This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b7cc023-a7d4-360b-a0f7-203424d5acec.roa
File:                     2b7cc023-a7d4-360b-a0f7-203424d5acec.roa (raw, json)
Hash identifier:          wYr+NncCLOiMFgFRfRYFQzjXaL3w/8qnHWr7U0cK5OU=
Subject key identifier:   18:8C:25:8C:68:48:C1:AD:75:29:DF:22:C5:E9:1D:8C:0D:71:D4:3C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FEF61D007B7B64014E61E3EC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b7cc023-a7d4-360b-a0f7-203424d5acec.roa
Signing time:             Wed 16 Nov 2022 12:00:00 +0000
ROA not before:           Wed 16 Nov 2022 12:00:00 +0000
ROA not after:            Thu 22 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        15.172.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ef:61:d0:07:b7:b6:40:14:e6:1e:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 16 12:00:00 2022 GMT
            Not After : Dec 22 05:00:00 2022 GMT
        Subject: CN=1e55d3c3-47b9-4a4b-8a4c-dca55143fad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:a5:2b:ec:4f:95:19:66:76:d6:de:98:5e:
                    c1:e2:c2:7b:44:64:4b:d3:e2:e2:93:7d:98:ce:b0:
                    c3:76:b6:43:f0:51:db:aa:ab:a3:9b:61:c9:ff:84:
                    41:98:2a:e9:a8:ed:8c:75:84:f9:52:09:6e:c0:23:
                    bc:6c:af:20:1a:17:7e:9a:31:85:ff:78:2f:87:79:
                    0a:68:e1:58:b6:12:22:2c:5e:49:d8:74:02:e0:39:
                    fe:b8:1a:81:9a:a1:e4:2e:34:ea:6a:7e:35:52:03:
                    a3:f4:5c:d1:bd:96:3c:36:ee:b8:c2:11:eb:36:f2:
                    93:0a:a4:1e:bb:f5:18:b4:c2:38:54:f1:65:d1:e9:
                    16:b3:c5:b4:65:c6:fc:df:bb:34:d6:1b:ff:74:70:
                    63:74:d0:6b:31:22:b6:60:5d:22:21:95:c3:4b:7e:
                    d7:b2:e2:3e:9d:b4:75:bd:d5:75:87:72:a2:22:0e:
                    40:44:1d:7f:58:d7:14:d4:8e:04:52:5f:78:39:b5:
                    c5:45:c6:24:a4:b5:00:37:16:f6:63:81:5c:c8:d9:
                    b1:d4:f8:4c:72:ae:27:09:57:e2:87:4e:b1:d8:a5:
                    24:11:fb:03:86:67:0d:a9:a2:ae:6d:34:66:d9:6f:
                    21:8d:9a:f3:de:2b:96:07:9f:1a:3e:21:90:bc:33:
                    19:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8C:25:8C:68:48:C1:AD:75:29:DF:22:C5:E9:1D:8C:0D:71:D4:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2b7cc023-a7d4-360b-a0f7-203424d5acec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.172.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c2:a9:6b:d4:8e:01:48:b1:28:18:44:cf:00:c4:fa:ee:f4:
         1b:8f:9b:cc:cd:1c:c2:b9:72:e2:ee:a5:f2:93:41:da:1f:c1:
         6d:80:2d:36:2b:a7:37:2d:49:43:b9:1b:d2:d2:a2:5b:76:52:
         50:ba:51:9e:7d:5f:d2:3a:01:d7:2b:32:b9:27:27:8b:20:5c:
         e9:b5:c6:28:47:4d:43:a5:4a:77:59:d8:fe:0e:45:48:45:9d:
         41:b0:49:e7:5d:d6:cc:5f:08:ef:99:4e:82:63:ce:9f:e0:42:
         a1:5a:5e:70:d2:35:ab:2b:b0:fc:a1:a3:f9:4c:07:86:51:76:
         f5:31:e6:6a:9c:fa:48:09:76:af:66:b6:02:7f:be:0f:ed:a1:
         b2:c7:13:f7:00:36:e8:a3:7c:de:df:52:b0:47:c7:ba:e2:cf:
         34:df:0c:9f:7b:ee:3a:7a:e6:ff:04:9e:d1:93:34:91:23:7c:
         99:0a:d5:98:94:b9:2e:b1:a0:c2:d7:29:44:ed:25:02:19:dc:
         18:ba:94:fb:ba:77:45:dd:df:1c:51:9a:29:74:3e:30:eb:2a:
         03:66:f4:db:f9:a6:2a:44:b7:37:36:eb:0b:22:f1:80:7b:3d:
         19:50:d1:82:0c:0d:6c:26:5e:83:6d:72:66:4e:b3:3b:e3:0d:
         74:7d:6a:d9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/vYdAHt7ZAFOYePsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExNjEyMDAwMFoXDTIyMTIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
MWU1NWQzYzMtNDdiOS00YTRiLThhNGMtZGNhNTUxNDNmYWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvalK+xPlRlmdtbemF7B4sJ7RGRL0+Lik32Y
zrDDdrZD8FHbqqujm2HJ/4RBmCrpqO2MdYT5UgluwCO8bK8gGhd+mjGF/3gvh3kK
aOFYthIiLF5J2HQC4Dn+uBqBmqHkLjTqan41UgOj9FzRvZY8Nu64whHrNvKTCqQe
u/UYtMI4VPFl0ekWs8W0Zcb837s01hv/dHBjdNBrMSK2YF0iIZXDS37XsuI+nbR1
vdV1h3KiIg5ARB1/WNcU1I4EUl94ObXFRcYkpLUANxb2Y4FcyNmx1PhMcq4nCVfi
h06x2KUkEfsDhmcNqaKubTRm2W8hjZrz3iuWB58aPiGQvDMZiwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBiMJYxoSMGtdSnfIsXpHYwNcdQ8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMmI3Y2MwMjMtYTdkNC0z
NjBiLWEwZjctMjAzNDI0ZDVhY2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD6wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZsKpa9SOAUixKBhEzwDE+u70G4+bzM0cwrly4u6l8pNB2h/BbYAtNiun
Ny1JQ7kb0tKiW3ZSULpRnn1f0joB1ysyuScniyBc6bXGKEdNQ6VKd1nY/g5FSEWd
QbBJ513WzF8I75lOgmPOn+BCoVpecNI1qyuw/KGj+UwHhlF29THmapz6SAl2r2a2
An++D+2hsscT9wA26KN83t9SsEfHuuLPNN8Mn3vuOnrm/wSe0ZM0kSN8mQrVmJS5
LrGgwtcpRO0lAhncGLqU+7p3Rd3fHFGaKXQ+MOsqA2b02/mmKkS3NzbrCyLxgHs9
GVDRggwNbCZeg21yZk6zO+MNdH1q2Q==
-----END CERTIFICATE-----