This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34cf1b0f-c832-3fb3-91a9-eb6998c326f6.roa
File:                     34cf1b0f-c832-3fb3-91a9-eb6998c326f6.roa (raw, json)
Hash identifier:          HmnTutWaCi8wZEiOtUQx7wmtQZmHhPQi7j15BG6n040=
Subject key identifier:   79:CB:47:4F:4A:4D:2B:A8:8A:49:88:81:4F:F5:A3:7B:4A:0F:86:7B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F32F84840A09BF15996B60480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34cf1b0f-c832-3fb3-91a9-eb6998c326f6.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.254.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:32:f8:48:40:a0:9b:f1:59:96:b6:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=c0dd5590-f050-4b2e-ab54-8003098a1b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f3:af:c4:e2:79:d4:fa:39:be:48:6b:da:33:
                    b7:4c:37:30:10:2a:67:82:13:e9:47:1d:1c:94:6f:
                    75:a0:bf:9f:3d:97:c5:d7:1c:ac:2a:13:ed:06:25:
                    84:15:12:08:d3:e7:10:b2:d4:47:52:d0:de:54:2e:
                    77:fc:fb:20:91:b9:d1:f6:9b:5d:17:29:34:95:e3:
                    d7:0a:a7:e0:1c:4a:73:4f:8f:ff:e3:27:54:46:b9:
                    90:ec:2a:34:14:af:b5:00:ac:fb:4f:5d:65:8f:88:
                    ef:30:b7:d6:15:4a:88:85:45:f1:95:60:65:cb:11:
                    30:1a:fb:ef:dd:f2:77:f4:4b:7d:1a:02:7a:73:66:
                    b3:87:ab:7c:c5:e9:39:0a:81:13:d2:62:71:69:5c:
                    ef:82:cf:2a:c7:da:0e:1f:03:44:2b:cb:38:9d:2c:
                    b7:92:a3:d3:4f:48:a8:f3:91:73:e8:8a:a2:07:c5:
                    ff:a1:d7:63:15:ed:48:5c:88:a9:8f:c1:41:81:45:
                    bf:07:c3:42:39:cc:fb:50:b1:5b:ca:b1:f5:d6:d6:
                    74:73:61:b0:4e:6d:1b:91:7c:18:de:cf:61:54:77:
                    88:2e:3d:b5:60:2d:47:06:1b:e6:c7:b1:6b:1c:63:
                    99:9d:02:7b:f1:20:2e:89:c5:f5:8a:ab:d3:29:18:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CB:47:4F:4A:4D:2B:A8:8A:49:88:81:4F:F5:A3:7B:4A:0F:86:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34cf1b0f-c832-3fb3-91a9-eb6998c326f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.254.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:1f:91:cf:f7:11:4f:2e:27:ca:37:c4:f9:41:23:01:17:1a:
         41:06:1d:4a:df:42:86:b0:8d:4e:7a:8a:44:16:8f:ef:f5:f3:
         ce:c1:bf:96:d7:c8:35:ae:24:eb:f0:07:ac:84:80:0e:70:d7:
         3a:b2:82:a6:3c:54:1a:e9:12:c3:4e:c0:98:32:39:72:46:96:
         7c:17:0e:2a:42:14:0d:aa:c8:dc:ff:08:f8:8d:3b:be:66:4a:
         08:be:d6:24:11:2a:83:45:f5:75:e8:9c:7f:24:c5:b1:f8:f8:
         28:90:6c:1c:4e:c8:05:a0:cf:4f:71:c6:51:12:e5:94:bc:a6:
         b8:07:bf:5d:cf:a8:39:7e:7b:44:1d:aa:4d:b9:1b:fe:22:9e:
         fb:04:7a:96:bd:48:fa:b8:98:7f:8b:10:ee:bd:2c:23:b2:0a:
         61:2b:e7:bc:82:8e:0e:86:71:23:15:46:a1:30:62:a1:f5:f2:
         aa:a2:cc:58:8a:5c:91:a5:4b:8d:7c:3b:af:71:6d:15:8f:01:
         e6:cd:7a:a9:2a:42:65:ce:6f:d5:43:fe:e6:59:4d:ab:e4:d8:
         9a:9f:47:86:24:f4:6d:2f:7a:d0:34:74:81:73:fd:06:9d:1f:
         7b:46:a1:24:93:21:fd:51:08:35:8b:69:51:1a:7c:e0:3f:98:
         35:cb:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----