This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43b3f093-2e29-39a1-9c99-a9d822c275fd.roa
File:                     43b3f093-2e29-39a1-9c99-a9d822c275fd.roa (raw, json)
Hash identifier:          WD23sb+EIg1c99WLeNx5+2svZrNn13UEP5eu/3k/CzQ=
Subject key identifier:   4C:0C:64:ED:4D:54:1A:91:D7:3A:D8:31:EF:5D:6F:F4:A4:7D:37:AD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CB75AEB457D345434EC37B140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43b3f093-2e29-39a1-9c99-a9d822c275fd.roa
Signing time:             Wed 26 Jan 2022 05:00:00 +0000
ROA not before:           Wed 26 Jan 2022 05:00:00 +0000
ROA not after:            Wed 02 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        146.65.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b7:5a:eb:45:7d:34:54:34:ec:37:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 26 05:00:00 2022 GMT
            Not After : Mar  2 05:00:00 2022 GMT
        Subject: CN=62e1ef1e-7b98-4832-8504-26a07e5b67e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a8:86:6b:07:48:03:13:e9:da:ee:e2:62:e3:
                    07:7c:34:11:f4:71:7b:a3:70:e2:bb:e5:c8:bf:ba:
                    27:6d:13:dd:48:1e:c7:08:4f:ff:6f:0a:86:1d:30:
                    42:97:42:1e:97:d8:7d:74:1b:43:05:6c:bc:ec:52:
                    bb:8b:a1:6a:d4:00:b8:c9:30:d3:ac:32:63:9f:49:
                    75:c5:ad:95:0a:3e:13:a2:88:cc:ca:f3:fb:ff:f1:
                    58:0e:16:04:49:f9:08:24:21:7d:1e:4f:95:06:d5:
                    fc:95:0f:ab:9d:ee:a3:e3:6e:89:3b:4f:2c:fb:fc:
                    05:a2:66:4f:a2:30:7b:15:3a:6e:46:87:dc:e4:7d:
                    f5:4d:57:59:7f:66:26:f2:1b:61:db:0b:ab:03:17:
                    97:bc:d7:60:35:03:ac:1f:2f:fa:a0:d4:8f:bb:a2:
                    4e:f7:c0:b9:3d:67:5f:04:64:63:b7:76:4d:c5:bd:
                    5b:0b:4f:3a:48:50:87:32:57:b2:02:d6:f9:72:44:
                    e7:df:94:9d:c0:4a:10:30:12:5b:a6:3a:a5:4c:e3:
                    5f:3a:de:82:ef:94:0f:c3:fe:c0:fe:26:bb:02:00:
                    4e:48:4b:73:83:1b:cb:c8:2a:7e:ed:18:1d:ae:e5:
                    4f:4c:b5:f6:92:6d:c7:74:8b:fb:12:f6:29:fb:18:
                    66:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0C:64:ED:4D:54:1A:91:D7:3A:D8:31:EF:5D:6F:F4:A4:7D:37:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43b3f093-2e29-39a1-9c99-a9d822c275fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.65.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:5a:b0:eb:e6:3b:11:5e:19:a9:e6:87:27:ad:11:1f:04:e9:
         91:b8:6d:9a:36:4d:31:b1:b5:08:1c:9a:14:f3:ed:2c:c0:8d:
         e5:97:23:8a:f0:04:7d:b4:4a:6a:6f:91:ac:53:e9:15:bd:1a:
         f4:be:20:93:c3:a5:ea:92:69:df:56:f4:c9:ac:a1:79:1e:ce:
         93:9b:94:73:63:2d:93:16:e0:0a:a3:f1:bd:f7:50:b2:da:d8:
         ef:66:be:a9:d1:f3:67:a2:02:f3:6c:6a:df:08:0c:cc:cd:d7:
         43:76:a5:ef:99:1c:03:40:a7:13:4a:86:0a:90:19:d2:78:c1:
         e9:98:d1:9a:f8:ea:a1:52:59:f1:95:4f:63:e2:c5:2f:74:46:
         6d:a9:dc:60:fe:3b:74:60:1b:2e:38:5d:12:eb:10:f2:ce:51:
         39:8b:f6:cf:fe:35:b0:58:a4:11:6a:71:6d:d1:59:c1:b7:a1:
         32:d3:55:d9:6d:5a:f0:0a:46:08:aa:80:20:08:2f:10:24:d4:
         d8:91:53:07:02:ed:19:61:10:ac:bf:ef:f1:08:4e:b6:d6:59:
         6b:50:cf:a1:bd:9c:7a:b5:7a:5d:f3:8a:f1:6c:23:8c:09:fa:
         6f:7c:22:69:a0:a1:f2:d2:28:b8:f2:9d:4f:f7:9c:80:8a:77:
         3c:c5:05:17
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy3WutFfTRUNOw3sUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEyNjA1MDAwMFoXDTIyMDMwMjA1MDAwMFowLzEtMCsGA1UEAxMk
NjJlMWVmMWUtN2I5OC00ODMyLTg1MDQtMjZhMDdlNWI2N2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KiGawdIAxPp2u7iYuMHfDQR9HF7o3Diu+XI
v7onbRPdSB7HCE//bwqGHTBCl0Iel9h9dBtDBWy87FK7i6Fq1AC4yTDTrDJjn0l1
xa2VCj4ToojMyvP7//FYDhYESfkIJCF9Hk+VBtX8lQ+rne6j426JO08s+/wFomZP
ojB7FTpuRofc5H31TVdZf2Ym8hth2wurAxeXvNdgNQOsHy/6oNSPu6JO98C5PWdf
BGRjt3ZNxb1bC086SFCHMleyAtb5ckTn35SdwEoQMBJbpjqlTONfOt6C75QPw/7A
/ia7AgBOSEtzgxvLyCp+7RgdruVPTLX2km3HdIv7EvYp+xhmawIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEwMZO1NVBqR1zrYMe9db/SkfTetMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDNiM2YwOTMtMmUyOS0z
OWExLTljOTktYTlkODIyYzI3NWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkkEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALlqw6+Y7EV4ZqeaHJ60RHwTpkbhtmjZNMbG1CByaFPPtLMCN5ZcjivAE
fbRKam+RrFPpFb0a9L4gk8Ol6pJp31b0yayheR7Ok5uUc2MtkxbgCqPxvfdQstrY
72a+qdHzZ6IC82xq3wgMzM3XQ3al75kcA0CnE0qGCpAZ0njB6ZjRmvjqoVJZ8ZVP
Y+LFL3RGbancYP47dGAbLjhdEusQ8s5ROYv2z/41sFikEWpxbdFZwbehMtNV2W1a
8ApGCKqAIAgvECTU2JFTBwLtGWEQrL/v8QhOttZZa1DPob2cerV6XfOK8WwjjAn6
b3wiaaCh8tIouPKdT/ecgIp3PMUFFw==
-----END CERTIFICATE-----