This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/634a95dd-74d0-30e2-9853-da0261b3e421.roa
File:                     634a95dd-74d0-30e2-9853-da0261b3e421.roa (raw, json)
Hash identifier:          +qt7+EAgfOs9g4zR+hhgzV1InDBL6YbXOuoz96dF/Go=
Subject key identifier:   1E:DA:77:24:FA:88:D2:48:5E:F2:A4:B8:94:E0:74:5B:71:DC:40:E2
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F8E9A482CC15C566BD1357100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/634a95dd-74d0-30e2-9853-da0261b3e421.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.209.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8e:9a:48:2c:c1:5c:56:6b:d1:35:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=031ff5e6-8e70-419e-8db0-9902198a73a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ab:54:a9:29:73:70:bb:77:ff:27:62:08:f7:
                    7f:e3:61:8f:85:78:79:3b:3f:64:3d:51:7f:0d:97:
                    85:14:da:39:f0:78:29:37:cc:0d:b1:1e:ca:4d:d5:
                    07:47:22:45:1a:da:95:1f:e2:45:94:b8:bf:83:a5:
                    47:bb:e6:8d:87:6d:d1:26:7a:83:9d:a0:9d:4a:a7:
                    b5:f5:24:c9:0e:d2:48:5f:d6:1f:83:89:f9:89:df:
                    16:8c:38:d0:71:43:64:d7:70:b3:de:88:26:a0:2c:
                    f2:73:bb:0d:ba:10:b1:94:f8:ca:1d:25:17:45:6d:
                    e9:6c:3d:a8:58:7c:f5:89:de:4d:dc:43:5b:3f:d3:
                    b1:0d:a3:3d:9e:fb:30:ae:72:88:54:6f:a9:54:ef:
                    02:fe:f3:e4:93:ae:74:4a:70:76:48:4b:39:bc:48:
                    8f:a2:7d:12:8c:f5:6d:ef:b0:08:cd:3c:0a:5b:7c:
                    bb:01:44:6f:35:b2:d6:18:c0:26:b1:65:e5:a5:71:
                    c2:73:9d:6d:0f:f1:4a:b2:49:43:33:08:6f:32:33:
                    61:43:a7:96:b8:a3:f1:62:49:6e:57:3f:74:ec:1c:
                    e6:76:ae:28:ec:f1:75:c4:a9:71:fe:e6:f1:50:4a:
                    bf:d0:7c:3e:d9:a6:e2:d8:3c:16:32:97:91:99:49:
                    85:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DA:77:24:FA:88:D2:48:5E:F2:A4:B8:94:E0:74:5B:71:DC:40:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/634a95dd-74d0-30e2-9853-da0261b3e421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:a4:28:ba:47:5f:6f:25:8f:7b:9c:fb:3a:e4:01:b8:3b:
         88:76:84:f1:d0:2c:9a:ac:b1:4d:db:bf:14:0e:7f:90:ca:6e:
         8d:d0:52:39:74:8e:2a:a9:aa:6b:4d:b8:83:59:a5:91:51:88:
         0a:f4:fb:b7:05:3d:65:45:02:18:72:59:3a:88:ab:c8:29:ec:
         41:4d:e9:aa:fd:5a:22:ef:12:91:7d:e9:7a:53:7b:ae:f9:76:
         59:e6:1a:c4:50:47:a4:ab:37:a1:8f:c9:cd:27:77:8e:dd:b1:
         47:bf:56:0f:39:10:72:3d:d8:16:c4:54:c4:3e:82:25:e5:9a:
         c7:fb:34:09:24:1c:64:c4:c7:c2:d3:b9:97:92:35:6c:e4:9c:
         0a:76:1f:52:4c:fd:5d:b1:27:d0:b0:f0:e4:35:da:ec:ca:bb:
         ce:fa:b8:2c:69:3b:15:5e:20:0c:9e:7f:e9:fe:db:ae:60:7f:
         5c:3d:73:a7:03:64:ea:6e:08:e5:0b:f2:a8:be:08:e4:62:ac:
         04:6a:af:c3:31:4a:58:b5:dc:74:ab:0f:5e:ee:e1:0d:77:b0:
         8f:52:ef:2c:20:cc:ea:a5:ce:03:c7:02:4c:92:34:0d:fb:b5:
         12:6c:10:f0:ee:14:c6:08:31:72:a3:cd:53:f3:36:cc:0b:20:
         52:05:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----