This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5a125c46-1b02-3170-97fc-bc4d54ba9acc.roa
File:                     5a125c46-1b02-3170-97fc-bc4d54ba9acc.roa (raw, json)
Hash identifier:          xe/fddNBuIHYO3KqDZ/JjoHecL3VN4KcTr71Tt2/p3E=
Subject key identifier:   8B:1A:60:0D:15:76:6C:98:14:25:FE:44:86:A0:DB:E6:0F:B0:5F:BF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E47D2D429BF0A8D18EBF77E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5a125c46-1b02-3170-97fc-bc4d54ba9acc.roa
Signing time:             Fri 17 Jun 2022 12:00:00 +0000
ROA not before:           Fri 17 Jun 2022 12:00:00 +0000
ROA not after:            Sat 23 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        52.144.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:47:d2:d4:29:bf:0a:8d:18:eb:f7:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jun 17 12:00:00 2022 GMT
            Not After : Jul 23 04:00:00 2022 GMT
        Subject: CN=fd47df9d-3813-4cba-9c9d-22d065564a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:0a:5b:08:3c:33:e5:e1:dc:1d:71:00:5e:
                    1d:f4:c3:c5:38:44:ae:62:85:eb:e5:0c:aa:f1:29:
                    f2:af:06:e2:68:e0:49:e4:f5:8b:b5:1d:dd:c4:41:
                    33:d3:8d:3f:62:35:99:af:94:a1:42:df:91:b4:be:
                    af:47:c2:9f:71:d5:b4:1d:c6:70:3e:66:14:07:c3:
                    fd:dc:8a:3f:63:72:48:4a:7e:aa:ad:e7:eb:0f:a4:
                    5c:36:94:0e:f6:bd:36:46:dc:a3:4d:e9:a5:98:0d:
                    7e:d2:df:a0:b4:0f:77:fd:7a:5d:ee:60:7e:ae:a9:
                    0c:8f:95:6f:a2:2c:9d:d6:0e:2a:ef:e4:fb:86:9d:
                    32:c0:0d:58:ed:c8:82:b7:77:c1:f9:5a:a5:92:ec:
                    35:cd:01:17:6e:7a:2c:ba:11:13:9f:c9:93:e7:5c:
                    72:40:b1:a3:f6:58:b7:94:f4:b4:65:29:cd:b5:23:
                    42:2f:14:50:48:17:da:31:f7:63:d1:e9:fc:63:72:
                    75:5a:0d:76:c6:20:b2:46:c0:d1:ab:f9:ad:c1:3a:
                    1d:60:fc:e3:ea:1c:6e:21:0d:05:be:d0:d5:47:24:
                    ca:c8:ae:54:5e:01:ff:4f:93:c8:b8:d9:d3:31:b2:
                    5c:68:3a:37:3d:94:10:34:94:b0:6f:72:2d:55:51:
                    cb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1A:60:0D:15:76:6C:98:14:25:FE:44:86:A0:DB:E6:0F:B0:5F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5a125c46-1b02-3170-97fc-bc4d54ba9acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8b:6e:2e:50:55:00:59:89:06:e2:7e:cc:8a:f9:27:d0:27:
         bb:2b:18:c4:8e:32:96:94:64:29:8d:da:3d:d9:61:ec:03:d2:
         15:c4:03:42:fb:d0:ef:bc:64:1f:11:e9:d2:a5:15:e7:5e:50:
         4d:29:13:4c:d8:db:4c:86:88:a2:30:bf:db:32:1d:7b:30:d4:
         90:e4:96:28:83:7a:52:07:16:b5:40:e2:ce:27:a3:e2:81:2d:
         31:a0:21:4d:66:05:ae:e1:d7:10:22:28:1f:62:ab:fa:6f:b4:
         cc:2a:2f:68:97:92:a4:86:49:2f:7a:c5:1f:2d:0f:a5:ae:46:
         a5:7b:75:6b:a8:f9:1e:8d:0a:d7:53:af:b2:43:87:84:82:61:
         76:14:68:1d:6e:1a:c4:ec:cd:6b:35:78:5d:cf:65:88:91:1b:
         9b:4b:d3:10:13:aa:09:e3:96:c9:49:5b:15:6b:51:50:a2:17:
         2c:44:99:c0:51:de:63:81:bf:87:7c:5e:d8:36:e3:83:3a:92:
         70:16:08:26:bf:48:17:25:fb:48:34:52:bf:87:88:55:13:15:
         bc:a6:d8:8a:99:d7:8e:bf:b7:7b:8d:8a:77:83:00:f7:f1:30:
         30:0a:0d:8b:df:86:6e:51:f2:bc:f0:4a:b9:cc:03:28:b6:5a:
         56:79:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----