This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49b7abfe-8331-3d86-b430-32c57683c628.roa
File:                     49b7abfe-8331-3d86-b430-32c57683c628.roa (raw, json)
Hash identifier:          5U0BMaZmdqD86ncwCQpOt6AtN63cYRw3R7dn7p20tSE=
Subject key identifier:   DE:E9:34:F3:49:66:A1:D2:B5:C2:04:AE:17:47:F0:3F:8F:B4:89:4F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E493FC21DB85BC2E3B2B8FA80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49b7abfe-8331-3d86-b430-32c57683c628.roa
Signing time:             Sat 18 Jun 2022 12:00:00 +0000
ROA not before:           Sat 18 Jun 2022 12:00:00 +0000
ROA not after:            Sun 24 Jul 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.45.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:49:3f:c2:1d:b8:5b:c2:e3:b2:b8:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 18 12:00:00 2022 GMT
            Not After : Jul 24 04:00:00 2022 GMT
        Subject: CN=a3287d5c-71b8-41a7-9e31-9d967ff51d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:5d:21:76:7e:87:54:36:60:41:47:2a:ac:
                    1f:44:1d:ae:6d:45:0e:b9:47:6f:4d:bb:ee:62:30:
                    d7:16:4d:f2:f2:b4:b5:69:8e:90:82:10:b1:13:1c:
                    c2:a1:d5:fb:9b:24:10:5a:73:69:d0:f6:b0:4d:df:
                    a7:a6:a4:1f:53:7f:47:04:81:64:4a:be:f7:5c:98:
                    e2:42:3b:09:12:11:6c:4d:a8:00:b8:d3:2a:5e:45:
                    a1:3b:04:d1:94:6a:bd:a0:e5:bd:09:a4:d6:5c:b6:
                    63:ff:bb:4b:28:88:a3:3d:8e:ef:55:ea:1a:09:6a:
                    7f:20:64:96:c4:ae:7b:0e:53:3f:ce:d7:b5:94:7b:
                    f0:36:b4:93:09:b3:27:54:3d:be:b4:82:d9:a7:e5:
                    27:63:c9:e8:fb:28:6f:a5:bd:3b:5d:92:c9:fc:5e:
                    52:67:fe:1a:7b:1c:6b:92:f4:fd:02:8d:cf:80:89:
                    3d:4c:f4:26:4c:a6:e1:e9:6c:9e:83:d8:85:9a:26:
                    59:1d:89:25:0c:51:85:08:55:a1:66:cc:b1:46:9f:
                    92:d9:f1:80:b6:15:a5:15:22:d9:08:56:d8:03:7b:
                    5c:90:a7:e7:c4:d8:77:64:e0:1c:c4:13:ad:ce:09:
                    9f:56:1b:33:ec:4a:92:57:4c:0f:ed:7e:3a:d1:81:
                    48:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E9:34:F3:49:66:A1:D2:B5:C2:04:AE:17:47:F0:3F:8F:B4:89:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/49b7abfe-8331-3d86-b430-32c57683c628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a2:3f:56:15:ac:04:81:74:77:d8:a8:ac:94:3c:61:33:06:
         74:4b:e9:97:b7:94:c4:7a:d8:4c:cd:97:6d:da:bc:41:bc:7d:
         e1:85:d1:08:76:37:50:4d:bb:b1:cd:2c:d2:ee:05:2d:2c:46:
         4d:07:57:33:f7:d7:85:cf:e2:d8:63:34:4e:2f:02:0a:bd:39:
         4f:e9:f6:da:54:13:33:0c:54:6c:0d:ae:59:c5:23:bc:a8:7e:
         f3:49:44:47:08:31:85:32:e6:8a:86:3e:be:5a:1f:3f:be:f5:
         7d:6d:5a:6a:ca:30:b7:60:4c:85:ca:93:24:7b:17:8a:d0:da:
         99:58:08:90:f7:31:f1:2f:d6:21:6a:3c:0c:74:f8:fb:48:8b:
         ba:61:d3:82:92:4d:f6:cd:31:ad:7b:05:eb:6f:b5:aa:08:fd:
         89:e7:df:b2:84:4a:f7:98:af:93:0d:b3:ac:7e:78:2f:e1:8f:
         d7:6e:87:f7:7d:1a:96:4d:9d:95:92:e9:42:c9:a9:a6:0b:19:
         98:06:68:0a:d1:e1:3c:b6:a8:77:9e:7c:0b:67:26:aa:e9:ed:
         0d:fb:0d:ae:76:06:57:aa:a5:6c:43:15:4d:13:c4:ac:77:ba:
         45:30:56:3d:ec:9b:94:7f:dc:1e:a2:55:c6:99:f3:81:ff:99:
         e3:cc:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----