This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/542a5971-ee70-37e8-8d1a-d452b0d78273.roa
File:                     542a5971-ee70-37e8-8d1a-d452b0d78273.roa (raw, json)
Hash identifier:          JR9U8/ft5RRQLuiL0c192wmKlAl1tOSjnEtvX4Ob4RM=
Subject key identifier:   7B:41:19:56:2C:AA:BB:9B:A4:93:4D:74:B9:8F:07:77:C2:E4:05:D8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DBE817836725E209A8BD22680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/542a5971-ee70-37e8-8d1a-d452b0d78273.roa
Signing time:             Fri 29 Apr 2022 12:00:00 +0000
ROA not before:           Fri 29 Apr 2022 12:00:00 +0000
ROA not after:            Sat 04 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        156.64.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:be:81:78:36:72:5e:20:9a:8b:d2:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 29 12:00:00 2022 GMT
            Not After : Jun  4 04:00:00 2022 GMT
        Subject: CN=0b49458a-f2bb-48b2-97bb-02922bb1be77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:0b:da:00:6b:93:30:69:3f:ab:18:e4:fa:
                    2d:e3:1c:88:1b:11:02:69:ab:ce:21:e9:40:6a:99:
                    1b:dd:49:88:b7:44:16:31:db:72:f1:36:e4:cc:f8:
                    59:b6:80:d5:fd:35:71:c2:22:84:ce:58:31:b7:7b:
                    b2:c1:7b:40:41:7b:da:20:49:3b:c1:01:42:d3:43:
                    c3:09:80:f0:32:52:4c:c4:77:76:1a:88:a8:d3:5e:
                    2f:6a:0f:d6:18:ed:91:64:05:b1:6b:c7:f0:95:35:
                    36:0c:5d:88:a3:09:2c:e8:0b:11:1e:4a:ce:be:67:
                    fe:54:de:68:6f:7a:39:42:8a:cb:06:5b:e9:a8:d2:
                    98:11:48:7c:a7:fc:a4:5b:46:8b:b6:f8:a4:6e:2e:
                    92:72:6a:20:2f:cb:b1:52:0f:4f:de:72:1a:da:05:
                    99:38:47:fe:42:30:b0:8e:b9:c4:2f:b9:35:90:2b:
                    a5:a9:35:b2:ac:23:76:eb:49:7c:c9:a7:8b:6e:f1:
                    84:14:d2:c0:04:cb:ff:df:c1:13:4b:04:2f:d5:c5:
                    3a:ec:cb:63:4c:7e:dc:e2:e3:ac:d9:13:c2:01:78:
                    a9:53:dd:eb:d8:e2:f9:70:0b:08:80:97:0a:94:d1:
                    1a:7d:65:0d:f4:f0:02:86:8b:88:a7:65:3c:50:89:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:41:19:56:2C:AA:BB:9B:A4:93:4D:74:B9:8F:07:77:C2:E4:05:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/542a5971-ee70-37e8-8d1a-d452b0d78273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6d:46:75:ab:5b:dd:f3:dc:99:d3:a8:24:ec:22:15:67:cc:
         54:0b:30:9d:e5:63:f4:8b:4c:d9:ee:7f:c2:a8:51:54:99:70:
         63:94:8d:e4:f2:c3:ef:5b:3b:f9:1e:79:c2:89:f4:09:00:f9:
         b4:e7:df:90:82:ab:1d:d0:c8:2f:e9:69:a7:29:db:ab:6f:09:
         09:f9:e9:a4:78:04:a5:26:26:95:7d:93:aa:72:1d:bb:0b:55:
         6d:58:44:bb:c5:b4:f6:bb:1c:31:f5:38:a8:7f:d2:ec:c2:9d:
         85:ee:f6:ea:03:b5:80:a3:81:14:3b:ea:79:e5:fe:68:eb:de:
         2f:b8:7b:48:fd:85:6f:a2:96:ea:3a:b1:50:81:39:6b:bb:e4:
         84:f4:4b:d5:ae:a3:6f:f0:6e:16:0c:a1:29:5f:52:68:9c:42:
         eb:a0:8b:9d:ba:8f:0f:64:69:6b:2e:1b:43:fc:dd:ff:11:ff:
         3c:b1:f8:7c:a7:5e:17:ba:76:f5:e9:bd:d9:00:e0:41:a7:b3:
         91:a3:88:2a:f2:86:5f:eb:8c:67:29:55:75:ad:f0:bc:5b:5e:
         1b:cc:95:d9:9d:51:07:05:a1:44:ce:6d:84:4a:5a:67:72:c8:
         a3:46:d4:8d:96:b3:7a:7c:c8:b8:f9:39:25:74:0e:64:68:e3:
         ac:c6:6c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----