This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14065515-a677-314f-93b0-efeff9bec02e.roa
File:                     14065515-a677-314f-93b0-efeff9bec02e.roa (raw, json)
Hash identifier:          8N0eFwkN82BCenRWXK7rN2tiRbaC/on1wDaFtsWj7wE=
Subject key identifier:   4A:83:5E:1B:40:4B:17:33:85:25:75:6A:DB:5A:78:21:AA:49:5D:2D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E3BB9E3E4A7A4F46A7D854580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14065515-a677-314f-93b0-efeff9bec02e.roa
Signing time:             Mon 13 Jun 2022 12:00:00 +0000
ROA not before:           Mon 13 Jun 2022 12:00:00 +0000
ROA not after:            Tue 19 Jul 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        155.146.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3b:b9:e3:e4:a7:a4:f4:6a:7d:85:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 13 12:00:00 2022 GMT
            Not After : Jul 19 04:00:00 2022 GMT
        Subject: CN=058f005e-dd54-4694-8b81-a31a469f9249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:b5:11:b3:35:9c:6e:d5:11:4d:4e:2f:1f:
                    02:37:d8:83:68:1a:25:c3:b5:e4:0f:00:63:98:93:
                    3b:ce:db:6a:e4:16:4c:b0:89:d9:29:00:29:94:e0:
                    f2:55:e8:69:05:82:59:59:2e:48:f7:22:58:73:66:
                    9f:5d:a0:c6:85:03:3c:28:b2:74:18:b3:13:8d:3c:
                    5a:07:a9:85:f0:85:29:eb:09:53:6c:4b:6e:8c:6b:
                    39:73:4b:30:e0:57:db:2f:05:88:2b:fc:b8:64:2d:
                    09:08:89:4b:22:09:80:bd:d2:2c:29:f1:1d:b6:74:
                    bd:0c:6b:6d:3c:4b:1e:32:e2:b3:4f:0e:80:37:bb:
                    a3:1d:66:91:23:bd:92:cf:e3:88:ef:18:5e:5f:8c:
                    90:e9:4d:d2:71:c7:b8:5c:94:2b:11:51:27:c4:f6:
                    61:69:1a:72:88:81:3a:dc:56:6f:70:ba:df:c2:eb:
                    7c:3d:0a:ed:f5:08:22:fe:e8:c7:c5:56:fa:95:47:
                    37:53:88:76:d8:e3:4f:ca:1b:56:78:a7:98:32:a6:
                    34:a7:f2:52:c2:b4:42:08:1a:0b:87:de:bf:59:a6:
                    b7:8a:62:79:a0:36:db:9e:83:52:f3:49:e5:6f:52:
                    30:33:7a:19:e2:7b:a3:d6:d0:cd:c4:04:3a:17:61:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:83:5E:1B:40:4B:17:33:85:25:75:6A:DB:5A:78:21:AA:49:5D:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14065515-a677-314f-93b0-efeff9bec02e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:f4:b4:93:b0:61:14:15:74:8a:58:2b:f8:9d:aa:36:b4:84:
         93:ac:0f:f5:c8:dd:2f:aa:2d:95:2d:d7:9f:61:55:cb:8e:6c:
         55:78:82:e2:b0:47:94:ad:92:61:56:90:3d:c7:d0:f6:92:4f:
         f7:d6:52:f3:88:87:0b:24:05:5e:e2:c4:49:a8:24:21:fb:5d:
         93:d6:b2:47:49:bc:6c:a2:cd:64:ab:c0:d9:5d:e6:f9:4a:ad:
         bd:d1:aa:c0:d6:64:82:a4:fc:c5:f9:53:20:51:61:0d:08:11:
         52:ec:d2:8c:52:71:f9:fe:a5:2e:35:0d:57:eb:06:75:54:02:
         9b:b5:25:a2:2c:ee:09:42:01:0b:8a:64:8e:60:14:13:3e:18:
         c2:28:5d:e2:e6:ad:6b:75:6e:1a:f3:18:9e:62:3d:67:c5:17:
         f4:20:da:9d:b4:ea:c1:41:d2:8d:41:41:2b:d0:50:cd:2f:51:
         75:a0:b2:48:bc:51:3f:5d:54:08:87:8c:f7:c8:0f:5c:90:77:
         06:95:f1:1a:b2:d5:14:43:cd:85:06:59:b9:82:18:38:dd:d2:
         e8:07:98:aa:39:3a:95:67:c3:a5:54:e8:2f:19:e0:97:50:8e:
         d1:83:bc:08:a9:59:ed:17:8f:ac:6e:41:12:13:42:1c:27:96:
         5d:25:54:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD47uePkp6T0an2FRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxMzEyMDAwMFoXDTIyMDcxOTA0MDAwMFowLzEtMCsGA1UEAxMk
MDU4ZjAwNWUtZGQ1NC00Njk0LThiODEtYTMxYTQ2OWY5MjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01e1EbM1nG7VEU1OLx8CN9iDaBolw7XkDwBj
mJM7zttq5BZMsInZKQAplODyVehpBYJZWS5I9yJYc2afXaDGhQM8KLJ0GLMTjTxa
B6mF8IUp6wlTbEtujGs5c0sw4FfbLwWIK/y4ZC0JCIlLIgmAvdIsKfEdtnS9DGtt
PEseMuKzTw6AN7ujHWaRI72Sz+OI7xheX4yQ6U3Scce4XJQrEVEnxPZhaRpyiIE6
3FZvcLrfwut8PQrt9Qgi/ujHxVb6lUc3U4h22ONPyhtWeKeYMqY0p/JSwrRCCBoL
h96/Waa3imJ5oDbbnoNS80nlb1IwM3oZ4nuj1tDNxAQ6F2GojQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqDXhtASxczhSV1attaeCGqSV0tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTQwNjU1MTUtYTY3Ny0z
MTRmLTkzYjAtZWZlZmY5YmVjMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKj0tJOwYRQVdIpYK/idqja0hJOsD/XI3S+qLZUt159hVcuObFV4guKw
R5StkmFWkD3H0PaST/fWUvOIhwskBV7ixEmoJCH7XZPWskdJvGyizWSrwNld5vlK
rb3RqsDWZIKk/MX5UyBRYQ0IEVLs0oxScfn+pS41DVfrBnVUApu1JaIs7glCAQuK
ZI5gFBM+GMIoXeLmrWt1bhrzGJ5iPWfFF/Qg2p206sFB0o1BQSvQUM0vUXWgski8
UT9dVAiHjPfID1yQdwaV8Rqy1RRDzYUGWbmCGDjd0ugHmKo5OpVnw6VU6C8Z4JdQ
jtGDvAipWe0Xj6xuQRITQhwnll0lVMc=
-----END CERTIFICATE-----