This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5da74954-3b6c-31a4-9830-b181e2182f91.roa
File:                     5da74954-3b6c-31a4-9830-b181e2182f91.roa (raw, json)
Hash identifier:          KYsMA6EVmaln/qV+2XPD7bOU2Px5dYk+HoaCNCBbtD0=
Subject key identifier:   81:81:0B:AC:D8:F2:6E:04:44:BC:70:ED:E1:CB:3A:B7:DC:3F:32:95
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F93237D036E3D61D61C96EB40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5da74954-3b6c-31a4-9830-b181e2182f91.roa
Signing time:             Fri 14 Oct 2022 12:00:00 +0000
ROA not before:           Fri 14 Oct 2022 12:00:00 +0000
ROA not after:            Sat 19 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        156.64.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:93:23:7d:03:6e:3d:61:d6:1c:96:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 14 12:00:00 2022 GMT
            Not After : Nov 19 05:00:00 2022 GMT
        Subject: CN=182ff952-0af1-46f4-826e-9f171c7cc4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3b:53:38:c6:34:40:cc:81:e3:55:cb:4b:24:
                    56:e9:13:11:ee:de:e5:a3:6e:5c:6f:d0:ab:40:a4:
                    60:1e:62:c8:7f:a5:c2:23:4c:58:9b:59:cb:3b:dc:
                    9d:9a:2e:90:c3:73:14:e1:b0:ff:58:d7:45:cd:b1:
                    1d:62:68:1a:22:4e:77:89:5d:fb:48:6f:03:19:c2:
                    0e:e4:40:99:fa:cf:3d:13:a3:59:52:d5:ba:76:80:
                    b7:e8:19:8d:db:bb:79:10:7d:fe:28:e0:10:e7:89:
                    fd:14:da:c0:25:1f:2f:2b:04:d9:a8:1f:eb:70:6c:
                    45:1e:61:8d:49:cd:2c:e1:d4:22:ba:dc:21:e5:76:
                    03:e2:23:c8:d0:ba:e4:42:b4:4f:23:78:33:72:da:
                    1b:c5:06:ab:13:9a:eb:2d:f7:80:6a:69:0f:e2:56:
                    65:0f:1b:8c:dc:6b:85:65:f8:43:06:b9:52:b6:a6:
                    86:34:ba:a8:85:d0:49:fa:2a:16:d4:71:4e:3d:78:
                    91:03:73:c8:2c:b9:46:d6:8d:56:a9:5c:f3:6f:51:
                    37:85:1d:f6:88:fa:75:55:82:7e:ba:c3:82:74:d7:
                    13:47:ed:73:42:2c:39:87:fe:da:23:f8:28:f3:9d:
                    df:09:da:f0:8f:b4:a1:0f:4f:9d:78:8e:7c:4c:e3:
                    eb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:81:0B:AC:D8:F2:6E:04:44:BC:70:ED:E1:CB:3A:B7:DC:3F:32:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5da74954-3b6c-31a4-9830-b181e2182f91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:21:74:82:99:de:79:93:54:ac:13:b4:06:c4:9a:12:57:51:
         bd:d8:ca:37:25:02:ad:cc:28:f1:50:d7:58:5b:ca:40:9a:cb:
         d4:08:fd:eb:aa:b0:0f:00:31:71:27:76:57:9a:f3:ed:70:ae:
         b9:ac:79:61:15:3e:b6:a7:09:04:65:a0:3f:47:c9:4c:3f:c5:
         f3:a3:2b:dd:e6:5e:b9:ce:4b:9d:b6:00:11:7d:19:a1:3b:3b:
         cc:9e:67:7b:fe:5d:1f:3a:ce:49:23:63:52:5e:34:00:bd:63:
         a1:77:cb:4e:d3:b8:d1:28:bc:d5:cb:bb:ae:c8:f3:d6:78:91:
         f9:4f:4e:fa:96:f1:ca:6b:e4:d1:10:c8:eb:8e:da:e5:68:be:
         8b:01:6c:c4:07:a5:17:83:7f:32:73:03:52:b5:94:2b:bf:f0:
         d0:11:a4:dc:b8:02:71:5a:79:d7:46:f7:cc:27:35:04:bf:cd:
         37:84:0b:c2:87:a6:d2:a1:66:25:97:0e:00:b5:bd:c3:93:22:
         59:30:33:2e:68:c9:a3:5f:af:81:34:19:66:a0:45:b1:94:74:
         cf:56:8b:51:60:34:ab:3f:13:86:10:b2:57:47:3e:8b:40:a6:
         b5:a5:b3:7d:df:04:a8:94:f3:fa:43:6c:43:7d:66:e0:30:16:
         20:5e:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:38:41 2025 by rpki-client