This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d852a3f-bf6b-329e-831d-97e70dcec9ea.roa
File:                     1d852a3f-bf6b-329e-831d-97e70dcec9ea.roa (raw, json)
Hash identifier:          Aayyh7SqsSadHyhwQYGFsUU2T3LmjyNwWOCOQMxd93o=
Subject key identifier:   23:44:E9:3F:33:EB:67:F0:F4:10:F7:A2:0C:7F:49:BD:D7:09:92:30
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C447DD5C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d852a3f-bf6b-329e-831d-97e70dcec9ea.roa
Signing time:             Wed 19 Dec 2018 02:25:03 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.218.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c4:47:dd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=59fcdc1d-74a6-4811-b8fc-78e671b80637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:1b:b3:a2:46:54:e8:75:74:22:da:84:ba:
                    04:b8:41:38:a8:49:81:9d:de:ff:c2:fd:e3:d9:b0:
                    24:41:5c:b3:f0:35:fd:24:18:61:01:c6:ba:e8:8c:
                    01:dd:29:5d:73:b3:73:2f:0e:1c:cd:2a:ce:ab:6c:
                    af:87:96:a3:b4:80:cb:a7:82:51:4e:8f:b7:0b:02:
                    bb:e1:f6:97:f7:6b:be:d7:56:a8:8c:9c:c1:2d:0d:
                    e7:86:d4:e8:f9:39:2b:5d:55:98:c1:f4:14:3a:26:
                    a6:76:5e:55:b4:20:30:ae:a3:d6:a9:2d:a6:83:59:
                    d0:86:6a:85:87:6e:0c:98:9b:eb:7e:60:2f:28:16:
                    3a:24:7b:b1:06:89:ef:c8:3b:6b:57:90:c8:18:f9:
                    c1:b7:77:be:c4:11:0d:ad:f9:23:6b:c0:2f:53:e5:
                    2b:20:b2:09:6a:5e:4e:79:86:2f:e1:63:0d:17:a3:
                    e3:04:84:c6:5b:24:02:af:88:e5:d4:c8:8d:15:74:
                    46:c3:c5:3b:64:86:63:06:81:1b:1e:40:61:fd:31:
                    96:79:1c:6f:61:52:77:c1:70:d9:f0:0c:59:ee:37:
                    39:0e:45:16:bb:b2:af:4f:32:ef:ac:6b:6e:21:92:
                    3f:89:14:61:0e:ff:61:36:ee:fc:27:ca:67:10:9e:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:44:E9:3F:33:EB:67:F0:F4:10:F7:A2:0C:7F:49:BD:D7:09:92:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d852a3f-bf6b-329e-831d-97e70dcec9ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.218.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:bf:0e:77:3b:04:1a:3c:21:f8:c4:f0:d0:1a:48:cd:ea:95:
         30:49:53:f0:43:8b:e6:84:aa:71:ef:4a:60:79:a8:69:79:46:
         5c:c0:cb:f9:92:21:46:ae:e6:d8:74:3c:0b:9f:86:37:47:4c:
         fc:9b:b9:ff:d3:4a:01:bd:4f:90:7c:c4:a9:e0:cd:f8:65:34:
         62:3d:e7:f7:2f:7c:3b:2e:13:1e:85:ff:89:88:b8:f4:29:8a:
         97:8b:c5:1f:cf:07:14:d1:db:f7:2b:ca:b5:d2:da:2b:a4:30:
         d1:a1:9d:5e:97:dd:9d:a5:7d:ad:92:98:a0:4e:21:f1:02:8f:
         2e:4c:b3:fa:37:77:28:25:ed:3e:62:30:58:fb:12:3c:7a:e3:
         e6:5f:12:c4:35:2a:1c:8e:e5:01:93:89:ef:db:a4:f9:f0:5c:
         3c:1a:bb:56:8c:34:5d:b0:eb:41:83:30:34:72:4c:15:1d:fe:
         93:0a:b2:94:f7:78:25:4a:66:3b:a9:f9:cc:d1:a9:e4:ea:70:
         6e:3a:a2:02:e6:30:60:bd:4d:ff:c1:59:18:9a:d7:f7:af:40:
         47:63:c8:a9:e4:9f:25:7e:66:ae:99:ca:12:f3:c0:1a:7e:1e:
         2c:97:fb:ce:de:12:d1:a7:3f:88:7c:98:9a:2a:c7:58:3f:d7:
         df:9b:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----