This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4971dee9-59af-3d0d-bf64-02cefbbf9fe9.roa
File:                     4971dee9-59af-3d0d-bf64-02cefbbf9fe9.roa (raw, json)
Hash identifier:          F7zVXy+pd2Etr4a/oippQF9gyzrjJ80XUcMQR3v1/Rw=
Subject key identifier:   9B:AF:A3:18:F1:1F:0C:BA:A6:83:A4:94:41:86:6A:22:F9:20:3E:D0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584016E731D2AA04077AE60FBC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4971dee9-59af-3d0d-bf64-02cefbbf9fe9.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        15.164.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:16:e7:31:d2:aa:04:07:7a:e6:0f:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=93fc3cc7-852d-4fc1-b276-30e86060a65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:af:0d:65:0f:f6:ee:c8:ec:bb:ff:bb:18:0a:
                    86:66:10:4a:af:50:f5:27:98:43:f8:76:be:98:05:
                    ef:9d:1e:7e:d6:8a:cc:a8:31:18:27:7b:48:89:81:
                    c6:4e:23:31:8d:bb:a1:a3:46:96:fb:f2:ef:b7:3a:
                    3d:85:24:22:2c:35:3f:e6:8e:68:7d:c0:3a:a0:e1:
                    70:13:40:a5:75:65:50:20:1b:c4:ea:b6:28:8f:06:
                    05:4c:a8:90:3f:22:ee:74:a4:05:1c:15:97:b9:89:
                    07:c5:35:e6:30:79:9e:3b:14:32:b7:e0:26:ac:90:
                    b5:ad:e2:38:b8:b2:ec:cf:5b:4c:94:c2:6a:bb:cd:
                    32:03:ae:97:f5:0f:5e:85:6d:96:00:d0:71:a0:36:
                    f2:81:26:30:23:02:89:9e:5a:72:e5:7c:ce:9f:e4:
                    23:75:cb:a8:ed:07:9c:58:6f:4d:0c:f7:07:ac:3e:
                    da:dd:5c:ce:c9:12:3b:9f:4c:89:a4:ea:a2:8b:9c:
                    c6:2b:4d:1c:15:50:a2:aa:4d:2d:c6:8c:69:19:fd:
                    fb:4b:e4:07:da:d3:f3:df:79:96:f1:18:dc:47:94:
                    c2:b3:64:c8:d0:80:ee:3f:24:47:2b:b8:20:ed:35:
                    63:d5:81:85:4f:68:25:56:5e:5d:71:a5:ba:e1:e1:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AF:A3:18:F1:1F:0C:BA:A6:83:A4:94:41:86:6A:22:F9:20:3E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4971dee9-59af-3d0d-bf64-02cefbbf9fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.164.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:51:e2:29:6d:55:17:13:37:9a:35:33:c4:63:24:32:15:19:
         68:94:a5:cb:da:e8:cb:bd:f9:b4:eb:f7:06:56:ac:b0:10:3f:
         02:45:5a:3d:17:52:2f:fc:e6:68:b6:14:a6:5f:b2:95:5e:39:
         ed:17:1f:ce:54:f7:f4:af:92:35:d8:33:ce:39:3f:ec:9d:ff:
         33:b1:fe:57:b1:24:96:6b:08:cb:be:6e:dd:a0:b6:f8:6b:5e:
         2b:7e:94:53:e5:a0:1d:d7:38:ef:76:ba:e6:29:0f:dd:fb:e7:
         e3:eb:96:41:db:f2:a1:12:f9:ef:b7:dd:c8:3e:f4:a9:54:4a:
         ac:0a:e0:7a:c3:00:86:ca:fd:60:b1:02:2f:59:33:6e:ca:c4:
         23:c9:45:b3:95:99:a3:e6:92:ad:c8:ef:e3:19:3a:1a:7f:02:
         6d:f2:13:10:80:24:7f:b3:56:cd:21:9a:5b:29:31:2e:3c:0a:
         ba:de:13:23:28:9a:26:aa:a2:74:18:24:c5:7b:a7:c8:57:59:
         2c:21:ca:23:87:be:11:10:32:ba:44:46:e6:0d:2c:d2:ca:1d:
         9a:f1:54:5a:3d:4d:a7:ae:c9:3b:e2:62:51:bc:af:68:87:0c:
         74:21:76:4d:0c:c0:ae:25:a4:eb:b4:14:52:79:52:09:0a:e8:
         01:20:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----