This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18e85999-9a65-3105-b2b4-ae477f3c637b.roa
File:                     18e85999-9a65-3105-b2b4-ae477f3c637b.roa (raw, json)
Hash identifier:          drRJvg36hV5NS/GwP6gaVTCc7Fp3MTbPfFJl/fjE0TE=
Subject key identifier:   34:E5:4D:68:DE:01:CD:CF:BF:78:5D:D5:B8:4D:DD:B5:B2:56:4F:C3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C50A50EE
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18e85999-9a65-3105-b2b4-ae477f3c637b.roa
Signing time:             Wed 19 Dec 2018 05:57:26 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        52.219.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0a:50:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=029af771-1f95-4a21-8102-6c32dda7b3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:95:bf:d6:43:6a:91:dd:1a:e3:08:5f:43:
                    bd:b1:06:c2:f6:77:05:53:3a:77:25:d2:7d:1e:11:
                    53:92:a5:dd:e8:8b:ba:e9:61:43:e8:18:a9:82:a0:
                    dd:a9:9e:d9:07:7c:07:f4:c3:b1:78:32:53:c4:47:
                    5e:03:a9:50:40:d6:42:eb:52:0b:3c:ca:e1:69:06:
                    e3:1e:2d:64:29:fa:26:9e:3a:98:f7:f8:80:34:ee:
                    3a:ef:08:20:4b:03:44:d7:22:90:ab:39:8a:b4:76:
                    ad:ee:a7:3f:1c:38:b1:77:87:7a:86:cc:ba:5c:87:
                    45:66:1c:09:4d:c0:bd:81:9f:4b:c5:ab:e5:2d:25:
                    b5:19:48:c8:24:64:2e:97:20:e0:93:75:8e:69:ea:
                    25:cd:ea:af:4c:64:97:78:93:33:8b:72:9e:e0:57:
                    b8:41:65:36:50:f0:c1:64:f8:08:d7:ee:24:d2:1d:
                    c1:4a:90:c0:be:40:1e:bd:11:19:d1:7b:f1:82:48:
                    97:cc:6d:2b:69:ef:eb:02:d3:c2:47:66:b7:16:ce:
                    5e:5d:cc:83:2e:02:47:6f:08:5c:42:4e:4f:f7:a5:
                    9a:31:27:cb:76:c4:a9:e3:13:7d:96:d5:7f:9b:ed:
                    36:56:c7:22:ea:50:52:b9:d2:86:1d:09:a4:48:d8:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E5:4D:68:DE:01:CD:CF:BF:78:5D:D5:B8:4D:DD:B5:B2:56:4F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/18e85999-9a65-3105-b2b4-ae477f3c637b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ba:c3:d4:54:73:cd:ba:33:87:b4:40:34:03:14:38:83:46:
         65:09:bb:23:41:2f:d4:ea:68:c8:8c:8c:47:dc:d4:cd:b5:d6:
         bc:98:74:2a:60:32:7f:8f:7e:79:99:59:79:d9:b1:09:5f:68:
         ba:a1:dc:4a:6f:b8:bd:1d:b0:35:bb:9b:84:a5:91:eb:e5:42:
         75:ed:8e:08:e5:58:30:a4:5e:a5:3f:b5:73:c5:bc:71:2f:a5:
         5d:93:cd:eb:89:61:99:4b:78:a9:30:5e:9f:3b:c0:52:1e:0f:
         d4:f0:16:66:2d:3c:74:bb:31:d2:1e:48:bd:ff:8b:82:ab:15:
         06:be:e3:5f:f2:fa:17:63:70:58:1b:2d:41:0e:b2:01:da:9d:
         a8:34:8e:1c:c2:90:21:a0:06:a4:c8:db:3a:e7:fe:8a:89:ab:
         4c:31:e4:ab:e7:7c:5f:89:1b:41:94:07:86:6f:23:15:05:b7:
         db:1a:c7:84:ef:c4:92:2a:bc:15:21:ba:0c:46:ff:56:05:13:
         10:05:cc:2e:e1:3f:f5:3a:d0:a9:3c:f1:c2:a7:1b:1d:2b:29:
         69:15:03:40:9f:d5:28:25:ff:06:45:1f:57:e1:dc:7f:32:5b:
         42:54:a0:62:44:38:96:42:9d:e3:23:bd:db:9e:9e:fc:6b:4a:
         17:d3:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----