This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2130f820-f99b-329e-a525-bd6c82d2b0a1.roa
File:                     2130f820-f99b-329e-a525-bd6c82d2b0a1.roa (raw, json)
Hash identifier:          kSVTal7PtRdF6h3Opp3YXonZXVAWUb46zWVwQ3ayPM8=
Subject key identifier:   57:84:ED:58:81:EB:97:0C:7D:96:BF:32:BD:15:1B:33:CF:67:41:34
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F0C77673CDA8D9E860B4DF580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2130f820-f99b-329e-a525-bd6c82d2b0a1.roa
Signing time:             Sat 27 Aug 2022 12:00:00 +0000
ROA not before:           Sat 27 Aug 2022 12:00:00 +0000
ROA not after:            Sun 02 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.114.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:0c:77:67:3c:da:8d:9e:86:0b:4d:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 27 12:00:00 2022 GMT
            Not After : Oct  2 04:00:00 2022 GMT
        Subject: CN=7877494d-bafd-420f-9a3c-299658511563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:17:ab:09:e4:90:e5:89:c9:75:06:83:eb:
                    cd:e5:b2:8f:c3:92:66:8a:e4:a7:c7:76:09:64:31:
                    e7:35:fc:af:2e:a8:26:dc:78:c9:e4:1c:b2:d4:d5:
                    8e:e2:07:c9:17:87:66:a9:26:3e:a5:c3:2c:c2:f4:
                    22:1c:d8:d7:04:a1:0b:34:1c:89:04:32:b6:6d:e8:
                    46:32:34:0b:8a:84:c5:40:6b:d0:50:82:09:14:0b:
                    26:1f:72:91:36:ff:c6:30:0c:81:4d:27:01:7b:d5:
                    5c:52:4c:e6:38:3e:eb:10:d9:42:27:91:65:49:bd:
                    bd:63:b6:64:38:39:76:59:8a:52:6e:07:1d:d9:ef:
                    72:db:be:62:a7:17:6e:a1:50:df:69:3c:49:88:6a:
                    70:13:21:15:c3:0e:14:c6:08:9c:95:24:5a:d2:67:
                    e0:df:55:e5:47:0c:b7:30:b1:2d:ba:37:5d:86:4a:
                    ef:99:db:9d:35:5b:20:29:3d:94:45:63:69:84:c7:
                    33:57:fc:e3:25:ee:b2:75:87:51:eb:86:3f:42:8a:
                    df:93:40:32:ce:4a:79:d0:5b:2c:55:52:3e:3c:a7:
                    dd:44:a9:b8:13:5b:ed:b8:d0:ab:36:a5:ad:c1:fb:
                    85:c1:44:42:35:32:93:80:fb:3f:95:bc:0b:59:21:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:84:ED:58:81:EB:97:0C:7D:96:BF:32:BD:15:1B:33:CF:67:41:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2130f820-f99b-329e-a525-bd6c82d2b0a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.114.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:57:d6:40:10:86:c2:f1:21:1c:0d:1f:5b:98:1f:2d:52:7f:
         4e:5f:43:2b:57:3a:ff:1d:7c:e9:f7:b5:4c:a9:a5:91:20:75:
         27:f3:0e:15:27:37:e4:e5:7e:70:72:84:3d:f4:60:4b:01:7c:
         77:22:19:b5:fe:a3:e0:d2:c9:fe:e4:cb:00:73:59:e3:1a:c6:
         7f:07:7b:f8:ab:17:1e:59:d1:44:99:a1:48:b8:e1:49:5d:d8:
         26:8b:36:e0:a6:16:d2:45:7e:63:73:bd:11:a2:b3:a2:dd:58:
         dd:29:86:2e:85:09:53:9c:48:75:df:83:b6:ae:2e:fc:86:4e:
         0e:d6:71:7d:9b:0e:14:ac:40:e6:1b:7d:c1:a9:b7:12:fe:d7:
         fe:e4:a5:92:60:f9:2d:7c:f0:b8:75:5a:5a:30:6d:ce:4b:01:
         04:ad:17:a1:54:f6:e0:d1:56:01:75:83:d0:4c:39:eb:e9:e6:
         56:c7:2b:5e:3f:db:ef:6a:58:a7:70:0e:2d:82:13:a1:50:bb:
         f5:35:fe:16:1b:05:3d:48:40:55:fd:1d:31:74:de:ac:ce:4c:
         e9:e9:47:ba:b2:99:6a:ca:98:8e:b6:22:eb:61:cc:c6:8f:b4:
         20:be:d7:f7:b0:7a:70:5c:a6:7f:80:f8:d3:00:e5:6b:23:6e:
         97:37:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----