This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/638de933-beb7-37df-8de4-8f497cfa0437.roa
File:                     638de933-beb7-37df-8de4-8f497cfa0437.roa (raw, json)
Hash identifier:          dRkjoyqhLJYDWughXCazGGa4uod3Lujiu+XHgbHtLBY=
Subject key identifier:   F6:04:98:40:8E:10:83:9E:A1:53:1A:54:4C:39:0A:F9:ED:34:3B:A0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F4BDCC2633BBD26A882C58080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/638de933-beb7-37df-8de4-8f497cfa0437.roa
Signing time:             Sun 18 Sep 2022 12:00:00 +0000
ROA not before:           Sun 18 Sep 2022 12:00:00 +0000
ROA not after:            Mon 24 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        15.251.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4b:dc:c2:63:3b:bd:26:a8:82:c5:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 18 12:00:00 2022 GMT
            Not After : Oct 24 04:00:00 2022 GMT
        Subject: CN=8d434701-3dde-4210-89c9-26025ad891b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:93:e6:71:72:bd:3b:51:8a:fd:a2:d5:af:
                    db:1d:94:de:b1:83:c1:97:6d:4d:ea:d9:d0:07:95:
                    e3:43:52:b8:5d:84:8f:eb:31:05:1a:f1:26:b3:0b:
                    89:c6:ad:a5:fb:94:c8:61:47:a2:31:91:76:39:8f:
                    aa:97:3e:c0:7c:dc:bb:40:08:7a:5b:63:c0:5a:5c:
                    1f:53:9f:dd:4d:fe:75:ac:8b:31:d4:95:6f:7c:69:
                    61:a7:55:54:f9:a3:70:00:7c:07:0e:dd:a5:e4:d4:
                    66:8f:38:89:dd:34:cf:b3:59:6d:78:18:34:b5:93:
                    f1:9a:29:2d:cc:6d:ab:76:db:88:8c:be:67:c8:38:
                    2a:e9:ca:8f:17:83:6c:fe:a0:0c:0d:c9:6d:f5:6b:
                    fe:6e:c5:ca:b3:eb:8a:e9:a0:ab:45:7f:be:1a:a8:
                    a3:5e:a0:9b:69:c6:b6:df:e8:ef:20:00:cc:5c:dc:
                    7b:f4:d8:02:42:43:25:1c:35:54:d2:4b:32:b5:22:
                    e4:ed:46:86:18:30:a2:2f:b9:0f:d1:d2:98:08:64:
                    3e:5a:0c:b6:d6:38:39:09:58:01:02:2d:6c:ed:cc:
                    3f:af:60:c6:c5:99:5e:a1:a0:9c:de:b3:aa:ba:3e:
                    56:3f:bb:dc:ba:9e:9d:28:43:61:15:95:02:2f:a1:
                    f2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:04:98:40:8E:10:83:9E:A1:53:1A:54:4C:39:0A:F9:ED:34:3B:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/638de933-beb7-37df-8de4-8f497cfa0437.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.251.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:31:cc:af:2d:1f:85:91:9c:01:8c:b8:16:ef:73:2d:12:a0:
         f3:20:e7:92:27:72:b6:78:40:01:8c:8b:2e:62:60:ec:d2:eb:
         a1:11:ff:9d:e6:54:40:c9:2c:7f:58:4f:27:3b:03:87:59:eb:
         bb:b9:f7:c4:3c:a0:c2:a5:38:5f:62:8d:49:6a:92:79:4b:e8:
         1c:18:85:d1:a9:57:a7:a7:c1:bc:e9:c8:25:d0:58:8e:0e:08:
         c2:37:e7:35:38:51:4f:43:33:94:4e:da:cc:0b:39:55:f5:fc:
         73:c9:c1:2d:2b:2f:ff:ef:e9:f5:9b:22:b5:60:54:04:7b:af:
         34:fc:f0:38:90:b9:4e:29:8e:72:9f:05:d5:8d:7c:fc:d3:e1:
         1e:25:0f:51:9a:87:6b:47:6c:91:6a:3d:de:8a:a0:ee:af:b1:
         3a:24:d8:31:d0:9f:2a:88:50:de:a8:e0:37:a5:73:53:aa:8d:
         ca:e1:3f:f5:38:13:76:38:b8:34:11:52:0a:e2:18:0b:e4:f4:
         d5:05:75:8b:63:ad:8d:6c:46:53:2c:39:55:7b:a5:c0:1e:84:
         87:f2:68:2c:4a:5d:96:f6:f3:10:07:52:a6:20:5b:69:a7:3e:
         78:0c:5f:0c:1d:0d:f9:98:ec:12:a6:28:54:44:f3:06:cd:5b:
         1a:a1:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----