This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/175a0826-ddc7-390a-8c06-b1c75e9e7f46.roa
File:                     175a0826-ddc7-390a-8c06-b1c75e9e7f46.roa (raw, json)
Hash identifier:          5/k7BYP7mbUkjzauL+1xmrezh/WWRhxvPuVM8zYK+1o=
Subject key identifier:   60:F0:55:88:B3:23:BA:12:F4:1D:CF:4A:E2:E9:7A:50:40:66:5E:7B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EDAD39A7E2CF1B37E5EEE0900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/175a0826-ddc7-390a-8c06-b1c75e9e7f46.roa
Signing time:             Tue 09 Aug 2022 12:00:00 +0000
ROA not before:           Tue 09 Aug 2022 12:00:00 +0000
ROA not after:            Wed 14 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        3.64.0.0/10 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:da:d3:9a:7e:2c:f1:b3:7e:5e:ee:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug  9 12:00:00 2022 GMT
            Not After : Sep 14 04:00:00 2022 GMT
        Subject: CN=ae3ef598-4f43-475f-9ae1-649a48ab5d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:b2:7a:a1:43:85:d4:f2:92:b4:41:a5:e6:
                    a4:14:55:63:fc:15:0d:6d:00:86:2c:fe:a5:7a:2c:
                    ba:b9:21:42:f1:b2:88:44:bd:a2:34:1d:20:c7:a5:
                    db:c7:66:5f:3f:5f:cd:d2:4a:cd:20:e8:39:12:7d:
                    12:cd:d4:13:b5:b8:4f:bc:a8:75:d8:94:6f:38:3b:
                    5d:75:14:33:d6:05:ca:81:f6:48:54:19:de:f1:69:
                    4d:0b:be:a2:b6:99:15:c4:64:8c:c5:f7:29:34:5d:
                    e7:3d:00:d9:b8:50:81:24:15:cc:aa:91:d3:cf:7c:
                    52:ca:f3:10:c9:7e:e2:61:88:c8:f8:27:d6:36:c7:
                    b1:be:d7:db:58:c8:41:01:23:66:91:40:79:0c:bf:
                    46:36:90:90:78:0d:cc:6c:91:ab:f0:6c:20:c2:a0:
                    0c:06:6c:67:57:43:a5:00:fa:e6:86:71:87:16:3a:
                    5f:42:0f:b5:7f:a0:c9:e9:58:51:fa:c1:fd:9f:48:
                    99:6b:c4:f0:be:73:11:16:88:f3:74:dd:5c:93:61:
                    9c:e1:a8:67:24:73:dd:06:c4:da:ff:df:12:48:8c:
                    44:77:a1:58:bc:db:54:ca:9e:de:c7:44:e1:23:52:
                    cd:b4:02:19:f0:dd:6f:98:33:69:dc:b3:23:43:a8:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F0:55:88:B3:23:BA:12:F4:1D:CF:4A:E2:E9:7A:50:40:66:5E:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/175a0826-ddc7-390a-8c06-b1c75e9e7f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.64.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:46:8f:24:77:d8:70:76:23:33:4b:b1:94:bf:5f:5a:61:a8:
         29:dc:f9:40:b0:34:59:93:19:45:04:0d:7a:71:b1:ed:13:ab:
         d9:8f:5d:4a:b1:8d:53:71:3b:17:1b:c9:7c:a7:24:bb:7a:69:
         31:59:37:2a:3f:4b:e1:51:39:33:df:f8:87:bf:45:41:f1:45:
         1a:65:8e:5d:5f:af:8c:6f:c4:f0:b1:97:3b:7b:29:b8:9b:a4:
         54:80:51:75:ae:60:af:2a:e5:ee:aa:b1:18:ef:3e:32:06:b5:
         55:d9:7f:45:82:89:e6:1d:6b:a0:21:ef:9e:2f:ae:a4:e3:7a:
         47:4f:65:23:05:ca:f2:a8:37:d3:0c:56:b8:cb:9b:d2:8a:8e:
         aa:06:c4:81:90:b8:d8:eb:6d:e2:e9:37:a7:0e:16:99:7a:81:
         4e:ed:a0:87:c2:1a:b8:d2:85:08:a4:6c:05:f5:96:bc:ad:0d:
         29:17:5e:fe:57:c3:8a:97:69:75:08:a0:3e:1c:8a:1e:91:a0:
         d0:1b:1a:fd:35:2b:40:76:6c:4c:f9:8a:b5:a7:90:41:fc:48:
         db:19:68:cb:bf:b1:20:d0:ef:79:75:2a:d0:78:3e:4f:59:9c:
         26:87:7e:d9:32:6b:9d:c6:fe:9a:fd:e0:e5:9b:1d:76:78:06:
         63:c0:a2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----