This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a6b9e75-a6a7-3f0e-a1dc-4369a4f3f2a7.roa
File:                     3a6b9e75-a6a7-3f0e-a1dc-4369a4f3f2a7.roa (raw, json)
Hash identifier:          Ql2KvdoM4HCt5tom8tWYX0N1FxuhlsDAa0NZKdRKmzg=
Subject key identifier:   B0:F2:67:57:FB:71:F9:AB:A4:D3:F0:E5:90:EF:5E:5B:7D:1B:A8:96
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DB769095BEC0B002EA3AAA980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a6b9e75-a6a7-3f0e-a1dc-4369a4f3f2a7.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Wed 01 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.199.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b7:69:09:5b:ec:0b:00:2e:a3:aa:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Jun  1 04:00:00 2022 GMT
        Subject: CN=54e04d78-811a-4c0f-b8eb-1fdf824936bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:12:60:5e:3c:70:e0:f5:9f:79:76:4b:e2:
                    dd:54:33:3c:eb:4b:4e:cf:5a:a4:d0:41:8c:1a:16:
                    63:f3:c1:3e:30:31:af:8f:cc:8f:76:07:e7:ad:3f:
                    9f:42:c5:b2:ea:7c:c2:6f:66:bc:e3:e3:61:b4:d8:
                    79:db:74:e7:d4:fd:8a:25:18:ba:13:5e:d5:10:49:
                    71:fc:a2:4b:e5:68:87:94:3e:3f:48:b1:94:db:3e:
                    8b:60:29:91:38:41:d5:d0:fd:f2:86:a9:51:c0:bd:
                    16:0e:ad:d7:00:40:86:5a:9d:f1:9d:60:b6:fa:5a:
                    63:f1:f9:e5:26:90:6c:2a:2c:8f:0d:35:e6:cc:12:
                    88:10:8d:2b:68:82:f4:39:93:33:76:00:6e:38:67:
                    ab:2b:4a:b9:14:d4:50:d2:e8:a4:c5:80:a7:6d:23:
                    98:5a:b8:85:97:61:a8:54:25:10:1d:4b:c9:c1:26:
                    b1:39:a5:6a:b5:60:88:0b:35:36:a8:ed:22:cd:09:
                    a4:ff:bb:a7:7a:c3:12:6c:69:6b:7a:92:8a:ff:0c:
                    88:d0:2c:39:c5:1a:0b:3b:b3:b0:2e:02:11:e9:11:
                    a9:d0:de:93:2f:c3:68:cc:ad:b7:e2:fb:4f:27:99:
                    f1:35:bb:a4:d6:d3:56:9d:ad:5e:06:ed:7e:7f:cd:
                    87:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:67:57:FB:71:F9:AB:A4:D3:F0:E5:90:EF:5E:5B:7D:1B:A8:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a6b9e75-a6a7-3f0e-a1dc-4369a4f3f2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.199.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:29:78:ca:02:7e:c7:3c:f1:06:e1:97:c3:1e:ea:d2:1a:55:
         bb:36:af:fb:66:cf:93:4d:d1:8b:4d:7b:62:d1:63:d8:e3:65:
         7a:bd:02:57:0c:25:64:38:26:3c:bb:6a:95:a6:cb:7f:2a:e0:
         e0:80:ab:1b:de:e0:d0:31:6f:a7:f5:41:da:7a:9a:91:98:ad:
         bf:b8:bf:06:2c:9e:cd:ec:89:9f:85:b0:bc:92:d6:ad:cc:e2:
         d3:5d:8f:20:4b:8a:ee:89:74:b3:42:6b:1b:23:2a:93:78:8b:
         75:71:5b:dc:fd:2d:a2:e6:7f:13:42:c9:53:90:20:4b:2f:c2:
         1c:ae:db:32:12:36:95:48:0f:49:20:70:99:65:ba:4d:69:22:
         5b:99:67:38:97:74:17:a2:17:47:08:c4:37:c1:61:fd:4b:3e:
         a7:e4:df:ef:a5:ed:a9:bb:79:ae:62:2f:01:20:f5:e9:29:70:
         18:68:af:b1:df:f4:4d:ef:d2:17:db:6f:0b:bf:54:eb:cf:d5:
         08:61:25:c3:bf:d6:28:35:7e:ad:64:c5:f1:30:54:a8:67:e6:
         5c:a2:94:05:f9:f0:fa:ef:84:b1:03:0e:bc:5a:2c:8d:fc:8c:
         e6:0b:d9:88:50:aa:b2:ff:83:bf:e1:8d:58:97:eb:47:c9:e0:
         74:84:ae:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----