This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/298e50c4-bf8f-35bc-bd7a-a841a81a2337.roa
File:                     298e50c4-bf8f-35bc-bd7a-a841a81a2337.roa (raw, json)
Hash identifier:          dMSsmTplCNZqfNaVzEfqFwUaajv/WeCmzeUeLeJu7Xk=
Subject key identifier:   F1:1C:DB:F0:DA:C2:00:5C:E0:CB:2E:88:B0:86:C4:91:D2:7B:58:69
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EB9965EF09FD14BDB815B3B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/298e50c4-bf8f-35bc-bd7a-a841a81a2337.roa
Signing time:             Thu 28 Jul 2022 12:00:00 +0000
ROA not before:           Thu 28 Jul 2022 12:00:00 +0000
ROA not after:            Fri 02 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.112.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b9:96:5e:f0:9f:d1:4b:db:81:5b:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 28 12:00:00 2022 GMT
            Not After : Sep  2 04:00:00 2022 GMT
        Subject: CN=87557a7b-704c-46d6-8f2d-8c66687578a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:12:d6:65:2a:5e:d1:08:14:1d:36:fd:32:
                    4c:20:d8:9e:ce:03:6d:11:25:f1:0d:c3:fd:d5:cc:
                    c5:e1:5a:5d:ae:36:4e:e6:83:f8:21:28:83:98:47:
                    97:2c:32:42:f5:88:46:a6:64:5d:09:bd:bf:7a:f6:
                    c6:fa:41:7b:3b:97:8b:24:ad:e0:a5:75:9c:f3:02:
                    d1:76:59:0f:cb:8c:54:df:4a:2f:5f:cc:a7:3f:3e:
                    5d:da:e6:93:6c:dc:33:3b:40:1a:e5:e1:e6:c3:6a:
                    b4:82:e7:05:32:b1:8b:db:50:71:21:2a:e8:e6:b6:
                    c1:95:2e:10:fb:81:ae:d4:41:81:91:87:d9:d9:f6:
                    c5:da:64:d3:35:8e:e7:29:91:2f:1f:8e:d2:7a:05:
                    c7:47:ed:02:a0:d4:70:cd:69:9d:8b:62:bc:eb:8a:
                    d7:50:53:ad:92:6a:6b:06:92:86:cd:e6:63:03:93:
                    7b:46:cc:bf:76:87:9c:ae:8f:f9:58:7f:f1:7f:93:
                    15:39:11:1b:52:db:44:df:3f:75:78:9f:8e:ca:62:
                    9d:99:e2:d8:39:98:a8:d5:54:d7:e1:32:22:8d:20:
                    82:7a:1f:ee:95:6e:cd:1b:99:13:6d:25:90:4e:64:
                    28:f2:d7:8f:6c:10:8e:61:0d:6f:f0:9d:d5:c2:ae:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1C:DB:F0:DA:C2:00:5C:E0:CB:2E:88:B0:86:C4:91:D2:7B:58:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/298e50c4-bf8f-35bc-bd7a-a841a81a2337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:52:41:50:3f:bf:b8:2c:91:ff:0e:69:90:de:70:b5:f9:56:
         e6:12:54:a7:70:21:c3:9c:30:43:ce:20:12:6e:27:68:25:ae:
         22:9d:30:33:c5:d7:01:d2:3c:bc:dd:a3:b4:db:ff:1a:b5:8b:
         e1:9a:4a:4d:8f:d9:36:df:88:6e:d0:40:2c:4d:6a:5e:a1:d6:
         df:7f:5e:2c:83:6a:5e:de:88:7b:80:a6:8b:c8:c5:af:fb:2e:
         ee:8c:2f:76:52:22:fe:94:fb:d3:72:c7:ea:e7:9e:e6:95:c1:
         a0:44:e7:8f:1e:bf:b1:ba:33:55:25:cf:cb:cf:35:49:09:e0:
         65:ed:e2:8f:99:1f:c5:e8:86:69:e1:6a:e4:ad:6b:04:a7:3c:
         99:16:c1:10:17:6a:61:5a:4c:43:a2:71:51:73:cb:c9:65:fd:
         fb:42:13:b1:02:42:d4:40:14:16:91:e3:77:09:4b:5d:10:11:
         ec:54:d6:1c:17:a5:31:f3:c5:d8:97:3b:9b:d5:d9:a5:d0:22:
         e1:f4:82:4a:2c:7f:6f:8e:26:cc:32:ec:0e:1b:88:96:78:3b:
         7b:2a:c1:19:05:eb:7b:e5:20:0c:42:ef:95:61:a1:93:f0:84:
         9a:99:dd:c0:24:f3:1d:fa:e0:66:4f:d6:c7:c4:ea:b0:26:09:
         09:f5:4c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----