This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4edc8f5a-0cb6-335d-91bf-c2a669422ec8.roa
File:                     4edc8f5a-0cb6-335d-91bf-c2a669422ec8.roa (raw, json)
Hash identifier:          eVg9AHCZemSF+waLZwlYoO2fdCHDo0mEUQsl/3hqGSU=
Subject key identifier:   70:28:B7:79:19:9B:C2:0A:17:C3:2D:A6:81:EA:E4:78:11:46:F6:EE
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D32DC44860EBAD59ED15FD280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4edc8f5a-0cb6-335d-91bf-c2a669422ec8.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        52.222.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:dc:44:86:0e:ba:d5:9e:d1:5f:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=7b15d54f-045e-4ddf-8148-c58258345869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:71:93:13:2f:ce:2b:a5:8a:2d:e8:1b:be:8b:
                    42:83:72:40:c9:a2:18:7c:4b:93:5c:63:d2:71:1d:
                    cf:cd:b5:b6:b6:2b:b3:21:ea:a2:ab:72:cf:92:5e:
                    9c:f8:7f:f6:f7:5c:37:9b:6a:b3:ca:a4:a0:e5:92:
                    09:b3:81:e8:23:a0:37:f3:50:93:04:0f:e0:ff:f5:
                    d1:55:d9:cb:e7:70:b3:89:6d:15:7a:e7:c9:3a:4a:
                    ed:e8:51:a3:b9:03:9f:d0:94:f4:da:d4:ac:dd:3a:
                    60:6c:51:72:06:79:5b:b4:fb:6b:ec:e7:84:e4:49:
                    2e:76:81:cf:06:94:8d:b6:2e:74:ba:96:7e:78:a1:
                    23:24:cf:ac:d7:88:dd:5d:40:16:28:8e:74:2f:c8:
                    f6:8b:0f:b4:62:72:d2:04:5f:b0:af:c1:a5:49:c2:
                    a7:d3:56:5d:b4:0e:3d:0a:11:b0:bb:ec:c5:8d:f1:
                    47:2c:cd:5c:7b:eb:ca:cb:a8:bc:69:0d:58:82:f7:
                    19:1d:85:7f:c0:1c:2f:60:75:3d:80:03:7f:37:cf:
                    6b:e0:c7:0f:46:14:dc:ab:3a:73:08:67:1b:62:71:
                    70:79:9b:04:50:bb:e6:69:41:93:d5:93:b2:0e:79:
                    cc:5a:7f:ef:83:7a:64:88:73:65:60:00:99:fe:ae:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:28:B7:79:19:9B:C2:0A:17:C3:2D:A6:81:EA:E4:78:11:46:F6:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4edc8f5a-0cb6-335d-91bf-c2a669422ec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.222.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:01:24:7e:10:65:12:a8:b4:90:ad:bf:c3:cd:ce:34:c2:2f:
         57:6f:da:7e:2c:6d:a3:6a:9f:fa:84:02:fb:9a:33:b1:31:6a:
         3a:fd:2c:1f:18:5b:9b:fe:f7:0c:90:7f:3f:92:e7:46:cf:be:
         1d:09:cd:10:dd:22:e1:58:c4:df:cd:ba:66:4f:bc:72:08:84:
         f7:07:6f:dc:cf:5f:18:d7:60:07:6b:2a:cd:b8:00:02:0f:de:
         5a:39:8d:55:ee:4f:02:77:c9:6e:ca:ec:8d:a8:3f:6b:ea:39:
         1b:8d:7f:db:6b:44:58:76:a3:21:0b:7e:b4:b4:6c:ce:01:c3:
         66:0d:f9:c0:b2:c1:af:bc:7e:d3:42:60:6d:31:b2:32:0a:21:
         ce:18:5d:dd:02:8c:b6:7d:79:72:71:f4:0b:87:0b:78:31:c1:
         6c:aa:4f:e8:fc:90:26:dd:d4:62:9b:b3:2c:de:2e:49:7f:8b:
         94:20:f9:50:e6:aa:81:b5:56:cb:ae:c5:f2:e5:4b:98:4a:aa:
         3d:f2:b2:74:ab:fa:d4:69:ed:1b:ad:08:99:69:ea:c6:43:cc:
         3b:79:38:4d:d0:1d:0c:70:56:72:e5:24:9a:96:a3:a8:14:d3:
         46:3f:39:5f:41:28:ad:e1:4f:1d:e8:db:25:5a:29:72:9d:1a:
         07:56:61:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:00:48 2025 by rpki-client