This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10940b88-04a6-3c43-abb8-338c4fe8898d.roa
File:                     10940b88-04a6-3c43-abb8-338c4fe8898d.roa (raw, json)
Hash identifier:          fbypI2U7umxoj1lZ74GME6iiB0fZpy+bwJip07ZtrB0=
Subject key identifier:   24:F0:40:78:44:AC:D6:1B:C2:3D:9D:07:86:9A:7B:C3:AF:16:00:F8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DD40DEAD3A0EB74E96DED8800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10940b88-04a6-3c43-abb8-338c4fe8898d.roa
Signing time:             Sat 07 May 2022 12:00:00 +0000
ROA not before:           Sat 07 May 2022 12:00:00 +0000
ROA not after:            Sun 12 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.88.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d4:0d:ea:d3:a0:eb:74:e9:6d:ed:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  7 12:00:00 2022 GMT
            Not After : Jun 12 04:00:00 2022 GMT
        Subject: CN=ab115fc5-550a-4ef2-b4e1-c3d011d89764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:94:c5:76:f3:28:67:5c:fb:5e:f4:58:4d:4a:
                    a5:7f:78:75:91:66:bf:21:09:82:b2:37:a7:f8:98:
                    87:47:41:b7:c2:f2:b0:62:58:49:4b:0e:d8:28:d5:
                    dc:d2:8d:96:8c:7c:38:96:59:ca:d7:d3:22:d4:ac:
                    68:71:09:15:d7:d0:76:e1:dd:02:4e:93:82:6f:d1:
                    80:5f:48:bd:3a:c5:3d:e4:88:aa:0c:c9:7f:5a:0d:
                    6c:e0:e0:8a:ad:76:e3:53:5d:20:82:af:a1:25:74:
                    b1:f9:f3:e3:8f:54:3f:07:7c:11:b0:cb:28:a1:40:
                    94:be:aa:fd:8b:05:82:ef:c1:22:28:b0:b3:ba:ca:
                    0f:1e:c1:b0:10:ff:8b:44:68:aa:41:f4:13:24:56:
                    60:92:5f:4f:01:11:27:06:dd:45:5e:07:4f:c1:78:
                    f1:54:80:61:be:81:20:1c:e5:be:b2:63:3f:74:b3:
                    01:ef:27:dd:21:6b:df:dd:6c:15:a3:20:2e:3d:c3:
                    b8:c4:ed:7c:24:5e:8b:f5:1a:43:e5:74:bd:cf:75:
                    04:e6:44:f9:64:6f:0c:28:4c:c4:1b:2f:76:4b:05:
                    6f:b4:85:e9:98:f8:0f:b4:35:54:cf:16:32:d8:de:
                    87:98:9e:cf:0f:b6:b6:d0:19:7d:6d:dd:50:12:7e:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F0:40:78:44:AC:D6:1B:C2:3D:9D:07:86:9A:7B:C3:AF:16:00:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10940b88-04a6-3c43-abb8-338c4fe8898d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.88.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:41:18:b4:f1:1f:60:82:b3:c1:ad:86:0f:16:31:f8:e1:cc:
         05:0c:36:23:ee:72:70:b6:88:b8:87:c4:66:19:27:d0:2f:64:
         9f:59:5a:b1:dd:11:a9:0c:b4:ff:6f:58:55:5a:8f:f8:b3:16:
         2a:0a:21:76:da:67:4a:1a:a4:09:df:6e:95:3f:de:3e:28:3a:
         41:a4:78:bf:9a:97:04:53:55:21:af:63:8e:16:da:15:72:2a:
         87:0d:1a:6b:69:47:55:92:44:8b:50:b3:01:87:c4:40:d6:0e:
         c5:cb:cf:e1:1c:26:3a:c3:02:6f:4c:93:d7:05:55:33:3b:1b:
         81:1a:a3:26:6f:09:ad:a7:c2:03:f3:a3:38:6a:aa:e8:5d:e3:
         02:00:7a:06:c2:31:ec:2d:e2:2c:c3:4d:b7:98:96:90:d6:a4:
         0d:92:32:7a:d6:7e:25:7e:be:65:60:93:a3:79:28:b6:48:e6:
         0d:49:9a:7e:c6:d9:cd:15:28:48:ed:4b:14:fc:ea:d8:e1:2a:
         fa:86:b8:3b:4b:ca:69:ef:a8:15:4d:1b:b7:aa:e6:dd:65:65:
         be:ed:ae:4d:48:3e:c0:7e:f7:b8:51:be:be:61:e0:19:a8:db:
         71:83:93:85:73:04:6c:7f:83:6d:2d:7f:b0:b3:62:ca:9d:12:
         0f:a1:23:3f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3UDerToOt06W3tiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNzEyMDAwMFoXDTIyMDYxMjA0MDAwMFowLzEtMCsGA1UEAxMk
YWIxMTVmYzUtNTUwYS00ZWYyLWI0ZTEtYzNkMDExZDg5NzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pTFdvMoZ1z7XvRYTUqlf3h1kWa/IQmCsjen
+JiHR0G3wvKwYlhJSw7YKNXc0o2WjHw4llnK19Mi1KxocQkV19B24d0CTpOCb9GA
X0i9OsU95IiqDMl/Wg1s4OCKrXbjU10ggq+hJXSx+fPjj1Q/B3wRsMsooUCUvqr9
iwWC78EiKLCzusoPHsGwEP+LRGiqQfQTJFZgkl9PAREnBt1FXgdPwXjxVIBhvoEg
HOW+smM/dLMB7yfdIWvf3WwVoyAuPcO4xO18JF6L9RpD5XS9z3UE5kT5ZG8MKEzE
Gy92SwVvtIXpmPgPtDVUzxYy2N6HmJ7PD7a20Bl9bd1QEn7MMwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCTwQHhErNYbwj2dB4aae8OvFgD4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTA5NDBiODgtMDRhNi0z
YzQzLWFiYjgtMzM4YzRmZTg4OThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBElgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAr0EYtPEfYIKzwa2GDxYx+OHMBQw2I+5ycLaIuIfEZhkn0C9kn1lasd0R
qQy0/29YVVqP+LMWKgohdtpnShqkCd9ulT/ePig6QaR4v5qXBFNVIa9jjhbaFXIq
hw0aa2lHVZJEi1CzAYfEQNYOxcvP4RwmOsMCb0yT1wVVMzsbgRqjJm8JrafCA/Oj
OGqq6F3jAgB6BsIx7C3iLMNNt5iWkNakDZIyetZ+JX6+ZWCTo3kotkjmDUmafsbZ
zRUoSO1LFPzq2OEq+oa4O0vKae+oFU0bt6rm3WVlvu2uTUg+wH73uFG+vmHgGajb
cYOThXMEbH+DbS1/sLNiyp0SD6EjPw==
-----END CERTIFICATE-----
Generated at Mon Dec 22 00:48:57 2025 by rpki-client