This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30ae359e-1227-3a02-ba81-3338c26fbe34.roa
File:                     30ae359e-1227-3a02-ba81-3338c26fbe34.roa (raw, json)
Hash identifier:          fqnX6erthBAVXVS021PfiAkymuAIihJsOTerGOlhnbQ=
Subject key identifier:   71:A2:55:9F:62:DB:B4:2F:B3:9A:2F:ED:B0:6A:7B:2A:58:A1:B0:D6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840437BE36AE1A3E01E3323B980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30ae359e-1227-3a02-ba81-3338c26fbe34.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        153.41.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:43:7b:e3:6a:e1:a3:e0:1e:33:23:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=bb2ac511-b226-4a1d-a22d-ab2342533ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:db:df:79:db:2b:14:2c:19:9d:41:c7:42:92:
                    bd:38:31:74:30:c8:58:1e:01:f8:3e:18:62:96:ea:
                    70:62:78:81:9e:c4:a2:09:6e:ae:49:d1:47:ab:63:
                    8b:6a:66:af:97:62:26:9e:db:a5:c4:4a:39:e4:3a:
                    d2:55:d7:9d:e8:a1:c9:b8:e2:1f:49:53:15:a4:37:
                    1a:48:d0:5b:fc:f8:8c:81:36:fa:7a:98:ad:34:6b:
                    9e:e9:4c:91:1a:32:14:a2:0c:15:47:c8:77:7b:b1:
                    ef:3c:58:1d:d9:67:8f:ac:89:eb:65:6a:f1:79:0c:
                    29:8b:81:5e:e7:bc:5a:6a:8f:81:89:da:5f:98:cf:
                    c6:77:e2:05:85:ba:b3:3e:da:3b:3d:9d:ca:b9:db:
                    64:ac:43:21:22:01:28:0c:3a:bb:0c:74:19:28:45:
                    01:e5:42:52:20:53:ce:8f:d0:53:a4:12:fe:81:6e:
                    2a:45:9a:94:8f:80:00:0d:ed:83:82:4b:b2:43:73:
                    38:46:9e:86:84:27:88:24:d0:1e:09:4a:67:38:e6:
                    35:42:2d:21:47:f0:13:83:a3:bb:ed:93:7d:55:9f:
                    8e:3d:03:59:94:24:89:be:57:69:bf:a8:c4:05:3f:
                    4b:ca:43:7d:69:cc:70:b0:1a:7f:fa:26:cc:88:19:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A2:55:9F:62:DB:B4:2F:B3:9A:2F:ED:B0:6A:7B:2A:58:A1:B0:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30ae359e-1227-3a02-ba81-3338c26fbe34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:1d:a2:31:ef:57:9c:7d:63:13:21:bb:9e:29:15:09:b0:
         cf:62:22:16:d3:f1:dd:36:58:94:7a:71:f2:eb:96:e0:f2:21:
         c5:af:af:61:8b:9e:b0:bf:95:96:69:b6:d2:1d:de:a1:01:0e:
         96:8a:6e:72:a7:0d:5b:19:54:f7:f4:ff:17:cd:15:f5:84:5a:
         53:54:06:8d:73:db:45:04:74:07:67:0d:24:58:c0:35:50:74:
         3b:83:b9:01:da:2e:9c:80:59:9c:db:b6:0a:7e:39:3b:47:89:
         5e:8a:07:69:b9:25:22:64:e9:21:9e:52:d8:52:b6:56:e8:09:
         b6:4a:db:66:60:bb:c7:ab:96:45:2b:ad:5e:33:25:81:17:1f:
         57:47:f5:5f:77:52:b4:6e:2b:0f:24:8b:5c:ff:6d:cb:ce:03:
         04:31:83:dd:45:e6:61:ea:8a:6f:9b:b1:b1:31:35:bc:47:33:
         6b:75:73:c2:63:b7:b4:b7:95:4d:1b:37:e9:45:2c:f0:c2:26:
         02:e4:9e:58:e4:35:38:0c:22:07:23:3c:36:09:88:fd:9c:74:
         cf:12:0c:05:83:fe:9f:d6:93:ce:01:12:fd:a9:22:ac:15:76:
         e8:1c:9c:03:6d:cb:5c:b1:f7:37:a9:d2:9a:b0:01:91:b9:9f:
         1c:80:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----