This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/407bada7-f1c8-3e07-b7f4-39f68b7952fb.roa
File:                     407bada7-f1c8-3e07-b7f4-39f68b7952fb.roa (raw, json)
Hash identifier:          4vygbu64gDuZ2zoRgkLVlHeRLnuZgRXZoIx7dJX1FXs=
Subject key identifier:   09:85:C1:D1:4F:38:9C:11:A0:A4:18:E8:6F:58:65:D2:5B:9D:47:90
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FCACC82B57589DA525F1C6200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/407bada7-f1c8-3e07-b7f4-39f68b7952fb.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        134.62.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ca:cc:82:b5:75:89:da:52:5f:1c:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=a104ba30-23e7-413c-b52b-1bd94e3be9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:00:3a:e8:f0:d1:74:9b:e1:17:16:ff:c6:ef:
                    48:50:1d:63:99:63:a7:16:30:55:c7:10:cd:ec:d0:
                    28:67:9f:dd:f0:7f:72:3b:f6:03:6f:d4:a9:40:22:
                    f2:c1:72:3d:e1:f1:42:18:34:20:0f:77:80:eb:7d:
                    48:29:c1:d5:0e:97:73:06:8e:78:4a:d0:13:c5:15:
                    cb:da:16:41:11:d2:dc:ad:ff:80:cb:6b:31:5c:ad:
                    c9:ce:05:e2:6d:45:dd:3f:36:c3:c0:b6:4c:c8:84:
                    21:71:18:96:58:db:56:21:1c:7d:37:32:92:a1:ae:
                    bc:3c:2b:97:e9:e7:08:ed:26:b8:4f:eb:26:8b:e5:
                    11:c7:da:91:9c:2d:91:a9:e4:2c:87:21:91:b9:c9:
                    e1:e8:3f:17:f2:bf:62:50:a2:ef:48:76:ec:58:1e:
                    a9:e1:b6:97:89:6d:cf:34:13:32:90:16:cb:bc:6b:
                    2c:b5:cb:45:28:ed:a8:38:f5:c1:ea:e0:96:2e:5f:
                    34:6e:73:1b:dd:34:db:72:86:77:b7:00:a4:e7:eb:
                    ff:4c:1e:56:02:19:ec:14:ed:c2:12:49:d6:39:ce:
                    91:08:dd:60:0d:e6:b9:d0:c1:f4:2d:34:5c:5c:d5:
                    a7:34:e0:6c:73:3e:59:55:16:93:92:6d:01:0d:0a:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:85:C1:D1:4F:38:9C:11:A0:A4:18:E8:6F:58:65:D2:5B:9D:47:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/407bada7-f1c8-3e07-b7f4-39f68b7952fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.62.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:76:6a:0c:7a:00:97:27:ce:94:eb:68:b4:4f:c3:e2:74:67:
         1a:e3:c9:8d:ef:34:d7:e6:5f:ca:79:a6:58:9e:2f:30:a4:30:
         bc:57:3d:98:88:20:9c:50:7d:4a:72:d7:79:ce:67:b5:95:72:
         9b:31:ac:20:45:d3:f3:26:cf:22:0c:8c:9b:f3:b6:e2:f4:7e:
         14:da:d2:e7:22:34:ee:a6:c0:6e:af:f7:f6:6f:c9:a6:97:59:
         2d:af:52:a2:c5:6c:c9:f8:22:2f:87:0b:99:87:d2:bd:f3:f6:
         f1:cd:d7:65:2e:75:82:41:15:06:72:66:2e:b6:f1:16:2f:17:
         05:af:75:27:58:c2:4a:7c:de:1d:d0:8b:3e:5a:c9:8b:d2:6d:
         7e:5f:f7:8d:0c:45:a7:a9:d3:24:6a:8e:64:28:81:2c:05:0d:
         0b:3a:62:cb:a2:84:93:70:7f:67:92:3c:c3:11:32:af:ce:7c:
         f0:b8:64:65:b9:55:44:59:b8:84:bd:8f:60:19:c4:18:2e:80:
         4a:c5:5a:c9:d1:53:5e:38:15:3c:3d:3a:9b:7a:a2:15:d3:83:
         74:54:c3:71:93:95:c8:96:9f:dd:2e:60:53:12:76:77:27:86:
         dd:3c:0e:3e:d5:8c:ba:93:ee:19:ff:15:af:77:c0:d5:18:54:
         b5:48:68:a7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/KzIK1dYnaUl8cYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
YTEwNGJhMzAtMjNlNy00MTNjLWI1MmItMWJkOTRlM2JlOWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QA66PDRdJvhFxb/xu9IUB1jmWOnFjBVxxDN
7NAoZ5/d8H9yO/YDb9SpQCLywXI94fFCGDQgD3eA631IKcHVDpdzBo54StATxRXL
2hZBEdLcrf+Ay2sxXK3JzgXibUXdPzbDwLZMyIQhcRiWWNtWIRx9NzKSoa68PCuX
6ecI7Sa4T+smi+URx9qRnC2RqeQshyGRucnh6D8X8r9iUKLvSHbsWB6p4baXiW3P
NBMykBbLvGsstctFKO2oOPXB6uCWLl80bnMb3TTbcoZ3twCk5+v/TB5WAhnsFO3C
EknWOc6RCN1gDea50MH0LTRcXNWnNOBscz5ZVRaTkm0BDQpBqwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAmFwdFPOJwRoKQY6G9YZdJbnUeQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDA3YmFkYTctZjFjOC0z
ZTA3LWI3ZjQtMzlmNjhiNzk1MmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhj4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASXZqDHoAlyfOlOtotE/D4nRnGuPJje801+ZfynmmWJ4vMKQwvFc9mIgg
nFB9SnLXec5ntZVymzGsIEXT8ybPIgyMm/O24vR+FNrS5yI07qbAbq/39m/JppdZ
La9SosVsyfgiL4cLmYfSvfP28c3XZS51gkEVBnJmLrbxFi8XBa91J1jCSnzeHdCL
PlrJi9Jtfl/3jQxFp6nTJGqOZCiBLAUNCzpiy6KEk3B/Z5I8wxEyr8588LhkZblV
RFm4hL2PYBnEGC6ASsVaydFTXjgVPD06m3qiFdODdFTDcZOVyJaf3S5gUxJ2dyeG
3TwOPtWMupPuGf8Vr3fA1RhUtUhopw==
-----END CERTIFICATE-----