This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e1a20bf-1b6f-3f82-9019-44278b6895d7.roa
File:                     5e1a20bf-1b6f-3f82-9019-44278b6895d7.roa (raw, json)
Hash identifier:          INpaxG8w0krPLSb8oylYoKXZzavkquEz+TlldAWWzcM=
Subject key identifier:   4A:A1:1D:97:ED:E2:ED:41:D7:D0:8E:1B:1A:F9:2D:D0:0D:D2:74:D4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F5BE2A93AF60822ADAFCC5D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e1a20bf-1b6f-3f82-9019-44278b6895d7.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.100.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5b:e2:a9:3a:f6:08:22:ad:af:cc:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=5d3ca5d0-bf52-40bb-bc93-ceaec802925d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f7:0c:9c:61:d9:fb:4f:42:aa:dc:ba:d0:ab:
                    84:93:30:05:d0:f2:a8:38:94:60:c8:d2:d5:fd:3b:
                    49:f3:b3:97:da:97:0a:b1:1c:8f:0f:97:8a:84:67:
                    f8:fa:4c:11:f6:25:b0:34:90:0c:67:ab:c3:dd:32:
                    2b:61:da:cf:57:ea:b5:c7:1d:1a:28:67:92:46:cc:
                    b2:a0:06:d4:1c:89:b1:47:f2:d3:2e:f3:d4:8e:71:
                    ab:9c:53:85:0c:ba:11:b0:9e:cd:c6:3a:6d:5e:65:
                    16:ad:36:64:4d:27:7a:61:1e:ce:8d:91:f7:26:41:
                    4a:37:51:43:e7:db:cf:0f:9e:43:d3:63:fe:77:a4:
                    a5:6d:9f:34:ef:70:6a:8d:f0:fa:19:7c:82:2e:28:
                    da:4a:75:62:2b:5f:19:e2:b0:e2:c5:02:a6:4c:fb:
                    b7:ea:13:e7:67:dc:9a:49:df:bf:80:5d:ec:3f:82:
                    71:7b:72:2c:87:62:9c:0c:d7:43:b2:d8:eb:62:59:
                    52:be:2c:61:de:cb:90:29:b8:9c:ed:b9:89:fd:65:
                    af:e5:a5:df:ab:a9:a4:42:b5:0d:a4:29:f5:ef:bb:
                    59:0a:d3:ff:79:4d:ca:bd:ed:61:4e:21:7b:35:8c:
                    aa:3d:f3:7a:ce:e4:ef:5c:b5:2a:87:91:ed:52:46:
                    2f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A1:1D:97:ED:E2:ED:41:D7:D0:8E:1B:1A:F9:2D:D0:0D:D2:74:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e1a20bf-1b6f-3f82-9019-44278b6895d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.100.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:17:49:ae:b9:15:af:f8:0e:1f:f9:8c:84:f0:9a:71:78:
         52:4f:a9:0f:c7:7f:9c:ab:8c:13:6f:a7:0c:56:9b:9e:62:1f:
         ed:a3:a3:bd:b4:10:be:95:30:ab:28:3c:61:ac:bf:5c:be:fe:
         4e:65:9f:48:50:85:7a:1f:1e:7a:7b:59:ba:c6:dd:ce:f7:2b:
         cf:b4:56:1b:62:bd:50:f0:ee:ab:28:88:67:1b:d7:2f:b3:04:
         d4:08:3c:5d:0e:6d:4f:af:a8:5b:40:da:c7:3f:27:dc:a2:3e:
         45:14:2a:6e:47:32:b1:88:16:97:eb:3f:27:36:f1:20:36:51:
         1f:6d:29:8e:f3:f8:2c:23:a7:49:40:ab:49:8a:bc:76:b8:ea:
         a5:dc:c3:44:b6:f0:36:1c:4d:90:de:a6:a2:32:28:43:d5:d2:
         67:00:6c:d2:79:02:9b:64:a7:76:c0:a2:d7:52:4d:de:15:96:
         4c:7d:50:f4:4c:eb:dd:41:5b:e3:d5:e1:01:36:da:24:e7:95:
         a8:0f:49:97:0e:7d:60:be:5e:d6:49:7f:dd:4f:21:14:9b:5f:
         20:13:c7:f2:45:ae:aa:cc:55:6f:45:6d:c9:fe:6d:b6:06:bf:
         ff:1b:50:6e:98:7e:c7:a6:1b:19:34:14:0c:33:10:8b:13:3a:
         57:67:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 12:16:44 2025 by rpki-client