This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/119a5156-ef1d-32ee-9f0b-53a3142141b6.roa
File:                     119a5156-ef1d-32ee-9f0b-53a3142141b6.roa (raw, json)
Hash identifier:          D5XuB7RoOuWwv0q6LwjmA2IwULHJs8dZ6GUMwTbX7aE=
Subject key identifier:   BC:6A:08:26:38:7D:00:F9:F9:9C:66:53:4A:57:2A:5B:FD:7D:70:75
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DC69719FA0725C7804809E320
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/119a5156-ef1d-32ee-9f0b-53a3142141b6.roa
Signing time:             Mon 02 May 2022 12:00:00 +0000
ROA not before:           Mon 02 May 2022 12:00:00 +0000
ROA not after:            Tue 07 Jun 2022 04:00:00 +0000
asID:                     6167
IP address blocks:        155.146.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c6:97:19:fa:07:25:c7:80:48:09:e3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  2 12:00:00 2022 GMT
            Not After : Jun  7 04:00:00 2022 GMT
        Subject: CN=8baf1767-1e0b-4059-b583-58dff2e5e22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:f0:05:b9:9f:f3:e2:93:5a:28:e8:df:4a:
                    39:6e:9b:2d:18:63:61:21:43:12:48:ff:c5:59:35:
                    aa:76:5d:d4:2d:2d:eb:c7:c5:25:43:1e:8c:52:95:
                    7a:15:92:2c:76:cd:5b:ef:59:68:82:77:47:7d:d6:
                    73:dc:76:f4:0f:01:17:13:c2:ed:7c:b8:8a:3c:8d:
                    d9:d5:70:20:73:38:5f:78:f2:7a:d4:d1:fd:2c:a2:
                    24:fd:3c:9b:83:69:4c:dc:13:a8:31:85:57:c4:2e:
                    9c:14:82:9a:de:fd:4f:e6:fb:68:ef:30:3c:4d:7a:
                    05:9e:f8:a5:5e:da:2a:9a:da:04:ab:cc:26:8b:5f:
                    a9:3b:d0:0b:ee:d8:81:95:f9:81:de:19:fe:b5:e4:
                    b4:1d:d6:72:f4:19:79:cd:7d:59:e0:7e:50:96:4a:
                    ff:00:c7:6c:de:1e:2a:9f:e4:3e:30:17:1a:83:59:
                    16:69:15:d3:c4:5a:c8:d0:63:d2:fd:d5:ce:75:54:
                    f8:ea:09:a5:95:4c:1a:24:6e:0c:6e:d9:55:91:e6:
                    f6:b0:20:22:88:99:c5:9b:bd:8b:3a:c8:53:f0:db:
                    f2:1b:2c:38:8c:53:7b:ff:d7:27:8b:76:6f:4f:29:
                    73:74:79:71:f4:21:84:7a:de:fd:ba:85:7d:5e:14:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6A:08:26:38:7D:00:F9:F9:9C:66:53:4A:57:2A:5B:FD:7D:70:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/119a5156-ef1d-32ee-9f0b-53a3142141b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:cc:f1:86:37:ca:aa:d6:26:76:02:21:b2:62:33:51:ba:07:
         45:14:77:cb:bd:bf:87:aa:31:c6:23:f8:b0:a1:2c:82:9b:b3:
         6c:67:90:2b:a1:f3:9c:9f:f3:7e:89:eb:a5:02:2f:d6:ee:9f:
         93:a9:04:b7:82:0f:98:71:7d:48:57:17:5c:85:39:84:dd:e3:
         1f:72:35:4e:89:0e:75:f1:9e:91:de:d5:b1:1d:17:56:9e:18:
         4a:0d:77:1a:56:51:6e:a5:2b:e1:1f:69:8d:44:56:90:a9:eb:
         e2:45:0e:75:cf:af:bc:c8:b7:66:46:d0:c1:57:fb:60:9c:46:
         fe:dc:b2:46:9e:d5:79:d4:1a:a0:e6:3f:ed:3e:1b:1f:10:1a:
         35:71:56:df:94:22:29:52:63:fa:ef:62:1e:93:d8:1c:c4:d9:
         4b:4c:6f:ac:56:ba:d3:7f:e7:05:26:67:8a:01:2e:5d:60:61:
         49:18:22:0d:0a:ea:b6:bd:0c:60:15:9e:75:35:6c:63:79:fc:
         b1:46:32:30:5f:0b:17:eb:27:f5:76:a1:6d:58:36:45:13:cc:
         b6:ee:b1:ba:f8:c5:db:56:ba:34:59:7c:ca:ee:c4:ff:2f:e5:
         7e:c9:aa:05:a8:cf:03:9a:41:85:c9:ab:df:7b:85:87:b4:37:
         b9:0a:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----