ROA not after:            Thu 24 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        15.168.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a1:9e:df:6e:81:17:51:96:5e:8b:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 19 12:00:00 2022 GMT
            Not After : Nov 24 05:00:00 2022 GMT
        Subject: CN=bcc47815-fde6-4f15-85f3-94cae089ad86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:23:c1:66:3e:8f:4e:3d:c0:c0:2c:9a:64:
                    de:85:bf:0b:ba:0b:6b:b0:51:a7:70:fa:99:37:e8:
                    5e:8d:c2:a3:5d:44:1e:17:dd:a4:df:d4:c3:5a:fc:
                    b6:61:51:ed:6c:71:9b:7c:89:4e:2e:30:6d:48:01:
                    88:d9:a8:0f:82:a9:6e:35:c8:b2:e6:1c:fe:8d:0e:
                    1e:95:0f:19:a6:3a:bd:11:59:c8:0c:61:ef:83:47:
                    5c:f6:04:ec:19:c6:30:e8:c4:21:b8:d2:02:16:89:
                    17:9a:9e:7d:b2:53:d5:f4:24:fd:ca:d8:62:f6:b5:
                    59:da:cb:db:a0:00:62:ec:ba:3e:60:c7:27:a3:91:
                    0a:13:dc:27:55:74:1f:23:1e:e5:7b:42:a4:da:5c:
                    5e:23:1f:9a:f2:46:4e:d3:de:cd:60:bf:50:d9:e1:
                    ec:89:c1:ed:c8:4d:dd:d6:7a:d3:93:66:17:3a:77:
                    f7:33:e9:d7:10:a0:75:ad:d3:b3:61:36:5d:23:33:
                    fa:f6:15:de:11:96:b8:24:20:1e:91:02:4c:97:25:
                    2c:85:b0:5b:85:5a:4b:b4:6d:c1:40:54:c7:f9:e3:
                    f0:03:01:bc:2e:7b:72:63:51:31:bf:11:f0:b4:c1:
                    e2:83:18:3e:ec:d5:13:f3:3a:ee:1c:6c:d7:14:6b:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:78:29:4F:B1:2F:44:EE:27:F8:CC:66:A6:03:AA:5C:35:BB:32:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ed4ecee-5fc4-3a04-a69d-b400c529353f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.168.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ea:28:e9:51:d5:3a:d8:d9:c5:85:59:80:f5:f5:fa:79:53:
         f0:b2:94:de:24:01:33:b0:d2:54:c7:7e:64:b3:84:b3:f8:1e:
         02:2f:0c:a6:31:a2:d1:02:a5:85:36:38:41:6d:51:1d:f0:e4:
         52:4d:21:54:2d:07:44:b4:c6:e0:5e:5f:31:86:74:29:8d:60:
         c4:4a:cf:b3:fa:94:14:61:8d:c7:49:47:f4:8f:b6:1b:10:a3:
         7c:99:11:77:c4:c0:5f:99:1e:76:2e:9f:43:9b:9e:00:ff:8f:
         bf:df:4c:b3:62:a1:3b:7c:9f:b3:9e:6f:7a:6a:81:00:f8:23:
         7b:ef:c7:d4:08:2a:0a:9e:f1:e7:c1:1d:87:30:38:98:69:5c:
         ec:f1:9b:5f:02:eb:7f:f2:b8:72:51:3e:63:0f:cd:b5:56:b0:
         22:9d:39:50:c4:9f:77:d7:2e:03:e0:c2:c9:f7:79:ff:d9:34:
         94:17:73:a2:d3:1b:8f:98:e0:d9:39:9a:e9:dc:15:b6:9d:4c:
         e4:1b:47:8a:50:1b:24:1c:b7:13:e4:e0:8f:8f:2f:0a:3c:f5:
         a9:71:3e:7f:eb:c9:60:0e:40:8c:57:66:66:28:dc:3d:d8:74:
         35:a9:0f:a9:67:b7:90:af:7f:f4:73:4f:e8:56:2a:0a:ff:eb:
         fa:af:ca:b3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+hnt9ugRdRll6L6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAxOTEyMDAwMFoXDTIyMTEyNDA1MDAwMFowLzEtMCsGA1UEAxMk
YmNjNDc4MTUtZmRlNi00ZjE1LTg1ZjMtOTRjYWUwODlhZDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhkjwWY+j049wMAsmmTehb8LugtrsFGncPqZ
N+hejcKjXUQeF92k39TDWvy2YVHtbHGbfIlOLjBtSAGI2agPgqluNciy5hz+jQ4e
lQ8Zpjq9EVnIDGHvg0dc9gTsGcYw6MQhuNICFokXmp59slPV9CT9ythi9rVZ2svb
oABi7Lo+YMcno5EKE9wnVXQfIx7le0Kk2lxeIx+a8kZO097NYL9Q2eHsicHtyE3d
1nrTk2YXOnf3M+nXEKB1rdOzYTZdIzP69hXeEZa4JCAekQJMlyUshbBbhVpLtG3B
QFTH+ePwAwG8LntyY1ExvxHwtMHigxg+7NUT8zruHGzXFGuXMQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJN4KU+xL0TuJ/jMZqYDqlw1uzKMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGVkNGVjZWUtNWZjNC0z
YTA0LWE2OWQtYjQwMGM1MjkzNTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD6gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACOoo6VHVOtjZxYVZgPX1+nlT8LKU3iQBM7DSVMd+ZLOEs/geAi8MpjGi
0QKlhTY4QW1RHfDkUk0hVC0HRLTG4F5fMYZ0KY1gxErPs/qUFGGNx0lH9I+2GxCj
fJkRd8TAX5kedi6fQ5ueAP+Pv99Ms2KhO3yfs55vemqBAPgje+/H1AgqCp7x58Ed
hzA4mGlc7PGbXwLrf/K4clE+Yw/NtVawIp05UMSfd9cuA+DCyfd5/9k0lBdzotMb
j5jg2Tma6dwVtp1M5BtHilAbJBy3E+Tgj48vCjz1qXE+f+vJYA5AjFdmZijcPdh0
NakPqWe3kK9/9HNP6FYqCv/r+q/Ksw==
-----END CERTIFICATE-----
Generated at Sat Dec 20 06:54:58 2025 by rpki-client