This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e527351-b349-333f-a420-aac18e64ba2b.roa
File:                     5e527351-b349-333f-a420-aac18e64ba2b.roa (raw, json)
Hash identifier:          HIxHVldl0TH8kfYCCYOI3uQoP2SJBnlT+EfOrBTd940=
Subject key identifier:   E2:AA:2F:6E:83:BB:88:0B:D4:BA:07:F8:35:F0:5B:D2:73:13:AF:8B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F9EA78AE8E71EE703F1E99C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e527351-b349-333f-a420-aac18e64ba2b.roa
Signing time:             Tue 18 Oct 2022 12:00:00 +0000
ROA not before:           Tue 18 Oct 2022 12:00:00 +0000
ROA not after:            Wed 23 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        13.40.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9e:a7:8a:e8:e7:1e:e7:03:f1:e9:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 18 12:00:00 2022 GMT
            Not After : Nov 23 05:00:00 2022 GMT
        Subject: CN=61b3c51f-858f-47ae-9a07-7c8a7b3f2463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:60:c7:42:73:0f:76:3f:7c:28:ca:e0:0b:
                    80:2e:c4:c1:2b:cf:1b:fe:97:3d:01:15:dc:71:51:
                    64:99:07:ef:bb:29:ef:64:63:8d:28:f4:9f:55:1f:
                    1f:d9:a4:8d:aa:9e:6e:24:b6:8f:ad:94:65:77:cf:
                    bb:03:31:f6:99:1a:f6:16:1f:58:d5:31:1d:74:64:
                    71:7e:9e:e2:69:f6:16:4a:87:f7:24:8e:38:05:74:
                    f1:52:e7:26:73:c2:04:40:a3:ca:c0:d3:40:c4:cf:
                    41:c2:ff:be:4c:2d:2c:29:4c:e7:5f:d5:4f:12:c8:
                    de:a0:d2:e8:ff:cc:28:e6:84:63:8a:53:d9:d4:34:
                    02:6d:40:12:84:cf:dd:1c:68:58:c5:9d:71:cc:fc:
                    da:1d:be:eb:15:3b:3c:3c:0b:70:a3:d3:c5:3b:6e:
                    32:1b:88:e0:38:01:bc:4b:c2:26:25:85:0e:c2:2d:
                    11:06:47:62:1c:bd:d2:0d:62:68:33:41:a3:3c:21:
                    fd:c1:20:af:07:b6:1a:91:cf:c7:d9:ea:48:50:80:
                    be:2b:13:5d:40:42:9f:71:2b:af:dc:d6:47:b4:48:
                    40:3d:61:b1:e6:2c:bf:6c:74:a5:6a:54:bb:15:a3:
                    89:67:f1:63:fa:7e:50:8a:34:2b:32:d3:c4:86:0f:
                    ea:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AA:2F:6E:83:BB:88:0B:D4:BA:07:F8:35:F0:5B:D2:73:13:AF:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5e527351-b349-333f-a420-aac18e64ba2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.40.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:58:f1:be:a4:cf:5a:95:5b:61:a9:5e:97:a5:47:9a:1a:96:
         42:00:23:b1:0e:8e:bd:2c:92:bb:db:36:23:d4:3a:db:cf:43:
         d3:f6:ec:50:46:4f:c6:44:79:40:cc:7f:c5:20:ad:1c:a2:93:
         5e:1b:5d:18:56:d1:52:f9:a4:15:51:5e:be:91:e8:54:99:b2:
         a9:95:00:2f:e3:c4:53:ef:3f:af:e0:29:e7:f7:4f:bb:67:5f:
         0f:61:a1:d6:ad:63:29:93:07:ff:ef:d7:18:40:5b:69:5f:ea:
         b6:4e:31:61:a2:2b:07:6e:12:5e:11:90:bb:d9:d1:c5:a2:b1:
         3c:0f:b9:76:09:51:63:aa:44:18:07:56:c4:03:0e:83:40:10:
         09:26:08:df:55:8a:9f:72:f0:e3:d9:ba:d7:14:ac:41:d6:87:
         51:d5:eb:b3:0e:b9:b6:6a:f1:c3:2e:76:8a:1d:c2:d8:06:2b:
         c4:40:93:4b:25:dd:10:11:a7:06:5f:30:6b:12:02:06:b4:26:
         7b:46:7c:8a:25:e8:fe:7e:2c:1f:ee:24:99:14:fd:c2:c6:7f:
         3d:9d:db:92:54:e1:53:a9:b1:2e:5c:89:04:c1:d4:c8:eb:b2:
         6e:f1:a0:31:d4:32:77:88:67:cf:cc:3b:a5:5c:ce:f5:b7:51:
         3e:76:a4:f8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+ep4ro5x7nA/HpnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAxODEyMDAwMFoXDTIyMTEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
NjFiM2M1MWYtODU4Zi00N2FlLTlhMDctN2M4YTdiM2YyNDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiBgx0JzD3Y/fCjK4AuALsTBK88b/pc9ARXc
cVFkmQfvuynvZGONKPSfVR8f2aSNqp5uJLaPrZRld8+7AzH2mRr2Fh9Y1TEddGRx
fp7iafYWSof3JI44BXTxUucmc8IEQKPKwNNAxM9Bwv++TC0sKUznX9VPEsjeoNLo
/8wo5oRjilPZ1DQCbUAShM/dHGhYxZ1xzPzaHb7rFTs8PAtwo9PFO24yG4jgOAG8
S8ImJYUOwi0RBkdiHL3SDWJoM0GjPCH9wSCvB7Yakc/H2epIUIC+KxNdQEKfcSuv
3NZHtEhAPWGx5iy/bHSlalS7FaOJZ/Fj+n5QijQrMtPEhg/qnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOKqL26Du4gL1LoH+DXwW9JzE6+LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWU1MjczNTEtYjM0OS0z
MzNmLWE0MjAtYWFjMThlNjRiYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDDSgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAj1jxvqTPWpVbYalel6VHmhqWQgAjsQ6OvSySu9s2I9Q6289D0/bsUEZP
xkR5QMx/xSCtHKKTXhtdGFbRUvmkFVFevpHoVJmyqZUAL+PEU+8/r+Ap5/dPu2df
D2Gh1q1jKZMH/+/XGEBbaV/qtk4xYaIrB24SXhGQu9nRxaKxPA+5dglRY6pEGAdW
xAMOg0AQCSYI31WKn3Lw49m61xSsQdaHUdXrsw65tmrxwy52ih3C2AYrxECTSyXd
EBGnBl8waxICBrQme0Z8iiXo/n4sH+4kmRT9wsZ/PZ3bklThU6mxLlyJBMHUyOuy
bvGgMdQyd4hnz8w7pVzO9bdRPnak+A==
-----END CERTIFICATE-----
Generated at Mon Dec 22 06:31:05 2025 by rpki-client