This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5eef8d10-6feb-3d2c-8472-c350c8e82034.roa
File:                     5eef8d10-6feb-3d2c-8472-c350c8e82034.roa (raw, json)
Hash identifier:          O9XBfCoDw051V0gODO3r/qKJ1TqjYtlYHtinDIumvOo=
Subject key identifier:   90:29:17:3D:90:75:2C:79:43:A3:94:09:03:7C:A8:EF:25:26:9C:20
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584094D285F9FC6C3A70B23DA3C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5eef8d10-6feb-3d2c-8472-c350c8e82034.roa
Signing time:             Sat 14 Jan 2023 12:00:00 +0000
ROA not before:           Sat 14 Jan 2023 12:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        18.104.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:94:d2:85:f9:fc:6c:3a:70:b2:3d:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 12:00:00 2023 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=6e823ce0-378f-4020-9b57-24efe5b217e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:df:d3:7f:a0:a2:df:83:f7:db:65:05:ed:
                    82:76:74:54:3a:87:36:5f:16:5c:fb:48:05:11:05:
                    7b:e4:14:3c:0a:1b:e1:c1:22:8c:f6:07:7a:54:94:
                    2b:58:ad:f5:5d:36:84:5d:f4:f3:04:36:b6:6e:69:
                    1b:5d:b2:48:a2:d6:b5:11:ce:52:75:68:d0:16:88:
                    5b:e2:50:6c:61:c7:88:d1:4e:1d:05:a8:b7:64:0b:
                    52:77:da:62:f9:87:d0:a4:52:3a:41:bb:2d:e1:15:
                    43:f3:02:30:54:ca:c1:27:96:b4:6a:06:c4:d4:88:
                    77:14:d2:c5:3c:de:5c:df:9e:90:08:83:b3:b1:50:
                    cd:23:4a:47:19:85:a1:cd:ba:da:80:ae:60:c5:7f:
                    d6:81:e0:0a:b9:cd:64:7c:87:e9:d2:fb:9b:37:29:
                    12:c4:05:6a:e8:9b:bb:ff:40:e0:9c:32:b2:7a:ee:
                    ae:63:76:1d:e3:5b:4b:f6:8c:cb:13:eb:04:b8:93:
                    86:08:d0:56:3e:92:b0:fa:05:64:9c:54:57:f7:2b:
                    3e:c6:bd:b5:85:33:fc:d6:bb:20:c1:f3:53:9e:fa:
                    5c:d7:46:b3:09:49:03:be:49:ca:cb:9a:6c:0f:94:
                    ab:6a:d6:ee:6f:5a:c6:a8:7d:94:89:b6:15:28:0b:
                    fc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:29:17:3D:90:75:2C:79:43:A3:94:09:03:7C:A8:EF:25:26:9C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5eef8d10-6feb-3d2c-8472-c350c8e82034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.104.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:d8:44:87:69:66:26:68:e0:46:ae:5b:5c:0e:de:79:4e:6c:
         2a:74:f8:56:aa:5b:80:8d:89:4a:f8:70:db:0e:5e:e0:73:eb:
         9c:23:c9:1f:fa:5f:2d:e7:af:10:87:85:a4:20:48:de:85:8d:
         9d:93:80:d9:3c:57:66:05:21:9f:e7:64:a1:45:03:d4:8d:3c:
         c8:fb:59:68:03:b2:0e:f4:ba:89:cc:65:b4:9c:d6:82:c8:19:
         67:0e:ac:aa:fd:0e:6f:f5:c0:6d:83:7c:44:a2:7d:a3:4f:20:
         20:d1:8e:fc:3c:94:a6:a9:d3:48:78:50:76:75:50:f7:ac:a0:
         98:5a:aa:92:ba:b0:64:35:8d:47:13:9c:26:77:51:4e:f2:df:
         7d:18:49:c3:37:36:8a:35:43:e9:12:9b:45:0b:d4:a6:d2:6a:
         38:59:eb:20:e9:5e:c9:98:fd:d5:06:ef:b1:eb:21:3d:eb:46:
         36:4f:b9:43:6e:47:a5:90:3c:60:c3:40:66:5a:fe:7e:ab:8b:
         2c:0d:94:ce:f8:8c:68:9d:8c:15:60:03:09:48:ae:ba:db:ea:
         d8:9a:32:61:e4:ee:6b:e3:25:f0:d6:87:e2:b0:d5:8f:2c:98:
         a5:5a:ea:cb:ea:02:a9:7b:ce:e5:cd:15:2d:da:6a:70:1c:1e:
         29:06:81:4c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECU0oX5/Gw6cLI9o8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExNDEyMDAwMFoXDTIzMDIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
NmU4MjNjZTAtMzc4Zi00MDIwLTliNTctMjRlZmU1YjIxN2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsTf03+got+D99tlBe2CdnRUOoc2XxZc+0gF
EQV75BQ8ChvhwSKM9gd6VJQrWK31XTaEXfTzBDa2bmkbXbJIota1Ec5SdWjQFohb
4lBsYceI0U4dBai3ZAtSd9pi+YfQpFI6Qbst4RVD8wIwVMrBJ5a0agbE1Ih3FNLF
PN5c356QCIOzsVDNI0pHGYWhzbragK5gxX/WgeAKuc1kfIfp0vubNykSxAVq6Ju7
/0DgnDKyeu6uY3Yd41tL9ozLE+sEuJOGCNBWPpKw+gVknFRX9ys+xr21hTP81rsg
wfNTnvpc10azCUkDvknKy5psD5Sratbub1rGqH2UibYVKAv8QQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJApFz2QdSx5Q6OUCQN8qO8lJpwgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWVlZjhkMTAtNmZlYi0z
ZDJjLTg0NzItYzM1MGM4ZTgyMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEmgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnthEh2lmJmjgRq5bXA7eeU5sKnT4VqpbgI2JSvhw2w5e4HPrnCPJH/pf
LeevEIeFpCBI3oWNnZOA2TxXZgUhn+dkoUUD1I08yPtZaAOyDvS6icxltJzWgsgZ
Zw6sqv0Ob/XAbYN8RKJ9o08gINGO/DyUpqnTSHhQdnVQ96ygmFqqkrqwZDWNRxOc
JndRTvLffRhJwzc2ijVD6RKbRQvUptJqOFnrIOleyZj91QbvseshPetGNk+5Q25H
pZA8YMNAZlr+fquLLA2UzviMaJ2MFWADCUiuutvq2JoyYeTua+Ml8NaH4rDVjyyY
pVrqy+oCqXvO5c0VLdpqcBweKQaBTA==
-----END CERTIFICATE-----