This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13defcec-55d3-39df-be3c-4a32e0f62921.roa
File:                     13defcec-55d3-39df-be3c-4a32e0f62921.roa (raw, json)
Hash identifier:          E9KS8YYNqqkAspIDsh55qjMThqFUb4zMCDWq9G1whtw=
Subject key identifier:   61:51:13:95:89:1E:DC:81:1B:75:53:53:BD:95:84:E2:30:48:6B:11
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CBD4A23CF93187FE41FC49528
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13defcec-55d3-39df-be3c-4a32e0f62921.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        18.204.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:4a:23:cf:93:18:7f:e4:1f:c4:95:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=83654050-7e0a-4f6d-8227-f6d04cda66e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:33:58:0e:0f:74:fd:1b:d7:22:15:4a:44:
                    fc:a0:66:9f:ae:69:7e:46:58:ab:48:0e:7b:1e:43:
                    42:1f:d8:29:e5:90:27:27:2b:90:ea:88:9f:dd:47:
                    ac:ec:af:53:2a:85:e6:cf:ac:b6:9a:81:e4:32:ae:
                    bf:5e:93:5f:2d:22:55:41:e3:b8:77:a7:94:94:37:
                    ec:15:99:10:0f:4e:3f:d0:bd:75:74:1d:22:90:6a:
                    67:c2:6b:4c:c0:a5:6f:39:83:c9:13:ef:6f:56:e3:
                    5e:e4:b1:89:df:e2:fc:69:6e:b5:de:f0:1f:fc:cb:
                    cf:05:bb:35:29:b9:10:46:ae:db:5d:0a:8c:f4:fc:
                    a3:c7:08:38:b8:be:9f:ae:c7:b0:53:be:65:e1:de:
                    5d:17:72:b7:90:56:3b:f8:5b:38:83:df:c0:17:e7:
                    58:d8:2e:bd:a3:db:0c:4c:25:f7:85:d2:5e:40:ca:
                    55:94:11:4a:64:26:d4:2b:71:8a:31:0f:ee:66:f3:
                    7a:67:e3:ac:c1:76:1b:38:45:dd:3a:f2:56:30:29:
                    1f:62:76:b2:f7:f1:23:28:fd:4b:ee:a8:36:0e:b5:
                    eb:8d:ed:42:58:53:29:1f:c2:95:ec:dd:48:d4:a6:
                    e8:b4:0c:70:fd:ef:75:74:aa:52:c5:77:55:38:5d:
                    2b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:51:13:95:89:1E:DC:81:1B:75:53:53:BD:95:84:E2:30:48:6B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/13defcec-55d3-39df-be3c-4a32e0f62921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.204.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3e:f7:34:07:cd:64:ff:27:40:5f:dd:c7:14:8b:2a:c1:9f:
         66:cc:af:f1:d9:07:0a:ba:39:51:65:ac:37:cc:bf:68:7f:56:
         b9:b7:88:8b:22:9f:14:85:3b:c5:6e:03:1b:41:03:b8:31:9d:
         58:d4:8c:3f:9c:ad:67:96:ec:66:27:d2:57:15:73:b5:07:ba:
         71:3f:ed:d8:01:53:a5:1c:56:14:26:93:8a:d8:9a:c8:f5:60:
         6e:2c:ee:57:c1:9a:2b:2d:88:70:c1:a2:34:2f:95:71:26:cf:
         dd:3d:0c:3c:cb:03:c9:20:e3:e3:68:00:eb:0f:c3:b1:fb:18:
         de:c1:a1:ac:a0:dd:aa:d0:ac:9f:c9:48:cc:3a:7a:89:19:b5:
         f9:67:c2:2a:17:9a:d5:e2:10:a9:23:fc:fd:a1:2a:71:c4:ec:
         b3:4c:93:7a:79:b5:0c:29:36:3c:cf:50:9c:0a:82:b7:7a:e8:
         8d:fa:d6:f2:09:56:ce:e8:1e:f8:66:af:3c:67:53:97:df:6e:
         24:c2:80:59:6c:f5:47:4e:3f:ab:b0:3c:8c:65:c9:b6:69:10:
         49:07:39:7a:0e:64:f8:0b:a1:60:78:49:4e:c6:b5:51:5a:2b:
         ba:f1:22:cb:52:c2:a0:ec:41:21:e5:6e:f8:fc:ff:c4:15:db:
         01:a0:1b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:10:06 2025 by rpki-client