This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/272e3d7f-0771-371f-a36e-951ac24e56c1.roa
File:                     272e3d7f-0771-371f-a36e-951ac24e56c1.roa (raw, json)
Hash identifier:          CNKVe3woYni11+ynqzsadlFRnIwfnScRPvq6++WJ78A=
Subject key identifier:   A0:2E:B4:B5:10:EB:47:07:74:3F:B8:DF:CC:C4:71:76:FD:9D:F2:C5
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16694458893
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/272e3d7f-0771-371f-a36e-951ac24e56c1.roa
Signing time:             Sun 21 Oct 2018 01:37:56 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        52.95.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:94:45:88:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=117fc278-22c9-453e-b105-f39789e7d395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:9b:fb:a1:8a:e3:64:3e:62:f0:65:e6:3b:
                    1f:6a:a9:51:74:61:96:e2:5d:73:f6:85:d6:87:06:
                    1c:31:2a:e4:99:b9:53:6d:64:a4:58:d9:3c:3e:42:
                    5e:54:ea:fb:30:ed:e8:39:00:53:66:a3:2b:58:97:
                    c8:e1:93:f2:62:1c:a7:65:dd:43:19:bd:18:7c:fb:
                    ae:42:60:b2:64:21:e2:d7:8a:8c:5f:e8:83:f1:66:
                    c5:ae:2a:f3:f5:87:d0:b3:0d:8e:4a:9e:b9:98:04:
                    3c:c5:09:60:c8:59:74:27:6c:8f:6b:20:89:cf:c8:
                    cd:7d:71:d1:39:22:cf:67:e9:7d:3b:24:8d:e2:d3:
                    2e:75:0e:a4:68:b5:29:32:12:32:d4:fe:25:49:ea:
                    f3:d3:37:25:72:c4:47:be:16:1a:24:ef:8c:1a:d6:
                    c7:1b:0a:aa:e5:b4:22:91:bd:31:92:06:f5:90:7f:
                    b9:e7:a9:ea:26:cc:2b:f4:a7:f2:62:44:a8:51:40:
                    b4:93:4f:67:f1:b5:3a:0f:72:14:d2:9c:83:4c:e5:
                    55:3f:31:2e:ec:58:86:7d:0a:36:79:9c:1a:b0:d7:
                    6b:bc:ae:43:03:f9:69:79:13:b2:75:4e:8c:59:99:
                    65:84:80:a8:c2:5a:7d:69:08:1b:ab:6c:7f:f8:e1:
                    55:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2E:B4:B5:10:EB:47:07:74:3F:B8:DF:CC:C4:71:76:FD:9D:F2:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/272e3d7f-0771-371f-a36e-951ac24e56c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.95.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4e:2d:3b:70:62:b6:01:8b:6b:a0:d9:f5:e9:52:44:ad:cd:
         3f:8e:43:e0:a7:68:ec:aa:8d:06:5e:40:e6:e3:34:53:55:d3:
         02:b5:f2:e5:83:4b:ab:ba:19:d1:06:c5:7d:12:58:f2:b7:4d:
         90:31:b4:9f:9e:9d:d1:af:b2:79:94:ef:32:ca:7e:40:2a:5e:
         14:e9:1e:72:54:34:70:bb:61:44:a6:dc:5a:15:03:fe:b7:6a:
         d8:67:bb:e7:51:6f:50:91:a7:4b:3d:6e:7f:c9:d7:d4:ba:dd:
         52:51:77:81:0e:72:59:d5:11:df:97:5f:af:a4:68:f2:0a:7c:
         80:a7:0c:4d:2e:ac:fa:47:60:48:b6:c3:6d:c4:72:fd:ff:d6:
         d2:df:a4:e3:fb:eb:47:0f:c7:41:a9:2d:bd:41:75:d5:a1:8d:
         0e:2d:11:fe:b5:57:25:ba:63:cd:e5:7c:99:fe:4b:0f:9a:e1:
         94:6a:1b:6d:fb:46:99:94:af:c8:fb:4f:99:c9:42:9f:1f:fb:
         d8:dd:5b:8e:d4:ae:62:46:80:7a:2e:83:59:ca:ad:27:b7:b7:
         77:f5:c5:0c:fd:8e:81:9e:5f:c3:00:19:b8:f0:e9:a1:27:fd:
         a1:92:d4:cb:ef:91:90:3a:b4:5b:1e:8d:71:6a:8d:29:a7:4d:
         11:db:68:cc
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZpRFiJMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJkNDVm
YzAeFw0xODEwMjEwNDAwMDBaFw0yNTA5MzAwNDAwMDBaMC8xLTArBgNVBAMTJDEx
N2ZjMjc4LTIyYzktNDUzZS1iMTA1LWYzOTc4OWU3ZDM5NTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALfDm/uhiuNkPmLwZeY7H2qpUXRhluJdc/aF1ocG
HDEq5Jm5U21kpFjZPD5CXlTq+zDt6DkAU2ajK1iXyOGT8mIcp2XdQxm9GHz7rkJg
smQh4teKjF/og/Fmxa4q8/WH0LMNjkqeuZgEPMUJYMhZdCdsj2sgic/IzX1x0Tki
z2fpfTskjeLTLnUOpGi1KTISMtT+JUnq89M3JXLER74WGiTvjBrWxxsKquW0IpG9
MZIG9ZB/ueep6ibMK/Sn8mJEqFFAtJNPZ/G1Og9yFNKcg0zlVT8xLuxYhn0KNnmc
GrDXa7yuQwP5aXkTsnVOjFmZZYSAqMJafWkIG6tsf/jhVW0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSgLrS1EOtHB3Q/uN/MxHF2/Z3yxTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMx
YTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0NWZjLzI3MmUzZDdmLTA3NzEtMzcx
Zi1hMzZlLTk1MWFjMjRlNTZjMS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI0OWJjMWE1LTFiMmItNDllOS05MmFj
LWY1M2Y3YTJkNDVmYy8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1
ZmMuY3JsMB8GA1UdIwQYMBaAFPg3wsHE/MGixN7vxatKZku/P7ZtMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdh
MmQ0NWZjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADRfgDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAbk4tO3BitgGLa6DZ9elSRK3NP45D4Kdo7KqNBl5A5uM0U1XTArXy5YNLq7oZ
0QbFfRJY8rdNkDG0n56d0a+yeZTvMsp+QCpeFOkeclQ0cLthRKbcWhUD/rdq2Ge7
51FvUJGnSz1uf8nX1LrdUlF3gQ5yWdUR35dfr6Ro8gp8gKcMTS6s+kdgSLbDbcRy
/f/W0t+k4/vrRw/HQaktvUF11aGNDi0R/rVXJbpjzeV8mf5LD5rhlGobbftGmZSv
yPtPmclCnx/72N1bjtSuYkaAei6DWcqtJ7e3d/XFDP2OgZ5fwwAZuPDpoSf9oZLU
y++RkDq0Wx6NcWqNKadNEdtozA==
-----END CERTIFICATE-----