This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1889e1cf-6564-3114-ade9-e7a9978230fb.roa
File:                     1889e1cf-6564-3114-ade9-e7a9978230fb.roa (raw, json)
Hash identifier:          gjwz/BEfXS7RAiQjqEBFTIkOtAOQGZUfTwJlwIcT4yI=
Subject key identifier:   0A:E8:E5:75:77:83:7A:0B:09:4E:9A:90:C0:CD:80:9F:62:19:86:3F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584088EDA157126A7239D569AE40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1889e1cf-6564-3114-ade9-e7a9978230fb.roa
Signing time:             Tue 10 Jan 2023 12:00:00 +0000
ROA not before:           Tue 10 Jan 2023 12:00:00 +0000
ROA not after:            Wed 15 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        13.224.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:88:ed:a1:57:12:6a:72:39:d5:69:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 10 12:00:00 2023 GMT
            Not After : Feb 15 05:00:00 2023 GMT
        Subject: CN=32976dcb-c51e-4018-bcfd-d28835bc2ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:4d:83:7d:a8:33:f1:84:7d:e7:64:9c:28:
                    31:7d:aa:e6:bc:82:f0:43:07:36:bc:05:a9:2c:1e:
                    dc:6b:ea:40:e6:2c:5a:33:43:7d:a5:2d:74:78:46:
                    1e:82:5f:eb:40:0a:a3:52:85:ab:ca:eb:44:9f:8c:
                    fb:10:66:41:2c:e5:72:b5:d8:de:11:2a:ae:e3:41:
                    a6:70:b3:8f:ae:72:ac:4d:e0:2c:b4:5b:8e:89:de:
                    01:f8:06:d6:56:34:a1:e6:94:a6:85:48:23:69:6b:
                    f1:a2:48:df:18:5b:7f:18:9e:52:86:d0:0d:fd:1b:
                    cd:5b:38:3d:fd:c8:34:d3:85:2b:36:74:de:f0:90:
                    1e:63:f1:87:9f:10:c8:2c:ec:ee:f0:8d:45:15:ad:
                    7f:34:8c:24:a1:74:fc:5d:bb:d1:61:7b:b3:a8:4d:
                    b8:6e:15:03:95:93:1b:14:7d:d1:ac:8b:da:6d:b1:
                    ba:44:11:d2:a4:3a:79:17:13:cc:a6:d7:97:cc:02:
                    0c:63:f9:6f:60:e2:f2:a5:e1:fa:e7:03:a3:a3:ba:
                    46:e9:8a:f6:52:2f:26:12:5b:25:14:67:e4:74:0c:
                    0d:5e:e1:e9:7a:27:dd:81:68:a0:c9:b2:1b:48:a3:
                    77:0f:52:26:92:1e:3a:fb:52:40:a1:51:0e:3d:fb:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E8:E5:75:77:83:7A:0B:09:4E:9A:90:C0:CD:80:9F:62:19:86:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1889e1cf-6564-3114-ade9-e7a9978230fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.224.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:4a:02:e0:9f:2f:b5:6b:2a:bb:53:ad:66:d6:80:0b:a4:08:
         74:d0:bb:92:7f:f4:22:12:d3:b1:61:c7:38:15:ec:a7:fb:0d:
         91:c4:b0:db:ba:1f:0f:ea:d9:27:ce:ec:c4:d4:20:e5:27:3a:
         19:60:e1:84:07:f7:c7:85:46:49:41:61:d5:39:ea:0c:76:c1:
         00:49:58:44:81:7e:dd:27:ae:d4:bd:2c:2d:85:84:9b:cf:7c:
         a4:1f:5b:1f:2b:83:7f:0b:fc:53:d5:ab:03:9c:a8:c9:60:e7:
         99:9b:a1:2d:c1:dc:4c:18:ec:52:81:32:3f:9b:04:12:6c:4d:
         9f:4e:b5:9c:a7:44:61:40:f8:09:f2:77:5f:6b:e8:1b:32:35:
         0d:c0:7f:82:f7:5a:e8:02:97:80:0a:68:5a:c2:d2:8a:be:45:
         e4:4c:c6:85:81:f2:80:65:ab:42:04:07:8a:61:04:2f:34:ad:
         53:67:e8:61:39:5b:75:e3:8e:e0:db:01:25:03:f4:fd:1c:ec:
         1e:77:3d:e9:63:72:66:76:3a:c1:da:c8:ab:c5:af:b5:e2:32:
         5d:50:b8:5f:98:cc:79:65:1a:9f:0e:c5:09:dd:c5:49:da:50:
         81:7f:ce:2c:43:8e:7e:28:34:fe:6a:bd:db:7c:e0:95:f0:e4:
         f6:47:40:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----