This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/27a5b7bf-3598-3492-8da9-ace07667882f.roa
File:                     27a5b7bf-3598-3492-8da9-ace07667882f.roa (raw, json)
Hash identifier:          +9Kbr4K3lcXn4f+/UNzt3wTDbCnwOBrXcYnqPOkMrWI=
Subject key identifier:   4A:4E:C8:2F:A4:89:C3:4C:FF:86:84:4C:14:B7:4C:51:23:27:31:1B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CBD4AF59B30AA3BAEE3C4C300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/27a5b7bf-3598-3492-8da9-ace07667882f.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.232.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:4a:f5:9b:30:aa:3b:ae:e3:c4:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=b408dcc3-dd64-47db-acdd-7f9cf27d6746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:2b:d9:46:0b:10:b3:d9:ec:2e:2d:47:95:
                    0f:0c:79:fa:54:4b:33:15:8f:de:1d:e6:95:9a:4f:
                    1c:f4:fc:eb:23:79:90:93:78:f4:1e:1b:a7:3b:2a:
                    80:ae:8a:13:ab:b3:55:a3:03:f1:78:62:75:cf:9e:
                    10:94:dd:8b:af:86:aa:c9:ef:ce:6a:82:20:a3:10:
                    0e:0c:2e:b9:7e:a8:23:92:eb:ea:6a:88:04:0c:10:
                    57:b1:12:2c:49:39:76:1b:c2:2c:82:34:bc:12:06:
                    b8:17:44:c7:80:67:4a:ef:4b:d6:fc:fb:88:e8:f0:
                    0b:ec:2f:8f:6b:b6:18:37:22:44:35:2d:df:f4:3b:
                    ce:4c:4e:ce:fa:65:d8:fc:a3:65:89:0a:49:43:fb:
                    ac:61:c4:d8:97:20:55:bd:39:3e:50:e7:e7:0d:4d:
                    a5:99:30:8b:48:fd:15:fa:08:3a:32:e2:3d:c9:06:
                    3e:4a:78:75:0c:27:5e:f5:81:ab:6b:32:ae:11:c4:
                    38:65:70:64:b9:5d:d3:a8:b9:25:f5:43:15:a1:7c:
                    54:0b:a1:65:f6:eb:74:0b:be:e8:4a:fc:19:95:30:
                    77:08:11:0a:d4:4a:a6:02:66:bb:b0:0c:c1:fd:36:
                    43:23:9c:ec:f5:44:80:41:18:53:04:e5:b0:76:6c:
                    88:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4E:C8:2F:A4:89:C3:4C:FF:86:84:4C:14:B7:4C:51:23:27:31:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/27a5b7bf-3598-3492-8da9-ace07667882f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.232.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:bb:f3:49:50:ba:6d:d5:94:4f:e0:ff:a0:2e:c8:c6:05:b2:
         a6:d1:81:97:bf:5a:8c:07:ee:78:b5:d7:33:2d:64:48:36:a6:
         b9:6f:63:83:3f:28:54:e3:28:cc:38:13:d1:da:7e:30:38:ff:
         02:e2:1a:65:c1:02:e6:9e:2e:d1:fd:3a:d5:62:0e:99:05:f4:
         02:2a:74:f4:c5:be:34:94:12:67:33:36:3a:03:cb:4e:74:0c:
         5c:c6:90:d2:b8:cc:a4:77:2a:c1:ed:a4:e8:c6:a3:73:56:2d:
         e9:c1:01:db:7d:8c:31:82:c3:25:8e:64:66:30:c7:6c:35:3e:
         d4:57:c3:31:79:96:ad:5b:38:7f:b5:bf:02:b1:47:a2:d5:a3:
         1a:79:e0:23:6f:63:4b:ea:7b:54:4c:8e:28:a9:c3:48:cb:6a:
         d8:f3:96:d9:e7:bc:30:9b:45:0b:5b:3e:2a:2a:4f:b5:c4:94:
         77:a5:48:0b:b8:8f:b5:d7:f9:ad:1d:9d:87:98:15:7e:b8:7d:
         ed:d5:c4:f7:7c:ef:51:29:a0:3f:2c:c6:a5:3c:63:a9:c0:aa:
         ed:64:86:95:92:f7:73:03:d3:ba:fb:f0:1f:b3:bf:53:82:b5:
         a5:25:fa:ad:ba:38:6e:9b:3d:f7:bb:0e:c8:70:f1:ce:36:39:
         0e:c1:37:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----