This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/12994ea7-cdff-3352-bcfb-ae03626457bf.roa
File:                     12994ea7-cdff-3352-bcfb-ae03626457bf.roa (raw, json)
Hash identifier:          0z0yc3/CZHJIf6f1Y4iwsU2xgjwcDewCmZasGJIjtf4=
Subject key identifier:   FE:33:90:A5:0F:24:34:8B:F6:A0:77:82:0A:F1:58:1A:9E:93:B3:21
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E222A4891EFB3046AFFC73300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/12994ea7-cdff-3352-bcfb-ae03626457bf.roa
Signing time:             Sat 04 Jun 2022 12:00:00 +0000
ROA not before:           Sat 04 Jun 2022 12:00:00 +0000
ROA not after:            Sun 10 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.84.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:22:2a:48:91:ef:b3:04:6a:ff:c7:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun  4 12:00:00 2022 GMT
            Not After : Jul 10 04:00:00 2022 GMT
        Subject: CN=bcafb77b-5e70-4d82-9155-0ea3b8cb7ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:ae:47:8c:6e:2e:ef:4d:b8:78:3a:98:a1:
                    4d:da:b1:ff:aa:47:fd:4f:f5:c2:53:f8:e8:ac:45:
                    ac:fe:2f:27:af:4d:4c:19:52:66:b3:f5:62:29:7e:
                    bf:a0:ab:e6:88:78:05:12:9e:01:c5:65:08:c2:fe:
                    48:bc:6c:0d:d6:4b:9a:1d:5b:70:d8:ba:2d:c6:fb:
                    5f:88:3e:33:40:6b:1b:ad:07:97:cc:68:3f:d6:b1:
                    9f:bb:7f:ff:52:7f:cf:5b:13:50:8a:ae:ff:88:81:
                    ce:ec:fd:90:a1:1e:14:fe:c8:f6:3a:b1:b1:32:c9:
                    f9:06:b3:a0:cb:a2:f7:1c:ca:64:d3:0e:ee:7d:79:
                    a0:ef:87:c4:dd:28:c4:3b:64:0d:18:db:d7:b5:90:
                    0c:7e:15:73:c1:1c:3a:0d:1f:66:e0:b4:08:55:3e:
                    14:2e:3d:e6:56:24:0e:f4:d0:e0:c7:e0:95:38:2d:
                    0d:e5:a6:54:d9:9a:29:d4:d8:c9:5c:c2:50:b6:3a:
                    de:6a:87:b8:c8:0d:04:b4:6a:76:7e:e7:b5:71:b0:
                    2c:07:cc:d9:32:8d:9d:43:f5:ae:76:12:fe:33:15:
                    69:79:ed:c6:1a:b0:96:ac:08:aa:eb:e9:2a:2a:26:
                    91:c1:32:16:b2:0c:b8:d3:30:ed:1d:3a:9f:3b:5b:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:33:90:A5:0F:24:34:8B:F6:A0:77:82:0A:F1:58:1A:9E:93:B3:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/12994ea7-cdff-3352-bcfb-ae03626457bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:fd:38:83:44:4d:a3:e7:9b:67:12:e1:7e:f4:94:0b:9a:
         54:45:c5:ce:a3:5b:0e:88:af:f0:14:e0:ed:bf:e2:e2:4e:bd:
         6b:a1:55:5a:cd:5b:bb:e0:05:bb:6d:a9:62:cb:c6:cb:15:a5:
         7f:78:06:b7:4f:6b:17:42:dd:13:2f:98:61:cc:e7:bb:90:98:
         31:ae:64:5a:6a:ef:ae:37:53:59:fd:ab:53:c4:46:76:da:96:
         5e:dd:8d:19:8f:25:a5:ce:f7:2a:d2:54:79:5e:f0:74:b1:73:
         08:b4:d4:71:63:7e:c9:dc:62:2e:35:23:2a:b1:85:29:bc:8b:
         87:a2:da:a5:0a:cf:e7:76:05:3b:bb:4e:fe:c6:e9:d2:f7:f6:
         d7:cd:b9:c0:ec:c3:67:c4:b0:e0:85:57:3c:75:2c:ad:11:de:
         1b:7d:d3:12:ed:4e:6a:c0:09:cb:59:e2:00:51:c3:d9:f2:8f:
         ab:80:30:ed:99:c2:ba:08:5b:69:4c:b7:13:44:37:40:ed:26:
         30:2e:70:d5:76:24:fe:89:a3:3f:dd:37:17:d3:f0:00:8e:b2:
         b8:de:79:d1:61:5b:15:55:76:21:0f:5a:24:ac:11:04:31:fb:
         70:60:5d:b9:7c:0e:8c:e2:f3:cb:6a:a7:cc:fc:d5:10:9a:af:
         cc:6d:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:43:21 2025 by rpki-client