This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/268094d4-8673-3c38-8f11-3e44283d8f4c.roa
File:                     268094d4-8673-3c38-8f11-3e44283d8f4c.roa (raw, json)
Hash identifier:          6eiNCtx4ID/fAhHmCwiUpNmFgQ42RAqNoHQ1wQhM+4w=
Subject key identifier:   6F:5D:B9:4A:42:4F:79:2C:4E:21:C7:CC:41:22:3F:CB:14:D8:08:20
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DDE8D483D7A4349E73077B180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/268094d4-8673-3c38-8f11-3e44283d8f4c.roa
Signing time:             Tue 10 May 2022 12:00:00 +0000
ROA not before:           Tue 10 May 2022 12:00:00 +0000
ROA not after:            Wed 15 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.182.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:de:8d:48:3d:7a:43:49:e7:30:77:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 10 12:00:00 2022 GMT
            Not After : Jun 15 04:00:00 2022 GMT
        Subject: CN=f0b8d16f-e6e7-4888-aef7-2c81f6f18844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:da:d1:fc:cc:bc:44:5e:39:0f:af:6b:f1:b4:
                    91:56:5b:12:70:41:84:43:6e:a4:a0:af:57:b4:f9:
                    54:7c:9a:52:d1:fb:ea:93:6f:42:8e:70:c5:be:11:
                    c2:88:d9:7d:c7:db:a7:00:51:d5:df:b0:24:9f:a7:
                    e8:07:ba:26:45:b0:05:8a:52:e5:71:ee:cb:38:89:
                    19:df:dd:05:47:ca:e3:e0:f2:65:7d:11:86:31:f2:
                    32:c0:89:4a:40:4a:c0:e5:34:85:f5:47:1d:8f:5d:
                    37:86:06:3a:a8:4f:de:f3:d1:18:38:a3:fb:5c:98:
                    99:b7:1f:14:d6:6d:3f:5b:67:c0:68:2b:68:a5:9c:
                    c0:5f:2b:35:b5:c7:4a:db:b4:3b:47:44:20:ea:8d:
                    73:6c:50:6d:23:8f:96:a4:00:a6:83:63:29:b5:b4:
                    5a:61:8d:42:38:6e:16:98:a1:e0:a2:9c:48:2c:f0:
                    6c:59:cc:62:39:dc:3d:8d:f5:e2:87:bc:80:f9:80:
                    3f:04:d6:f1:a1:7c:1f:8f:93:c6:01:cd:b9:47:71:
                    ec:19:e9:0d:ea:97:8a:f9:dd:c3:7a:3e:4d:95:ed:
                    69:cd:e7:f8:9c:1e:a5:87:a8:58:9f:60:24:dd:af:
                    58:c2:73:c0:77:f1:85:75:5a:1e:db:e4:64:a9:39:
                    22:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5D:B9:4A:42:4F:79:2C:4E:21:C7:CC:41:22:3F:CB:14:D8:08:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/268094d4-8673-3c38-8f11-3e44283d8f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.182.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:cf:3a:a6:52:8c:46:ac:04:96:2f:89:4a:32:16:8d:a7:50:
         6d:65:72:fe:a2:ce:15:4f:d8:0b:c8:b0:c4:f9:15:51:ef:14:
         c0:38:b7:56:5e:13:47:90:6b:50:1d:c3:1d:a4:36:ab:be:9e:
         db:3f:27:de:b0:9f:d3:23:4f:cf:fe:12:ec:87:0c:6e:b7:f8:
         5a:f4:03:94:9c:2b:a3:6f:c5:f1:f4:9e:f4:fc:88:eb:07:db:
         99:2b:3f:26:21:fb:b8:43:8e:7c:09:1c:6d:95:34:28:72:8f:
         7d:be:8e:3f:9d:bf:f7:92:cb:72:d8:a1:7d:da:e1:76:32:8f:
         04:41:3c:61:92:e1:61:60:23:3f:a2:ff:69:e8:4d:a1:de:c7:
         08:b1:8b:0a:79:c9:37:05:db:b3:70:7d:d9:a2:4f:09:0f:5d:
         53:e5:14:7b:68:ce:fc:3e:85:c7:27:d3:1a:53:ed:6b:56:8b:
         c6:ef:72:d4:6d:48:ba:26:b5:64:04:9d:89:f8:57:fc:ec:15:
         74:cf:25:f3:c2:f0:a7:1a:38:07:46:56:c2:0b:1f:83:bb:95:
         28:71:b2:5f:5c:76:75:02:1a:2c:b5:91:0b:96:f8:91:fc:2a:
         e4:74:b9:5e:78:36:5e:03:c8:e5:42:77:64:06:0c:23:d4:fc:
         21:f7:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----