This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11729cf9-1ffb-341b-9e6b-451c0a32e16b.roa
File:                     11729cf9-1ffb-341b-9e6b-451c0a32e16b.roa (raw, json)
Hash identifier:          ikm7EoekH6nR1jcl6QyNC2JVtWAFT63ZiCih8uKYxbo=
Subject key identifier:   76:DD:FF:9B:E8:A0:81:3F:9C:00:B6:A5:1D:BE:C7:0D:BE:FC:60:7D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858401FAF468AF7B1AEB69686FE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11729cf9-1ffb-341b-9e6b-451c0a32e16b.roa
Signing time:             Sat 03 Dec 2022 12:00:00 +0000
ROA not before:           Sat 03 Dec 2022 12:00:00 +0000
ROA not after:            Sun 08 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.198.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1f:af:46:8a:f7:b1:ae:b6:96:86:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  3 12:00:00 2022 GMT
            Not After : Jan  8 05:00:00 2023 GMT
        Subject: CN=46b57db6-b2cc-4bde-8935-257a3c56f0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:20:0b:33:3f:ce:dc:33:ba:19:74:4c:b5:75:
                    ad:3b:61:f9:bd:fc:88:ae:8b:de:d3:22:0a:1d:8f:
                    dc:00:b0:07:95:a9:d4:a7:08:89:b6:79:88:e0:77:
                    21:34:21:12:33:84:9a:47:36:d6:1e:c4:f7:67:b5:
                    e5:49:0c:51:48:f8:b0:a5:4a:72:5c:45:39:23:25:
                    30:80:bb:03:64:75:b0:57:ed:fc:04:bd:86:82:a5:
                    6e:8e:d8:a7:42:18:e9:7f:6d:5b:22:5d:16:e3:f2:
                    80:13:fb:a9:14:26:e3:0b:80:6d:7d:49:f8:02:10:
                    f5:8d:e6:a4:39:39:3d:fc:4a:c7:0b:be:59:9b:ad:
                    de:19:ac:bc:d8:fd:f8:82:85:0e:73:b4:00:01:d5:
                    00:56:4d:1e:65:d3:9e:72:f5:ff:6b:af:0d:39:da:
                    1b:a3:77:26:75:13:63:4a:e7:f2:47:e4:01:cd:22:
                    d4:f5:28:f0:c6:97:43:32:91:0f:b3:a2:31:3a:fd:
                    7b:cd:54:d4:95:ee:53:ed:d6:fc:7f:e5:c4:15:92:
                    29:b9:a7:bf:8e:fb:6a:8e:55:56:83:be:c6:8e:6a:
                    67:47:36:37:02:79:70:91:2a:a2:3d:24:69:fb:7e:
                    c3:51:2c:26:b1:4e:42:16:f1:48:5a:00:98:5d:d5:
                    af:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DD:FF:9B:E8:A0:81:3F:9C:00:B6:A5:1D:BE:C7:0D:BE:FC:60:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11729cf9-1ffb-341b-9e6b-451c0a32e16b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.198.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:72:6c:a4:de:52:e9:3a:94:c8:94:02:62:63:5c:ce:44:a1:
         f9:09:b7:67:f1:2a:67:18:0b:2a:b8:8f:71:7f:e6:5e:6a:b7:
         fa:e5:38:64:bc:26:1f:27:8e:0f:71:6c:cb:28:bc:2b:da:d8:
         c1:df:ff:3a:2a:fe:c0:5a:83:ac:76:3d:c6:c4:63:64:c6:a9:
         66:43:3a:8d:80:62:ba:74:84:ce:3a:25:71:68:19:7a:8a:ae:
         51:49:e7:8e:74:3d:27:73:00:70:25:19:e0:71:5e:97:c9:85:
         5a:26:88:73:55:91:2b:5a:7c:03:f3:da:59:62:81:86:08:62:
         89:55:68:8e:5a:3e:ba:34:83:48:ee:d0:11:a8:7a:79:52:8b:
         12:b3:f5:ae:d3:74:97:e0:35:8d:4f:43:b6:c0:6d:bc:73:6c:
         6f:83:19:7a:94:d7:98:b9:4d:eb:4d:26:cc:de:50:13:33:2b:
         e1:83:ee:49:71:d2:07:af:17:71:3f:ec:4e:ae:34:41:cb:b1:
         e8:3c:40:a2:7a:61:5e:84:52:26:c9:5f:8d:d6:7f:73:fa:4b:
         f6:f8:4e:97:8d:8f:ca:a8:4c:bf:a8:9e:af:75:ed:76:a5:55:
         79:f5:2f:85:5a:0c:c7:63:97:06:e1:99:a3:6a:75:40:c3:95:
         4d:5b:be:d2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAfr0aK97GutpaG/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwMzEyMDAwMFoXDTIzMDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
NDZiNTdkYjYtYjJjYy00YmRlLTg5MzUtMjU3YTNjNTZmMGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiALMz/O3DO6GXRMtXWtO2H5vfyIrove0yIK
HY/cALAHlanUpwiJtnmI4HchNCESM4SaRzbWHsT3Z7XlSQxRSPiwpUpyXEU5IyUw
gLsDZHWwV+38BL2GgqVujtinQhjpf21bIl0W4/KAE/upFCbjC4BtfUn4AhD1jeak
OTk9/ErHC75Zm63eGay82P34goUOc7QAAdUAVk0eZdOecvX/a68NOdobo3cmdRNj
SufyR+QBzSLU9SjwxpdDMpEPs6IxOv17zVTUle5T7db8f+XEFZIpuae/jvtqjlVW
g77GjmpnRzY3AnlwkSqiPSRp+37DUSwmsU5CFvFIWgCYXdWv6wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHbd/5vooIE/nAC2pR2+xw2+/GB9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTE3MjljZjktMWZmYi0z
NDFiLTllNmItNDUxYzBhMzJlMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEsYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlXJspN5S6TqUyJQCYmNczkSh+Qm3Z/EqZxgLKriPcX/mXmq3+uU4ZLwm
HyeOD3Fsyyi8K9rYwd//Oir+wFqDrHY9xsRjZMapZkM6jYBiunSEzjolcWgZeoqu
UUnnjnQ9J3MAcCUZ4HFel8mFWiaIc1WRK1p8A/PaWWKBhghiiVVojlo+ujSDSO7Q
Eah6eVKLErP1rtN0l+A1jU9DtsBtvHNsb4MZepTXmLlN600mzN5QEzMr4YPuSXHS
B68XcT/sTq40Qcux6DxAonphXoRSJslfjdZ/c/pL9vhOl42PyqhMv6ier3XtdqVV
efUvhVoMx2OXBuGZo2p1QMOVTVu+0g==
-----END CERTIFICATE-----