This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64eeff2f-8bdf-30ab-8831-0da8d9f805be.roa
File:                     64eeff2f-8bdf-30ab-8831-0da8d9f805be.roa (raw, json)
Hash identifier:          pc52M7HpitpPVT3ucqAk/y8DQCNMEOEizSA4v0AjK9s=
Subject key identifier:   E0:7C:64:27:A2:C8:56:DA:A0:9D:46:FE:4D:42:A8:24:58:3E:1F:8D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858402A275D8468474E63AB3D2380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64eeff2f-8bdf-30ab-8831-0da8d9f805be.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Thu 12 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.210.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2a:27:5d:84:68:47:4e:63:ab:3d:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Jan 12 05:00:00 2023 GMT
        Subject: CN=94df7574-ad32-45d9-8b99-0702f3708c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:a0:c0:37:a4:35:d7:8d:95:b0:57:37:e0:
                    37:c0:ff:4a:56:e2:a1:12:dc:ec:4e:e5:ae:1e:4c:
                    28:3c:d9:e5:08:c3:8a:58:fe:b9:43:54:c1:86:52:
                    2a:ef:b6:27:0d:5e:d5:59:e9:7e:55:73:c6:33:95:
                    75:a1:61:0e:7c:e4:31:21:05:36:23:8b:b8:1e:72:
                    3f:64:cb:88:af:6e:f3:7a:d8:a4:c2:f0:ef:a9:f0:
                    ce:6a:38:fd:e2:35:3e:5d:3f:72:6a:f1:3f:46:98:
                    d8:b9:c9:a0:28:3d:f3:22:1f:7d:8d:c2:fa:41:42:
                    37:7e:13:77:84:fc:b7:f4:a2:c5:69:08:05:fd:ca:
                    f6:6c:05:79:72:97:53:33:40:d9:94:bd:f3:f2:e4:
                    6b:8a:81:77:b9:d2:a0:92:89:d9:98:ea:2e:44:08:
                    4e:3a:c6:33:98:54:8b:c4:43:f1:fe:c1:0e:1b:fb:
                    30:51:7c:ab:d5:de:2a:5a:82:0d:b2:dc:2c:9b:b9:
                    7c:46:ed:fa:49:31:c8:0e:6f:27:96:7d:c2:67:e1:
                    40:e8:f4:ba:c5:db:e8:d7:3a:a8:48:98:5f:22:2f:
                    4b:53:15:bd:e8:30:75:3e:6b:86:17:06:85:72:86:
                    78:51:79:03:85:f6:d8:42:b3:b2:04:07:f9:c2:85:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7C:64:27:A2:C8:56:DA:A0:9D:46:FE:4D:42:A8:24:58:3E:1F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64eeff2f-8bdf-30ab-8831-0da8d9f805be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:38:1b:d4:4f:c1:38:39:8d:0c:ba:25:b6:a3:d5:7a:fe:0f:
         38:19:cf:c8:8f:f1:f8:f6:a4:be:b8:b6:17:6a:dd:ee:14:30:
         f2:d3:cc:6c:ee:e6:3a:db:a3:45:99:1f:68:56:69:4d:56:92:
         a6:ba:4a:d6:6f:45:fe:3d:24:6c:8d:6a:19:e4:f6:19:66:60:
         e7:fc:a8:ef:cd:31:a9:23:93:c6:c0:b7:7e:3b:44:5f:9a:96:
         2f:03:04:39:77:8d:a8:6a:59:7a:6b:35:74:cc:6e:84:e3:fb:
         2b:84:b4:fd:80:39:86:7f:ea:a8:e0:cf:aa:97:3d:5c:30:f0:
         6d:2d:eb:10:64:71:55:eb:36:17:c7:3f:3c:6a:08:fa:b3:8f:
         61:85:68:cd:44:7f:70:f1:43:df:67:91:87:3e:83:52:8c:37:
         b7:0b:e9:1e:fc:27:d3:ad:a4:25:2f:15:6b:d5:bd:59:21:8d:
         d5:bd:c1:82:41:32:20:1a:f5:bf:e6:93:2e:bb:c8:a9:3c:ee:
         c7:3f:52:a7:a7:2c:e4:e2:b0:76:59:a7:1a:38:e2:f9:06:41:
         31:3f:1a:6b:98:32:fa:76:3f:29:18:2a:a8:a1:f5:cc:9b:23:
         ea:ea:6d:da:90:b8:8f:ef:6a:70:99:10:be:c7:3d:51:ba:02:
         a4:75:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:48:11 2025 by rpki-client