This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c63d133-a32e-34f6-8156-632744ae926d.roa
File:                     1c63d133-a32e-34f6-8156-632744ae926d.roa (raw, json)
Hash identifier:          qNaFm6xSUW0MZduhB3M+2v7sBKiH+sJTHdbq7Koj63I=
Subject key identifier:   C3:5B:14:64:44:E3:CF:5A:89:47:9C:D0:FD:B1:F2:88:57:82:27:5B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840111DCF5693C8E78F58A5BA00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c63d133-a32e-34f6-8156-632744ae926d.roa
Signing time:             Mon 28 Nov 2022 12:00:00 +0000
ROA not before:           Mon 28 Nov 2022 12:00:00 +0000
ROA not after:            Tue 03 Jan 2023 05:00:00 +0000
asID:                     6167
IP address blocks:        155.146.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:11:1d:cf:56:93:c8:e7:8f:58:a5:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 28 12:00:00 2022 GMT
            Not After : Jan  3 05:00:00 2023 GMT
        Subject: CN=8500b1a7-476a-4c04-b2b1-8fb59b80fd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:db:81:bb:6c:f4:4b:ff:32:7c:7c:86:7c:68:
                    cc:a4:ca:a9:44:76:31:ec:bc:2c:de:70:aa:fb:e9:
                    31:42:da:98:fb:13:dc:d7:49:4c:2c:54:1f:be:46:
                    02:1c:bf:2d:58:28:2f:45:f8:c2:39:d8:53:b9:c7:
                    5b:90:6f:d2:0f:71:fc:ef:71:42:f2:c1:4a:cf:d3:
                    3c:85:68:bd:64:5a:17:6f:cd:58:5f:16:40:a8:59:
                    60:d9:ea:9f:72:12:3d:bc:68:b0:7c:30:7f:60:40:
                    24:fc:0a:83:2b:6c:70:92:e3:1f:74:1c:33:18:34:
                    d0:06:a7:bf:c7:b3:7c:c8:7c:a6:75:7c:61:3c:f9:
                    81:0b:d8:e6:76:19:68:bf:de:80:68:6f:35:c4:7b:
                    28:f8:fd:36:ba:32:49:80:c8:b5:36:b1:c6:97:8b:
                    e0:1c:f7:48:f2:0b:0a:88:18:ab:56:a5:7e:b1:bb:
                    87:20:66:45:f0:d7:a5:6a:21:03:ad:73:f6:4e:bd:
                    c7:61:fb:ab:59:07:05:95:e4:39:ff:67:4f:8b:bc:
                    cb:1a:83:3b:d4:dc:98:71:75:64:b7:69:85:c2:03:
                    51:3e:63:06:52:0d:52:2b:5c:4c:30:e6:5d:9b:2c:
                    0b:b8:0b:86:9e:d1:8d:e2:f8:de:bc:09:09:73:e5:
                    47:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5B:14:64:44:E3:CF:5A:89:47:9C:D0:FD:B1:F2:88:57:82:27:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c63d133-a32e-34f6-8156-632744ae926d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:89:fc:55:c5:e0:84:5d:21:02:ca:54:b2:e7:00:6a:2a:8e:
         04:b0:b1:0f:68:49:e1:39:2c:89:59:02:d3:96:d4:c0:45:8d:
         8a:3c:c6:e0:72:04:47:c3:94:a1:49:07:0d:0b:b1:90:b6:15:
         c1:b9:89:9b:5e:49:f3:b0:92:1f:a0:ae:b5:48:27:62:b0:ae:
         3a:a6:95:e8:60:fd:4d:02:c6:02:77:71:a5:64:35:30:a3:65:
         7d:1d:3c:ce:60:97:14:d5:ba:de:ac:7c:32:70:6c:1b:a2:1f:
         41:7c:fb:32:8e:ab:61:bc:41:64:72:79:c6:a2:14:d8:3f:7f:
         5c:a7:22:ab:3c:6c:1c:47:87:af:ff:b2:bd:9f:f1:bb:cc:b7:
         16:57:b9:59:94:5f:10:0e:a3:89:a5:b9:e9:62:f3:4c:27:f5:
         66:ef:98:07:e8:ce:3a:d5:c8:2d:2d:1e:7e:b3:65:05:77:25:
         69:7c:8e:1d:45:aa:1e:f1:2b:35:6d:5f:f4:f9:60:cd:d8:6e:
         fc:86:d2:4b:78:d7:54:7f:bc:76:58:30:b4:8b:48:d8:ee:61:
         2c:b6:af:81:41:25:8c:a7:1d:5a:9c:86:53:89:9f:21:07:29:
         e5:89:dd:05:27:6b:57:3d:8f:2b:c1:fd:6f:b9:f1:3a:fe:0d:
         6d:b0:87:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:48:53 2025 by rpki-client