This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3272d716-ac60-3354-ae62-0a112f4d821d.roa
File:                     3272d716-ac60-3354-ae62-0a112f4d821d.roa (raw, json)
Hash identifier:          si62M4g8vlLfbaXZ2s9aJSEt7+EL3a944X2O5vfuUg4=
Subject key identifier:   BE:B5:49:53:B4:8F:90:97:CF:A0:ED:2C:80:6B:27:4D:21:DF:C7:D9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858404401A09DC067804AC36C0F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3272d716-ac60-3354-ae62-0a112f4d821d.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        35.72.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:44:01:a0:9d:c0:67:80:4a:c3:6c:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=615949fa-786e-4657-abf1-6302f376c69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:2b:6b:a3:01:e7:52:da:da:2f:56:c4:a5:
                    a2:66:cb:89:fc:93:d8:41:0d:8e:c4:bf:8b:cc:30:
                    5c:32:33:af:fb:0a:55:bc:d7:4d:b2:26:ac:e7:2e:
                    07:0d:f2:ca:33:8d:b9:65:ef:fe:e7:16:5f:bd:2e:
                    05:2b:b6:2d:4e:8a:66:e9:15:cd:91:d0:39:4e:44:
                    a3:a6:f8:78:c1:a6:80:7b:78:d8:51:aa:d0:5b:ea:
                    85:7d:41:9e:e0:e4:87:34:63:3d:28:5a:57:33:c0:
                    cc:cf:fa:98:44:a0:1a:14:f6:9a:ee:6b:ec:fa:ba:
                    5f:1b:4f:52:1d:37:e7:29:c5:1b:c8:fe:2c:fe:2e:
                    5a:3a:04:b9:4c:29:21:10:cb:b5:69:39:a1:5a:d3:
                    be:6d:d9:ca:8d:f9:75:7f:ed:c9:8d:9a:db:61:f1:
                    46:1d:21:4c:fd:c1:ce:b1:94:d6:e1:49:2e:c7:02:
                    a5:50:f1:c2:fa:25:1e:58:0f:90:57:2f:0e:a5:69:
                    cf:cc:26:7d:41:f9:42:3b:5f:db:da:69:2d:fa:09:
                    24:64:2f:e6:e6:3c:8b:a0:1b:ed:02:f2:8d:f3:8d:
                    83:eb:2f:1c:35:c1:cd:74:5e:ff:a7:c5:68:ac:b7:
                    75:86:5b:91:78:8c:98:5b:0f:b2:57:0e:02:4a:d1:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B5:49:53:B4:8F:90:97:CF:A0:ED:2C:80:6B:27:4D:21:DF:C7:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3272d716-ac60-3354-ae62-0a112f4d821d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.72.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:8b:b0:82:95:ad:c8:9a:ab:42:a0:ff:4c:71:99:07:a0:80:
         21:9d:d8:4b:22:c0:e0:e3:d3:d7:10:65:78:b9:12:4c:74:4d:
         f4:52:cc:57:19:7f:b0:1e:bf:a8:3d:59:7d:8c:14:79:82:27:
         80:38:b4:a5:1e:2a:5a:41:d5:3a:dd:ae:c9:a4:c5:9a:54:65:
         0c:77:75:45:41:d2:ef:b3:1c:84:64:67:c1:67:60:f0:0b:7c:
         03:a3:bd:5f:f7:14:6b:7c:a5:b0:24:bb:95:f7:14:a9:c7:8e:
         29:68:1e:33:68:a4:f3:c9:17:f6:74:67:7b:67:a2:a8:d5:5a:
         41:03:b6:6d:a4:2b:93:64:76:80:0f:18:91:34:75:f3:c2:12:
         32:8d:91:a7:67:ae:7e:58:a3:40:ca:03:73:8c:e3:90:a1:94:
         8e:e9:6b:d8:de:08:50:af:66:05:f4:d1:c8:e2:65:a0:ac:f0:
         f3:66:08:15:10:d0:7c:07:3c:56:fc:c2:8b:9d:04:06:47:7d:
         fd:1a:ed:06:7e:59:4f:05:51:7c:8b:91:13:25:66:5c:26:e7:
         74:ec:21:40:78:cc:5b:39:8f:d7:1c:9c:d7:e7:46:0e:75:a7:
         0e:73:55:6b:75:44:f3:0c:81:58:e1:86:12:dc:ec:df:92:d1:
         25:7b:de:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----