This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/25fd1df8-b8cd-3b7f-a8a7-fd85c5fa111f.roa
File:                     25fd1df8-b8cd-3b7f-a8a7-fd85c5fa111f.roa (raw, json)
Hash identifier:          PhA5N6ybbxwPaUQg4if7KPr51le/+NrDc8rJcGjEIrA=
Subject key identifier:   50:97:BC:06:CB:5B:AF:70:7B:FE:47:7D:69:BC:14:BE:E4:63:51:A8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D8089142E3C2E5CC2A78481A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/25fd1df8-b8cd-3b7f-a8a7-fd85c5fa111f.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.70.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:80:89:14:2e:3c:2e:5c:c2:a7:84:81:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=57958931-99bf-4d67-b837-b50435525579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:0a:4a:91:22:9b:cb:5e:4d:65:92:dd:5e:
                    f8:3d:a3:72:07:9c:e1:65:26:1f:12:1f:b7:06:f7:
                    a6:3a:80:de:78:5d:ab:35:59:2e:27:0a:93:89:27:
                    1e:d4:4c:a8:dc:d1:ee:ea:38:62:77:bb:b8:b9:7b:
                    12:20:30:ab:ab:88:b6:02:34:29:c8:81:c9:c4:1b:
                    c9:69:b0:47:75:81:aa:0e:41:ef:fd:04:f8:62:69:
                    86:d3:49:22:47:50:07:9a:f0:43:56:b9:e3:96:de:
                    f1:06:3f:e9:9d:58:53:88:11:f1:f6:d5:2e:1f:bf:
                    d4:d1:99:2c:9c:da:1c:ff:65:ae:cd:17:81:5e:5d:
                    25:31:11:58:f5:1c:89:c5:0d:f2:d4:10:e7:56:70:
                    a6:e7:4f:10:78:f4:73:82:88:59:f3:b5:3f:7f:37:
                    42:46:59:16:b4:9b:b0:df:9a:86:b9:cf:b7:6e:58:
                    6d:dd:2b:b3:28:96:c2:db:d0:ea:00:b7:b0:70:bd:
                    27:94:5e:27:d5:48:97:a1:f1:dd:bc:90:d2:6d:e3:
                    ee:b5:79:52:b4:03:4a:36:0c:12:39:f4:5a:19:22:
                    fd:8f:b9:ec:c8:3f:ba:d4:7c:3a:6b:03:76:69:dd:
                    bf:05:0d:9c:09:0f:db:7f:21:1c:51:02:5d:11:9c:
                    2f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:97:BC:06:CB:5B:AF:70:7B:FE:47:7D:69:BC:14:BE:E4:63:51:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/25fd1df8-b8cd-3b7f-a8a7-fd85c5fa111f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.70.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:88:be:87:be:4f:81:84:c7:38:e1:b2:d1:b5:97:3c:35:09:
         b9:b8:f3:8a:9d:ed:91:68:9e:36:e1:09:e0:8e:16:ab:4e:74:
         81:09:30:f6:cc:12:75:45:32:19:56:85:db:3e:cf:07:c1:ed:
         c4:d0:ef:e1:58:b5:ec:5d:ae:8d:4e:c8:33:e0:2f:8e:96:cf:
         80:bd:ff:b6:ca:9c:f4:02:e0:b1:6b:29:04:80:b9:5d:2a:05:
         2b:87:a3:44:df:9f:ed:61:36:ef:74:75:fd:9e:61:49:f7:05:
         e8:b6:d2:b8:7e:c9:8f:76:88:15:45:b2:bb:96:d0:a9:a6:65:
         cd:95:ee:29:40:87:cd:3d:99:c5:e4:9e:5a:b2:e5:0c:09:36:
         73:9d:3a:b7:be:da:1e:22:14:fa:01:34:c5:4a:43:53:5a:dd:
         fb:ae:4a:da:48:ce:84:f7:aa:20:10:3e:22:a5:61:cb:27:51:
         73:ea:77:76:f3:6b:86:46:51:1b:19:3f:61:ee:55:46:84:64:
         2a:ec:7c:e4:cc:b4:c8:41:d3:a4:d3:a0:36:a1:03:ef:71:a7:
         f5:dd:57:05:35:98:db:4a:93:cd:01:72:28:e0:e1:44:a3:28:
         7c:bf:b3:d2:34:b7:c5:ef:f3:b1:1c:31:b9:a1:3e:4e:80:c9:
         fe:58:ce:06
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2AiRQuPC5cwqeEgaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NTc5NTg5MzEtOTliZi00ZDY3LWI4MzctYjUwNDM1NTI1NTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJQKSpEim8teTWWS3V74PaNyB5zhZSYfEh+3
BvemOoDeeF2rNVkuJwqTiSce1Eyo3NHu6jhid7u4uXsSIDCrq4i2AjQpyIHJxBvJ
abBHdYGqDkHv/QT4YmmG00kiR1AHmvBDVrnjlt7xBj/pnVhTiBHx9tUuH7/U0Zks
nNoc/2WuzReBXl0lMRFY9RyJxQ3y1BDnVnCm508QePRzgohZ87U/fzdCRlkWtJuw
35qGuc+3blht3SuzKJbC29DqALewcL0nlF4n1UiXofHdvJDSbePutXlStANKNgwS
OfRaGSL9j7nsyD+61Hw6awN2ad2/BQ2cCQ/bfyEcUQJdEZwvxwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFCXvAbLW69we/5HfWm8FL7kY1GoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjVmZDFkZjgtYjhjZC0z
YjdmLWE4YTctZmQ4NWM1ZmExMTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEkYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACYi+h75PgYTHOOGy0bWXPDUJubjzip3tkWieNuEJ4I4Wq050gQkw9swS
dUUyGVaF2z7PB8HtxNDv4Vi17F2ujU7IM+AvjpbPgL3/tsqc9ALgsWspBIC5XSoF
K4ejRN+f7WE273R1/Z5hSfcF6LbSuH7Jj3aIFUWyu5bQqaZlzZXuKUCHzT2ZxeSe
WrLlDAk2c506t77aHiIU+gE0xUpDU1rd+65K2kjOhPeqIBA+IqVhyydRc+p3dvNr
hkZRGxk/Ye5VRoRkKux85My0yEHTpNOgNqED73Gn9d1XBTWY20qTzQFyKODhRKMo
fL+z0jS3xe/zsRwxuaE+ToDJ/ljOBg==
-----END CERTIFICATE-----