This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5cd15952-76cf-3ab8-a0b5-9ecc4b56cc56.roa
File:                     5cd15952-76cf-3ab8-a0b5-9ecc4b56cc56.roa (raw, json)
Hash identifier:          ZJh8odP24sEWvCv7b/n0PjM6Lx6Ql8jekL9eONLS4VY=
Subject key identifier:   3B:E9:12:A3:CD:FF:63:58:0C:FA:99:0E:53:50:5A:CB:8B:BD:03:9E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CE55535E5D70EE054BD82F280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5cd15952-76cf-3ab8-a0b5-9ecc4b56cc56.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        144.207.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e5:55:35:e5:d7:0e:e0:54:bd:82:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=1dc2c47a-bd20-4d33-acb2-deabe5217758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:d4:5d:68:4e:68:74:0e:91:b9:90:4f:e3:
                    69:63:0b:44:e6:75:82:5d:c2:64:00:00:8d:6e:2f:
                    bb:05:4d:ac:a6:c1:94:82:2a:0a:63:9b:1f:de:e3:
                    a9:57:90:d5:9e:b0:b2:91:cb:31:29:58:b5:81:ee:
                    74:06:b6:e0:34:cb:b9:07:06:17:7c:c9:2b:2d:78:
                    18:92:c0:9f:e2:6b:2f:13:31:da:0f:bf:c7:d5:83:
                    d4:35:d0:61:ad:ea:f5:34:6b:02:34:2c:60:4c:92:
                    3d:9f:b8:e9:dc:da:22:0b:58:6a:29:b1:1b:ae:f4:
                    b2:25:db:51:29:f2:31:df:28:fd:61:15:f7:41:34:
                    ed:12:97:cf:16:0d:e9:ad:7b:bc:0a:dd:25:10:d8:
                    13:94:a8:ea:eb:26:48:b2:95:77:62:70:92:94:5f:
                    7a:03:9e:37:28:16:7f:72:26:2b:31:3d:95:b8:53:
                    ab:e6:d4:f7:d6:d5:74:43:29:8c:c6:b6:f4:ee:09:
                    7b:82:db:bc:70:a7:9a:92:15:b9:97:c1:94:71:42:
                    6d:3c:ff:c9:dc:ea:99:18:89:f6:01:f1:aa:45:58:
                    41:4d:a7:63:0d:2c:cd:4d:79:35:73:eb:94:0d:ce:
                    06:d0:f6:7e:6f:7d:ca:5e:1a:ab:64:65:18:d6:7f:
                    fb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E9:12:A3:CD:FF:63:58:0C:FA:99:0E:53:50:5A:CB:8B:BD:03:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5cd15952-76cf-3ab8-a0b5-9ecc4b56cc56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.207.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c3:5d:40:db:d5:79:4c:d5:e2:31:99:74:89:e0:fb:80:49:
         63:6b:3d:a9:83:a2:c4:1d:9b:f7:4e:e6:24:ed:1d:d0:82:94:
         c8:e5:ef:7d:33:80:49:1e:0c:bc:02:aa:7f:1b:a2:cb:f1:76:
         28:1a:89:05:a9:ee:6a:43:42:2e:1d:ba:c9:87:51:fc:75:96:
         e3:6a:d1:e8:ee:07:98:2d:d4:59:f9:c3:6a:35:5a:45:51:bf:
         bb:b9:7d:da:88:fa:69:b0:7b:62:d3:d6:12:d9:e5:0d:35:fe:
         98:20:a3:e4:ab:5e:52:aa:5f:a7:43:8d:f1:8c:80:d8:e3:28:
         d5:aa:72:78:5e:1a:4c:03:90:95:c3:31:ac:a7:c1:29:bc:f6:
         08:fe:5f:3b:c6:36:4c:d5:e2:70:31:08:4a:98:d1:2a:5b:95:
         e3:91:a7:83:4f:c2:9f:aa:25:8b:72:2f:b3:90:ed:96:08:0e:
         0d:f0:4c:d9:bd:eb:29:7d:64:7f:ec:ad:01:d2:7f:19:49:b4:
         2e:32:b3:98:34:9a:d6:ee:87:08:dd:38:19:c0:0c:92:c6:b4:
         c4:1b:91:eb:73:03:5c:ed:77:21:d2:21:2c:47:b0:ae:e1:8f:
         33:3f:37:58:ac:b2:ac:01:a5:e2:f7:ee:8c:74:06:aa:c3:69:
         de:34:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----