This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cbfeefa-bf7c-39fb-8540-7aa588b7a67b.roa
File:                     1cbfeefa-bf7c-39fb-8540-7aa588b7a67b.roa (raw, json)
Hash identifier:          hjLy1o6z85YuVs16xUrMi0lF5exIrD99UNj18oY1Wdw=
Subject key identifier:   1F:AB:19:FA:66:79:09:67:71:59:A9:D0:97:A4:A1:8B:95:C1:41:D0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F0D7BF1D4A3DD11B83071C280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cbfeefa-bf7c-39fb-8540-7aa588b7a67b.roa
Signing time:             Sat 27 Aug 2022 12:00:00 +0000
ROA not before:           Sat 27 Aug 2022 12:00:00 +0000
ROA not after:            Sun 02 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        144.220.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0d:7b:f1:d4:a3:dd:11:b8:30:71:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 27 12:00:00 2022 GMT
            Not After : Oct  2 04:00:00 2022 GMT
        Subject: CN=56b2b653-a415-473b-897a-04487790d79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ed:7a:94:ca:4d:04:56:17:e4:7f:79:a6:3e:
                    c1:e8:c7:fe:78:a8:d2:d9:80:7c:4d:c6:52:5d:a4:
                    ef:5c:c7:c8:dc:6f:91:f1:7c:39:a4:76:84:c1:32:
                    90:03:f8:6c:6e:71:32:bd:95:55:6d:e8:0c:35:9a:
                    56:62:d5:5d:cd:e0:40:eb:75:10:3d:8a:0c:c5:82:
                    3e:8f:9b:6c:27:b6:47:c9:18:f9:11:c1:e6:25:55:
                    8f:1c:58:b4:b9:4e:0d:6e:c0:17:ef:5f:4e:af:5b:
                    e5:b6:78:df:66:c7:99:26:f5:bc:0f:49:dd:37:4c:
                    99:8d:d0:fb:71:69:c0:d8:fa:4b:68:ff:19:c9:84:
                    fd:1b:d3:e5:a3:28:b1:06:a3:34:25:b6:02:41:9c:
                    f3:16:b3:ab:1a:cc:00:44:ea:28:aa:62:41:8b:cc:
                    c5:9c:f1:72:47:72:3d:8c:34:91:98:10:d6:3b:48:
                    a2:94:d5:a6:07:d1:15:31:c6:4c:bf:27:2c:02:ff:
                    e8:5d:44:6e:e4:a7:b7:98:38:25:ec:4a:23:fd:b9:
                    d0:41:b1:a5:ad:2f:77:74:ad:ff:1c:00:a3:42:c4:
                    67:db:88:9a:25:0d:09:29:cc:11:49:66:87:45:af:
                    bb:3b:ed:c3:2b:cd:2a:aa:b6:bb:f4:a1:4d:b9:40:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AB:19:FA:66:79:09:67:71:59:A9:D0:97:A4:A1:8B:95:C1:41:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cbfeefa-bf7c-39fb-8540-7aa588b7a67b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:37:ae:e1:38:5d:22:ed:64:41:2c:ac:1b:4e:02:64:71:1a:
         66:6a:05:33:17:a9:de:bb:62:b9:99:bd:b1:5b:9a:74:e0:f3:
         8d:1f:8e:af:36:35:be:83:60:9f:7f:3d:ce:dc:60:36:39:71:
         2f:f7:bd:a8:60:75:5a:ec:30:50:9b:e0:62:da:b4:78:bd:6f:
         1d:cb:b5:14:c0:dc:e8:90:2a:72:11:be:45:db:48:e0:f2:79:
         c8:57:9a:c0:fc:f2:f9:f1:b7:41:d3:c3:ef:9b:88:1a:dd:26:
         cf:da:37:3a:f9:93:2a:0f:66:4c:79:31:53:41:b5:84:fc:22:
         09:32:07:9b:4d:30:c9:16:7c:c7:ae:14:58:c9:57:da:8a:c0:
         2a:65:0b:2b:c2:6e:9c:ca:4d:47:1a:02:73:60:16:00:ef:a5:
         91:f5:77:68:89:76:0d:eb:dd:0c:fc:16:c3:96:a2:cd:25:f4:
         ed:6f:5b:9a:cc:1d:1c:fd:b2:59:5f:ba:12:e6:56:8b:f1:23:
         56:b1:d2:f8:2e:b4:c0:e3:38:46:70:40:81:68:b0:c0:c3:7f:
         16:42:b5:e5:67:34:60:6e:7f:4a:c8:29:73:ee:14:52:03:2c:
         f9:78:b7:a1:99:f1:db:bf:7b:e6:6c:a3:de:be:c8:1e:6d:80:
         b3:09:89:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----