This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f9c1fb9-870c-3503-9627-ec2d7881db27.roa
File:                     1f9c1fb9-870c-3503-9627-ec2d7881db27.roa (raw, json)
Hash identifier:          SbpQ7t2IjcbmDTZu0clnneya7pW9WGXIvX8cwvUWsFw=
Subject key identifier:   25:E1:AD:B9:E0:11:0F:5C:5F:E9:43:68:80:49:C0:C0:19:6E:E4:BC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665CD5164B
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f9c1fb9-870c-3503-9627-ec2d7881db27.roa
Signing time:             Wed 10 Oct 2018 07:16:00 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        52.219.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5c:d5:16:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=bd90a92d-5e1e-44ac-9e45-5853798604c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:26:9f:84:17:1f:3a:6f:dc:24:95:83:65:ab:
                    4d:4a:c0:1c:94:76:ea:34:d1:2c:a9:ae:38:4f:85:
                    d0:e5:d5:74:e2:9a:8e:70:8f:be:33:84:6f:f3:ff:
                    54:ff:ba:a3:1b:27:a0:68:03:0c:5b:3d:4b:00:31:
                    ad:64:11:5b:53:d2:d2:09:25:11:75:80:50:b5:87:
                    b0:1f:60:70:d4:a8:cf:c3:ac:a1:a1:2c:84:11:cf:
                    3a:00:c3:02:44:48:9f:52:45:e7:6c:a6:ca:9d:cf:
                    ab:7c:1d:ee:3a:fb:b0:d6:28:ab:2f:45:e0:fc:56:
                    da:a8:9b:6d:88:b5:2c:ba:f4:51:09:ec:37:0e:7a:
                    e0:9d:85:c5:f6:61:a9:e9:37:9a:ab:21:65:7e:8a:
                    d9:b6:ae:72:67:03:6e:63:c3:b0:d3:32:c8:99:65:
                    2e:40:97:92:7a:27:2e:b2:92:8c:99:3a:45:ef:93:
                    7b:84:cc:eb:32:76:b9:c9:1e:69:09:b0:07:54:2e:
                    3f:b4:f4:cb:e5:a4:0a:b8:97:b8:bc:ea:b9:d9:e9:
                    8d:28:e6:7a:66:fa:e5:b5:6e:76:ac:83:c8:54:7b:
                    9b:58:9f:11:f9:09:d3:8e:48:e0:f3:dc:22:11:2c:
                    06:37:cf:b8:4f:f5:e6:1a:33:41:ac:f5:e8:53:82:
                    e3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E1:AD:B9:E0:11:0F:5C:5F:E9:43:68:80:49:C0:C0:19:6E:E4:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f9c1fb9-870c-3503-9627-ec2d7881db27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.219.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b6:9a:fd:5e:57:46:86:e2:6d:5f:ea:dd:07:88:af:dd:97:
         7c:ad:36:48:f6:9b:9e:ae:f0:92:55:55:80:4f:9a:d2:19:18:
         55:bb:c6:54:60:49:71:63:4e:4e:90:08:b6:f8:6b:7a:20:5e:
         d1:d2:34:86:64:48:ff:d1:47:da:8a:8a:33:5e:f0:d1:ac:18:
         80:8a:75:8f:ad:2d:04:f0:3c:4a:2e:92:be:c0:1d:8a:40:5e:
         1a:2a:f0:68:c1:e7:cb:79:37:f3:22:ba:d5:3d:06:62:c5:e3:
         35:2a:3f:aa:3e:f8:d4:f5:a4:d8:d8:2c:ff:2a:8c:29:28:34:
         9d:4f:16:e4:f8:51:90:76:22:5b:2d:68:e5:10:2f:a7:75:fc:
         86:f1:9c:84:56:b8:03:eb:39:ad:85:a6:28:88:58:e7:89:36:
         b3:93:07:e0:fa:0f:7d:72:26:92:d1:6f:8b:c9:d9:a9:8d:42:
         2b:71:c7:71:97:7c:b9:e2:ba:11:ee:c9:28:40:4e:77:14:72:
         fb:00:4f:a4:17:11:99:97:9c:a4:0b:85:bf:e3:64:58:69:87:
         fc:4a:4d:67:e1:4f:11:99:ac:20:d7:89:a4:9d:f5:05:21:36:
         c4:15:78:b1:c9:44:57:88:81:a0:59:ed:b3:c4:0d:7a:77:a8:
         13:61:0e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:42:21 2025 by rpki-client