This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36588825-d463-3cb0-9785-388d23c07bf5.roa
File:                     36588825-d463-3cb0-9785-388d23c07bf5.roa (raw, json)
Hash identifier:          23yCaHqf4ZGe0hKrmtdEMN1OITsMdqbNfJEsI88YOTE=
Subject key identifier:   BD:8E:D6:8E:6B:6F:51:6F:3B:A8:C2:49:B0:D2:B8:47:7F:E8:16:4D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EB6D325B09C78AE700900D180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36588825-d463-3cb0-9785-388d23c07bf5.roa
Signing time:             Wed 27 Jul 2022 12:00:00 +0000
ROA not before:           Wed 27 Jul 2022 12:00:00 +0000
ROA not after:            Thu 01 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.238.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b6:d3:25:b0:9c:78:ae:70:09:00:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 27 12:00:00 2022 GMT
            Not After : Sep  1 04:00:00 2022 GMT
        Subject: CN=c20449bf-9b7e-4137-96e5-8027dda8ef1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:8a:f0:01:ea:f3:57:63:c0:66:6a:7e:87:
                    fb:0d:dc:ed:ff:24:af:c5:b3:55:11:b1:46:75:5e:
                    02:5a:70:6e:c4:61:8d:d0:df:8e:3f:32:65:ec:6d:
                    86:2f:17:8c:fa:05:e3:a1:c6:4e:d6:96:ad:ae:bf:
                    f6:39:85:34:6c:2d:4b:28:41:43:23:2c:0b:1f:bb:
                    b2:fe:5e:e0:82:28:1d:1c:07:eb:c1:44:99:2c:d1:
                    b9:ee:62:c5:4b:9b:29:3d:9f:61:c3:aa:aa:35:9e:
                    17:c0:da:5a:7e:9a:a0:eb:5a:db:57:0d:54:37:7d:
                    01:79:80:65:d6:5d:27:a1:bc:22:99:aa:54:46:e6:
                    a5:2a:fc:fb:27:78:10:51:0f:d7:97:30:4e:0b:2d:
                    f5:f0:28:d9:0d:f9:72:37:84:20:17:dc:b2:ee:12:
                    b3:18:d1:c9:cc:9a:4a:cb:6d:b1:96:47:34:a4:b4:
                    54:0c:95:f8:a2:99:24:e6:53:fc:de:05:20:a5:ce:
                    38:0f:c4:5f:74:b7:04:00:61:4a:23:18:62:45:b6:
                    62:6a:6a:4d:7c:0a:51:89:c6:40:1e:08:b2:27:77:
                    aa:25:4b:3a:f7:e3:a5:cf:75:eb:47:44:ab:0d:85:
                    ba:c5:1d:2f:50:d3:00:3b:50:60:12:aa:72:aa:95:
                    ab:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8E:D6:8E:6B:6F:51:6F:3B:A8:C2:49:B0:D2:B8:47:7F:E8:16:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36588825-d463-3cb0-9785-388d23c07bf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.238.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:03:3c:61:5b:d7:73:5d:40:b5:0e:fa:c1:5a:f5:83:f5:a3:
         29:95:e2:34:26:dc:98:db:ff:f1:4d:7f:fc:7d:e7:52:9a:fe:
         8f:ae:84:7f:06:3d:5e:3d:52:80:76:30:06:0e:ad:a9:54:82:
         1c:e5:b8:16:42:12:cd:0d:b8:48:1f:ca:dd:4a:c3:36:19:7a:
         b8:68:26:47:a0:3d:58:0a:76:ff:6d:cb:ff:dc:63:1a:35:32:
         47:36:24:8d:58:d7:93:04:16:b1:2a:ff:61:f2:df:2e:1a:55:
         8b:1e:55:15:be:62:3d:47:bf:81:f8:d5:98:51:84:d6:66:c7:
         1e:c6:f7:8a:c6:12:e1:54:3d:95:8d:18:27:4d:9f:88:3e:2b:
         04:8d:3a:e4:36:97:92:0b:8a:dc:ed:80:88:09:db:64:ed:9a:
         c6:0c:a9:a0:a7:8a:4b:12:48:9d:fc:d5:5f:af:b7:6d:14:75:
         3f:46:de:5e:eb:18:f3:97:15:3b:c5:97:a2:90:24:a1:73:1b:
         a9:fc:16:26:cd:b1:1b:07:5b:64:1b:f5:06:1f:44:3c:ee:b4:
         92:cd:33:55:54:ea:35:e1:91:fc:63:6f:8d:88:a1:bf:06:37:
         8d:84:b8:c0:7b:77:29:b0:3b:ca:a9:cd:fe:3a:3a:bc:47:1a:
         90:9b:18:94
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD620yWwnHiucAkA0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcyNzEyMDAwMFoXDTIyMDkwMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzIwNDQ5YmYtOWI3ZS00MTM3LTk2ZTUtODAyN2RkYThlZjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstCK8AHq81djwGZqfof7Ddzt/ySvxbNVEbFG
dV4CWnBuxGGN0N+OPzJl7G2GLxeM+gXjocZO1patrr/2OYU0bC1LKEFDIywLH7uy
/l7ggigdHAfrwUSZLNG57mLFS5spPZ9hw6qqNZ4XwNpafpqg61rbVw1UN30BeYBl
1l0nobwimapURualKvz7J3gQUQ/XlzBOCy318CjZDflyN4QgF9yy7hKzGNHJzJpK
y22xlkc0pLRUDJX4opkk5lP83gUgpc44D8RfdLcEAGFKIxhiRbZiampNfApRicZA
HgiyJ3eqJUs69+Olz3XrR0SrDYW6xR0vUNMAO1BgEqpyqpWrOwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL2O1o5rb1FvO6jCSbDSuEd/6BZNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzY1ODg4MjUtZDQ2My0z
Y2IwLTk3ODUtMzg4ZDIzYzA3YmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD+4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjQM8YVvXc11AtQ76wVr1g/WjKZXiNCbcmNv/8U1//H3nUpr+j66EfwY9
Xj1SgHYwBg6tqVSCHOW4FkISzQ24SB/K3UrDNhl6uGgmR6A9WAp2/23L/9xjGjUy
RzYkjVjXkwQWsSr/YfLfLhpVix5VFb5iPUe/gfjVmFGE1mbHHsb3isYS4VQ9lY0Y
J02fiD4rBI065DaXkguK3O2AiAnbZO2axgypoKeKSxJInfzVX6+3bRR1P0beXusY
85cVO8WXopAkoXMbqfwWJs2xGwdbZBv1Bh9EPO60ks0zVVTqNeGR/GNvjYihvwY3
jYS4wHt3KbA7yqnN/jo6vEcakJsYlA==
-----END CERTIFICATE-----