This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/523a7e48-a75c-36fe-a022-ed01c9f45486.roa
File:                     523a7e48-a75c-36fe-a022-ed01c9f45486.roa (raw, json)
Hash identifier:          L+PGWTAmt8QiII21sBdopYufrc57+O16GpHbOvjtVdo=
Subject key identifier:   A3:7E:4B:57:D2:82:2A:58:E6:A5:70:7A:27:E8:C5:FC:FB:47:26:83
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF07565C7756F7A0D116BF900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/523a7e48-a75c-36fe-a022-ed01c9f45486.roa
Signing time:             Wed 16 Nov 2022 12:00:00 +0000
ROA not before:           Wed 16 Nov 2022 12:00:00 +0000
ROA not after:            Thu 22 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        15.221.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f0:75:65:c7:75:6f:7a:0d:11:6b:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 16 12:00:00 2022 GMT
            Not After : Dec 22 05:00:00 2022 GMT
        Subject: CN=4bd11a31-36ca-48a4-b70f-a8247b470812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a6:12:bf:72:c5:2d:94:c2:c3:a9:82:02:ef:
                    13:25:38:6e:fa:d4:5f:37:15:24:25:7b:06:88:89:
                    bd:c1:69:0e:1f:da:07:03:76:cf:99:46:14:87:9d:
                    c2:10:d8:25:fe:c7:8d:59:b1:52:fa:be:8c:50:4b:
                    a9:9d:24:65:f5:48:66:ca:2b:c6:17:73:66:02:0c:
                    c8:9d:dd:70:8e:3a:56:2c:0c:92:9f:93:4e:9f:73:
                    2c:f9:2c:df:5a:f2:8d:e1:40:14:a1:06:94:17:ff:
                    81:49:a0:3e:2f:6c:ae:39:de:12:d7:97:f9:3f:b8:
                    00:1d:e7:1c:5f:72:35:2c:60:29:5c:ce:f2:13:4f:
                    46:8d:ed:c7:7c:b0:20:a4:49:37:84:07:1e:06:86:
                    5e:63:0c:52:b4:71:16:bb:17:f4:8a:6b:72:ad:d3:
                    9c:97:4c:28:54:63:77:62:69:f5:05:79:03:30:63:
                    0f:9b:63:53:09:11:02:e5:3f:be:09:aa:09:22:8a:
                    20:fa:42:ab:80:a9:0c:23:00:45:ef:92:ec:24:75:
                    15:8b:14:6d:94:4d:d9:57:3a:f1:05:20:22:79:86:
                    72:6a:62:d8:6d:5b:be:02:57:64:7f:d3:1d:ba:fd:
                    ae:27:f0:0f:ac:c1:a9:3f:ca:be:0e:30:1e:57:38:
                    7b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7E:4B:57:D2:82:2A:58:E6:A5:70:7A:27:E8:C5:FC:FB:47:26:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/523a7e48-a75c-36fe-a022-ed01c9f45486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.221.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:1b:e9:f5:4f:19:f1:9c:18:ff:fa:78:01:66:a1:61:9d:c4:
         eb:63:98:aa:b3:a1:be:5b:ea:b8:d9:a5:eb:11:ba:3d:ca:c4:
         04:e0:76:d3:24:7e:4b:85:c1:de:e0:49:54:ca:01:f7:97:58:
         d0:b2:d0:a9:15:16:a4:31:51:9f:2a:02:75:10:7c:ec:92:48:
         90:64:9b:0a:69:46:9e:ea:17:8c:b4:3f:b5:79:63:dc:98:9b:
         a1:d1:a8:d4:b0:63:81:3a:dd:9f:d3:79:87:2f:b5:f3:73:54:
         49:fb:c4:46:46:9c:30:73:c0:6d:33:5d:61:0d:46:66:cd:c1:
         f7:c1:56:3c:57:54:c7:a4:5a:c3:ca:5f:d3:96:c5:ea:86:9a:
         e4:e1:67:19:08:f5:a9:d4:dc:94:38:7e:3d:dc:15:16:f3:10:
         85:53:bc:bf:c0:da:b2:ff:00:8f:7d:ef:7d:12:2f:fc:dc:69:
         99:68:55:89:e0:c0:bc:ba:dd:7b:19:5c:c8:2e:dc:05:25:2e:
         f4:c1:12:ab:bd:97:e4:31:a0:60:e8:b1:7d:33:c3:ee:5c:6b:
         29:d2:cc:eb:07:1e:0c:58:13:83:04:d3:88:29:22:9a:1e:81:
         09:e4:23:cb:22:44:91:8e:11:a6:aa:4e:fc:97:b9:06:6b:68:
         3e:72:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----