This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/606a28b5-c5aa-3287-b032-f46dfcfddacf.roa
File:                     606a28b5-c5aa-3287-b032-f46dfcfddacf.roa (raw, json)
Hash identifier:          +PbNtxfgc+fe9XzZbJuBMwT4Rf7mcVTL34y2bDoloJA=
Subject key identifier:   63:C8:D1:EE:69:DE:90:72:11:74:D1:BF:61:20:31:3F:21:DB:79:CB
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840ADE3A10D16B1C6BCE3B61080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/606a28b5-c5aa-3287-b032-f46dfcfddacf.roa
Signing time:             Mon 23 Jan 2023 12:00:00 +0000
ROA not before:           Mon 23 Jan 2023 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        138.111.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:e3:a1:0d:16:b1:c6:bc:e3:b6:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 23 12:00:00 2023 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=d294edb4-23ff-4131-8a67-b4c81401d008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:56:8c:db:82:e1:08:5b:ce:42:50:61:c4:
                    87:0b:f7:e4:20:de:bb:1b:1a:f1:a2:12:10:43:6f:
                    06:4d:48:1a:0f:27:1a:dd:1f:24:14:b3:dd:06:ae:
                    99:34:e1:c6:e7:f6:4f:d9:b2:1c:02:35:8a:90:c5:
                    92:f2:d6:26:da:97:94:43:40:9e:98:aa:4d:29:1f:
                    3d:ae:2e:c2:eb:e2:1d:09:8e:f6:65:b2:12:36:10:
                    63:5c:06:7b:4b:e7:e0:70:98:59:9f:1c:db:91:8f:
                    16:76:e5:44:0f:80:95:73:4a:02:18:06:12:b4:23:
                    cf:b2:8e:95:16:ec:fc:c0:32:d3:07:9f:71:ee:8e:
                    6c:80:fe:ec:8b:b9:f1:4a:ef:b1:c7:4a:ce:5a:50:
                    48:86:45:f4:90:5e:7b:fd:17:47:4e:9d:73:8a:19:
                    06:c0:6d:e1:e8:74:3a:18:1d:f7:e0:be:ff:ea:3e:
                    f1:44:3a:53:46:c0:94:1a:d3:9b:07:dd:58:9d:15:
                    ef:08:45:a1:9d:7d:8f:57:7d:90:80:e3:7c:84:b1:
                    bc:76:63:c3:1b:ad:ac:f1:27:57:b2:69:60:74:88:
                    c9:93:d3:c0:4b:a4:99:af:b3:0a:53:32:37:38:57:
                    d7:3e:85:50:e7:d9:b9:eb:cd:73:80:ce:54:cd:3d:
                    af:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C8:D1:EE:69:DE:90:72:11:74:D1:BF:61:20:31:3F:21:DB:79:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/606a28b5-c5aa-3287-b032-f46dfcfddacf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.111.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:3b:06:4d:b4:2b:6b:de:c4:f8:d4:02:8d:30:c6:04:15:8f:
         e5:31:d8:03:28:63:01:09:3a:a7:7f:77:32:76:35:ec:7a:24:
         c6:b3:09:df:e2:8e:f7:3d:b0:7e:b2:80:eb:41:57:be:a6:eb:
         df:4d:7c:b9:23:3f:13:d5:88:6e:ab:ca:6e:71:6f:be:84:d0:
         9b:e2:f2:d6:0a:7c:1c:fc:44:81:ea:b4:58:76:32:19:5b:ef:
         c1:14:0d:fe:9a:68:01:8f:15:12:6c:f4:4b:cf:a2:a3:29:19:
         41:5f:db:8e:bd:13:59:4d:32:96:2c:c5:01:16:67:fe:4f:bb:
         af:10:fe:4a:f0:af:4f:25:b8:68:d9:f8:30:20:1b:b8:ca:f3:
         03:74:60:1f:6e:00:70:c8:39:5e:c9:b4:e7:ee:0f:29:cd:0d:
         46:c1:ef:82:ed:6b:36:f8:5d:93:d4:ba:3d:46:4c:6d:f5:4c:
         47:8b:07:a6:8b:2c:a2:37:20:46:11:5b:60:6d:08:5e:7a:8a:
         f6:ef:0d:4f:3e:8b:1b:d2:da:44:86:bc:80:f1:93:74:bc:ec:
         4a:fd:08:18:8f:41:f3:38:86:54:9a:06:98:a7:24:4d:ec:74:
         01:f4:02:fd:f1:6d:4c:fa:13:23:6f:b1:73:8b:79:4e:fc:9f:
         44:e8:2f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----