This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ba94958-044a-32a8-b213-d18c004f687c.roa
File:                     5ba94958-044a-32a8-b213-d18c004f687c.roa (raw, json)
Hash identifier:          2tSlYNefaw1uZcSa72O6k8XBP0Mue6/ReFlEytGevMo=
Subject key identifier:   A8:D8:8C:AB:F5:2E:11:B6:FA:80:DD:F5:42:59:92:B6:28:04:83:5C
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DED7FFE9235598BCB12ACE700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ba94958-044a-32a8-b213-d18c004f687c.roa
Signing time:             Mon 16 May 2022 12:00:00 +0000
ROA not before:           Mon 16 May 2022 12:00:00 +0000
ROA not after:            Tue 21 Jun 2022 04:00:00 +0000
asID:                     6167
IP address blocks:        155.146.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ed:7f:fe:92:35:59:8b:cb:12:ac:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 16 12:00:00 2022 GMT
            Not After : Jun 21 04:00:00 2022 GMT
        Subject: CN=6e32b65b-c00a-46ee-a735-ae9b1eed287d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d0:d6:dc:e8:3b:a3:77:84:b4:28:5e:d1:76:
                    95:7e:15:f9:bb:2d:3d:f6:a1:9c:70:75:b9:48:52:
                    34:0f:de:f8:06:1e:e5:78:67:9c:ba:ee:67:34:20:
                    4e:67:eb:46:92:dc:b5:d0:3c:b0:78:a7:1a:c7:da:
                    3e:ef:99:12:9d:96:fc:bb:3a:2a:ed:c7:c4:55:51:
                    12:7b:73:ea:bb:63:b9:08:37:e1:ec:19:c1:e2:41:
                    34:7b:90:a9:ee:be:8e:f8:79:3b:e0:a2:3f:2a:d9:
                    18:7e:6f:c9:a6:ab:25:cf:5d:e3:2b:6e:ed:64:84:
                    6e:be:05:c5:ea:68:96:7a:e5:44:00:fb:87:9e:43:
                    02:59:27:05:a5:28:c6:05:4a:8d:21:a5:59:c6:8a:
                    19:7d:f5:c8:e1:77:3a:98:c1:e3:a5:40:19:71:14:
                    4f:81:f7:d2:91:6f:db:80:c1:9d:22:ce:01:9c:47:
                    f5:36:6c:7d:a6:d5:55:a4:c9:2a:d6:4c:19:96:b1:
                    60:5d:12:05:3b:46:af:d1:2b:ac:04:be:a3:be:4a:
                    1b:3d:75:2c:1a:02:64:e2:d5:16:cf:7b:d5:54:c4:
                    75:30:50:f5:75:fb:c6:f6:05:db:ae:c6:b1:b5:16:
                    2a:a7:ae:4f:9e:0f:22:0b:20:19:f2:cb:40:70:d7:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D8:8C:AB:F5:2E:11:B6:FA:80:DD:F5:42:59:92:B6:28:04:83:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ba94958-044a-32a8-b213-d18c004f687c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:6b:6b:52:b3:f8:4a:cc:4b:15:53:e2:a4:0d:84:05:41:ad:
         b5:96:1c:0b:b4:26:e8:ea:66:89:30:46:bc:6d:58:09:bb:dc:
         bd:ed:33:99:a0:84:17:0d:6e:59:c5:34:d6:9c:e7:4b:5e:28:
         c8:05:f1:cc:03:d2:69:95:91:64:13:66:a9:c9:d5:48:e1:d1:
         73:90:9c:0e:e1:8d:b1:c8:af:99:75:22:31:eb:50:c4:d7:0c:
         39:01:36:11:cb:99:4b:80:30:81:95:ea:32:df:20:d1:ac:5d:
         83:f3:fe:fa:22:e0:fa:18:fe:58:39:8e:72:ed:84:c0:a9:87:
         dc:62:ef:3f:da:7a:7a:f6:ca:a1:37:f5:2e:13:f5:ba:08:54:
         fd:fb:ee:54:50:43:45:ec:e2:ba:f8:6f:13:fd:0f:70:80:9a:
         a0:86:b2:6c:b8:43:59:8b:f3:91:5a:6b:d9:eb:51:37:76:b3:
         71:86:b4:c6:13:4a:6c:15:3f:65:b1:03:d0:5d:9f:f8:1c:86:
         bc:b9:8a:19:9e:e7:43:33:e7:04:d6:d7:d9:9a:14:1b:96:d2:
         b3:43:ea:9c:de:33:46:bd:7b:ce:e2:81:9f:40:60:18:b7:43:
         7a:8a:45:db:6f:98:82:08:63:e9:dd:83:22:78:6e:33:65:4c:
         90:35:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----