This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6308569d-a92a-3b1b-ac19-9095d7506517.roa
File:                     6308569d-a92a-3b1b-ac19-9095d7506517.roa (raw, json)
Hash identifier:          /7YeobY7XPm4CPap4vVyDwTQTwXYcgN/P/shmFY3PWo=
Subject key identifier:   86:8D:0E:36:22:CB:5C:31:AF:17:E2:3B:B7:3D:33:3A:C9:1C:1D:5B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858402A970F7F23F76E61E869A600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6308569d-a92a-3b1b-ac19-9095d7506517.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Thu 12 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.214.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2a:97:0f:7f:23:f7:6e:61:e8:69:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Jan 12 05:00:00 2023 GMT
        Subject: CN=55bab76a-4e9d-43de-9cc3-c808df8524bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:47:6b:3f:32:b9:13:45:98:32:b1:24:80:
                    19:9c:2b:7d:b9:49:cf:ec:fd:27:28:32:05:85:07:
                    d5:2e:01:52:58:4d:66:93:39:3d:e9:f9:17:6d:f5:
                    91:85:b0:52:55:1d:64:46:89:e7:b9:db:c0:30:a5:
                    ec:f7:9b:05:84:f8:a1:90:ca:2d:db:80:b4:5d:f0:
                    c9:b2:b7:06:20:f9:34:2a:86:dd:27:54:98:77:63:
                    e3:ab:3e:da:f6:59:59:65:89:ea:cd:3f:8a:0d:43:
                    69:f0:0a:cf:d4:84:74:8f:b2:56:06:92:09:04:bc:
                    8b:7f:e5:57:cd:90:2d:ca:26:bc:ae:e5:14:3c:6b:
                    40:aa:16:ce:7e:cb:d4:d6:42:99:d5:37:4b:eb:36:
                    76:f9:c8:88:df:a2:5b:60:12:02:6b:06:20:58:04:
                    6a:75:83:83:6a:ad:98:bc:e6:81:60:52:f2:1d:94:
                    b2:65:06:92:e8:e3:b8:a0:e4:85:6d:6b:24:d5:7f:
                    8f:55:ac:10:04:ef:77:eb:b7:30:67:27:27:c9:62:
                    6d:45:d9:2f:4f:c1:41:7c:be:cb:f9:a2:a6:32:17:
                    08:10:20:37:78:b2:71:49:5a:ee:ba:1c:5b:69:c0:
                    6d:a4:ee:ea:a5:a6:80:37:97:4c:13:30:e9:60:fc:
                    9f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8D:0E:36:22:CB:5C:31:AF:17:E2:3B:B7:3D:33:3A:C9:1C:1D:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6308569d-a92a-3b1b-ac19-9095d7506517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.214.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:00:e1:49:39:ee:cc:ff:30:96:04:c5:0d:4f:8c:08:71:2b:
         b5:0e:a3:38:00:9f:f1:c3:5e:9f:e0:7e:28:44:3d:2d:8e:cf:
         03:1b:65:e7:a5:43:50:d6:93:c7:ec:4a:6b:40:fe:99:ac:c9:
         80:3d:f3:7f:4a:b4:2d:c1:5a:94:e0:56:cc:6e:f2:c0:fa:a2:
         b7:75:e2:95:8a:e0:d5:4f:64:49:b2:26:69:94:07:25:7d:f4:
         2a:4a:12:ff:e7:c4:83:e0:73:cd:96:26:a9:e9:91:c7:c2:67:
         8d:74:d6:2a:55:ed:f1:0e:4a:0a:46:6e:f8:b2:4e:be:64:4d:
         af:0b:ac:fa:ef:c2:a7:53:d1:99:1a:a2:80:b4:52:31:ec:24:
         fa:33:6e:c8:99:c0:5c:60:97:c2:22:13:68:87:3e:9d:2e:19:
         65:6a:42:e4:c6:b8:68:f7:23:76:a7:b8:3b:1b:1a:cc:fe:11:
         14:b9:07:f2:77:82:bb:5b:b4:95:a3:50:90:1c:43:f0:37:8c:
         fe:29:02:36:65:0c:fc:d6:98:a5:0a:36:86:93:77:33:64:f0:
         20:15:59:ff:ea:2a:2b:46:2a:5d:c0:e9:1f:dc:4b:d4:2b:1d:
         1b:44:07:38:55:7a:a7:71:f6:31:c1:8a:31:f6:24:6d:df:0f:
         25:5c:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----