This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d6c60e7-d714-3a4d-aba7-a261d1ee91be.roa
File:                     1d6c60e7-d714-3a4d-aba7-a261d1ee91be.roa (raw, json)
Hash identifier:          gzTfPvl6pW3r0nJ1aAAZnoU5YG7lHDSNbTURDeQkO8A=
Subject key identifier:   3F:C2:23:F2:B3:D4:B9:18:B7:1D:88:3A:16:BF:83:8F:F5:6C:EF:B8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584019420833B239745AA66C63C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d6c60e7-d714-3a4d-aba7-a261d1ee91be.roa
Signing time:             Thu 01 Dec 2022 12:00:00 +0000
ROA not before:           Thu 01 Dec 2022 12:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        52.124.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:19:42:08:33:b2:39:74:5a:a6:6c:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  1 12:00:00 2022 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=077d4965-ff2c-4778-9470-56db26463a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:75:6b:8c:56:68:a1:3f:ee:28:ea:41:25:9a:
                    de:ad:1d:a5:c3:1c:7f:97:be:81:ad:dd:03:87:e8:
                    a4:82:72:a7:71:15:b0:d6:3b:25:d6:91:67:1c:ec:
                    dd:39:af:ae:44:74:0e:19:49:f9:ad:a5:5a:04:bb:
                    ed:f1:cc:a4:b9:ba:5f:2e:5e:7e:45:d0:82:1d:2a:
                    87:e8:76:f6:0f:2e:1c:de:51:a3:43:62:68:58:1b:
                    1f:3f:51:e3:d9:94:f6:b4:8a:eb:35:33:ab:28:d1:
                    ca:38:29:41:b7:3a:52:63:72:75:4a:f8:8f:ee:fc:
                    27:45:56:56:00:49:ea:a0:b3:46:48:dc:ea:e3:7d:
                    6f:0e:c6:46:57:de:6e:f8:a5:8a:45:89:78:dc:60:
                    2d:fb:7c:e2:bb:e6:db:44:d1:93:89:ff:f7:4f:7e:
                    11:03:cd:aa:b8:48:3e:65:93:5e:02:17:df:34:dd:
                    6a:af:f0:d9:3a:a1:da:c1:3c:24:4c:3e:46:50:2b:
                    f9:a4:7e:23:11:64:e4:b7:d5:3e:9c:8f:6a:70:0a:
                    b0:14:a2:75:bd:cc:76:9b:dc:a6:17:86:a5:50:e2:
                    d9:a2:3f:3c:42:c5:37:67:e0:09:7b:58:24:94:91:
                    41:a9:1a:a5:99:74:a4:81:2d:76:9d:6f:4d:d5:77:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C2:23:F2:B3:D4:B9:18:B7:1D:88:3A:16:BF:83:8F:F5:6C:EF:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d6c60e7-d714-3a4d-aba7-a261d1ee91be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c7:41:52:3f:7e:ca:b6:19:44:bc:3e:2c:ae:66:55:cf:dd:
         c7:42:d1:3c:44:21:a4:9a:ed:17:22:c6:8c:5d:2f:02:d7:06:
         73:24:bf:86:28:61:83:c1:0e:07:d3:d9:82:35:ed:2c:85:41:
         0e:4d:ad:c8:c9:04:de:f4:fd:3c:44:a0:71:3a:4e:c2:21:79:
         0c:62:00:93:c6:32:53:49:85:2a:58:04:72:36:64:fd:c5:14:
         33:08:96:51:0e:0c:ce:8a:53:3f:7d:e4:ee:ce:1f:83:6e:8a:
         63:d3:ae:e0:9d:ff:23:2f:09:80:d4:05:b3:2a:ba:12:d0:3b:
         ee:03:ef:85:19:bb:b0:f0:8a:9a:1b:07:28:41:2e:cf:c5:a0:
         00:88:79:82:c5:79:15:0e:0d:c9:b3:0b:a8:05:47:62:f4:fe:
         1a:bc:d9:c1:44:c8:b8:e9:10:84:f1:52:97:88:59:85:db:a4:
         63:e3:d1:e1:09:ec:db:f6:86:f0:50:8b:cc:47:a6:c7:e4:ca:
         8d:28:5e:f9:6d:7b:15:e9:3a:06:2c:56:01:b4:80:a4:cc:00:
         03:bc:a3:68:98:aa:98:a1:0f:12:b6:92:ee:cd:86:39:89:2d:
         85:4a:25:6f:16:fa:57:d5:94:25:5d:50:c2:ad:69:37:23:c6:
         3f:54:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:05:13 2025 by rpki-client