This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49aa68c3-8a58-35d1-996a-65760e774045.roa
File:                     49aa68c3-8a58-35d1-996a-65760e774045.roa (raw, json)
Hash identifier:          A6h5DprXD7G3dK7SK1z4pHyJdJdfkvZu/Ea6TZt3LuM=
Subject key identifier:   A8:A7:7A:35:2B:F8:EF:84:AC:8E:C9:10:2A:BB:7A:5A:48:B4:AD:DE
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E29FCBDF9072320E4098E5674
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49aa68c3-8a58-35d1-996a-65760e774045.roa
Signing time:             Mon 06 Jun 2022 12:00:00 +0000
ROA not before:           Mon 06 Jun 2022 12:00:00 +0000
ROA not after:            Tue 12 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        136.140.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:29:fc:bd:f9:07:23:20:e4:09:8e:56:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun  6 12:00:00 2022 GMT
            Not After : Jul 12 04:00:00 2022 GMT
        Subject: CN=8b60727b-0040-49f9-8a08-e3e2d4f2a838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5a:2b:71:40:ea:c4:0f:a9:90:8d:54:7a:9c:
                    80:44:63:eb:bd:68:a9:aa:7f:9a:2a:73:01:ac:a5:
                    d6:5a:a3:a9:8e:ee:7a:f2:3c:80:a3:da:2f:7b:c3:
                    c6:51:7f:3f:9e:34:0d:b4:7e:79:2e:a6:fd:eb:bc:
                    90:f3:f6:30:31:6a:f5:dd:01:1e:8e:a7:78:af:5b:
                    45:ee:2b:72:4b:f7:13:f1:52:01:6d:ae:ec:6c:e1:
                    04:9f:3e:d4:47:85:af:8b:7b:f4:f2:bd:ce:27:d7:
                    40:20:5e:9c:e8:bd:1a:d0:09:bc:5f:7e:00:e7:85:
                    d9:04:37:ab:f2:13:31:6f:b7:47:55:21:fc:9f:ea:
                    85:a7:3d:81:55:43:e4:c6:bf:fb:31:2f:92:a7:40:
                    1e:56:8a:c2:d5:63:87:69:1d:3f:27:cc:9b:7b:c8:
                    b0:ef:2b:4d:cf:71:31:90:b0:46:67:3d:e4:4c:bd:
                    93:d8:d3:42:dc:4d:ca:92:ae:8d:7b:48:84:0e:4f:
                    80:36:5b:0e:5d:99:84:8a:82:ec:51:dc:e4:8d:c2:
                    fb:66:93:a6:bb:5f:bc:09:a4:63:f5:6a:10:66:7a:
                    bd:cf:55:6a:1a:48:d3:7c:fb:8c:04:21:a4:2c:6e:
                    60:29:f5:9c:b7:b7:e0:9f:e3:a1:3c:39:6c:af:0d:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A7:7A:35:2B:F8:EF:84:AC:8E:C9:10:2A:BB:7A:5A:48:B4:AD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49aa68c3-8a58-35d1-996a-65760e774045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:61:dd:be:fd:c6:d8:f8:40:21:f1:2b:0d:8c:b9:49:3f:c5:
         7f:4c:d3:92:f5:ad:57:b9:56:95:4e:45:36:40:b8:80:9c:2c:
         b3:6e:ad:d9:74:80:06:3e:d4:cd:15:76:64:b1:18:87:cb:13:
         c5:bf:68:f6:53:8b:2d:50:11:f2:ed:5f:5d:99:1f:79:4e:e1:
         56:df:71:77:45:2d:6a:af:8d:ba:90:32:61:b5:ab:2c:f9:36:
         a0:52:a7:3c:c0:9f:fb:07:dd:fb:2c:4e:21:a5:d7:cc:7c:4d:
         21:c0:01:b6:16:5e:4b:ec:24:14:43:ec:03:24:90:64:eb:21:
         6d:7a:90:0a:34:a6:d6:fe:4f:11:a8:c5:f5:3f:b3:8b:95:23:
         c3:4e:ff:c5:65:40:53:4d:ee:84:3d:8c:76:ea:14:5e:45:1a:
         c8:f2:e3:88:d3:e5:b4:d4:a2:5d:3a:f4:fe:84:36:8a:0a:1f:
         1b:a2:c9:86:a2:7a:3d:c4:a0:f6:a4:6f:a2:bd:0d:7c:cd:8e:
         bd:8c:46:91:84:66:0b:c3:25:1c:28:a8:3f:34:80:da:4b:66:
         cf:9b:cc:f4:8a:98:fa:a4:d4:d7:40:30:f0:eb:24:2e:f7:09:
         38:ee:60:ab:fc:16:6b:06:c2:76:c1:9a:ed:87:31:7d:c7:40:
         dd:34:75:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----