This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34ed498c-7be9-3f5b-82a4-d816e3fc3435.roa
File:                     34ed498c-7be9-3f5b-82a4-d816e3fc3435.roa (raw, json)
Hash identifier:          vIqEG99whadTuWX3RrEuNH8Z4QjXrG48GkoQ3+fcOZQ=
Subject key identifier:   C6:A8:AE:0E:7D:21:47:7C:89:E0:59:7D:4B:DF:EC:42:A1:63:BC:02
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DAB8B68EB4AAEF9A173236900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34ed498c-7be9-3f5b-82a4-d816e3fc3435.roa
Signing time:             Fri 22 Apr 2022 12:00:00 +0000
ROA not before:           Fri 22 Apr 2022 12:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.216.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ab:8b:68:eb:4a:ae:f9:a1:73:23:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 22 12:00:00 2022 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=af7a1fc5-3e69-41da-ace1-9aaa4993d747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:f0:f0:22:ae:75:16:03:49:10:f4:1a:67:
                    29:28:1b:e5:2a:a6:2d:29:d0:6a:71:29:58:ab:16:
                    8a:66:3a:7d:6d:fa:b2:0b:4c:4c:eb:25:b1:54:bc:
                    81:f7:da:da:7f:2d:67:d3:f5:52:f8:31:3e:d5:b0:
                    11:26:14:96:7e:88:d6:bf:27:ff:d6:37:db:9a:ef:
                    e2:e8:2d:b3:c2:59:6e:99:9f:36:b9:63:de:a9:3b:
                    e0:73:0a:2a:df:56:5c:2a:1e:dd:77:0b:78:75:04:
                    ab:d1:ce:b0:39:98:61:a0:0d:39:f5:c1:22:e2:bf:
                    ff:6a:de:61:06:66:42:8f:e1:3c:3d:c2:88:1d:9b:
                    46:ae:cd:dd:63:1a:67:cb:b6:f5:c4:2a:b2:8e:fc:
                    2a:c3:c6:af:08:51:6d:00:0a:37:aa:46:89:7a:da:
                    df:d7:73:7a:56:9b:96:18:b7:02:e9:e3:24:9d:ad:
                    2f:81:da:17:ce:2d:de:27:6f:27:f8:cc:5d:78:75:
                    a7:d6:95:8f:53:05:f3:6d:c8:26:2c:7e:f2:0f:fa:
                    2a:aa:22:bc:25:c4:fe:d5:22:e8:5b:27:34:09:dd:
                    42:8b:29:70:84:28:6f:75:6d:4d:17:d7:6c:3e:a2:
                    94:3a:13:ab:c6:b4:3c:2e:70:40:86:cb:50:e0:f9:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A8:AE:0E:7D:21:47:7C:89:E0:59:7D:4B:DF:EC:42:A1:63:BC:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34ed498c-7be9-3f5b-82a4-d816e3fc3435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.216.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:70:15:cd:69:ce:67:4a:29:e2:0e:eb:93:e0:a9:64:82:36:
         e0:2b:84:6e:0e:9a:be:7f:f7:03:fe:ef:d3:ba:87:89:9e:f0:
         a1:de:89:d1:aa:4f:63:2b:6b:b8:40:49:18:8e:3a:17:04:58:
         a7:1f:85:60:6a:e0:23:95:4c:1d:9a:b4:5c:b7:78:14:30:6e:
         72:75:d0:7e:a4:96:dc:e9:80:0e:96:d9:6f:0c:cc:f5:59:85:
         fd:48:40:73:54:f4:1c:7d:9f:4a:33:25:8a:b5:64:4a:26:60:
         b0:c8:28:ad:fd:a2:b4:65:65:c2:8a:ff:b5:56:3b:c0:e1:7c:
         90:ed:3a:22:fb:77:c4:04:98:f9:98:a9:61:28:42:1a:f9:a9:
         f2:c5:99:80:5d:67:06:62:29:ee:b7:c9:49:7a:77:ac:15:cc:
         69:6a:ff:2d:a8:5a:86:b9:13:b5:97:12:c2:24:49:ca:9e:5f:
         f9:60:5f:1b:80:a6:1e:5f:46:6b:4b:36:b3:f0:9b:c2:12:48:
         fd:84:9e:0b:00:4c:67:e2:a9:6d:c4:5c:22:05:1e:e7:47:92:
         81:df:9f:37:da:8e:2d:35:a4:50:8c:0b:60:f7:0e:11:0f:71:
         5d:e0:76:ea:27:11:59:e1:67:b1:3f:88:fb:9b:ad:7c:a1:ff:
         8d:46:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----