This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f65a9f1-c95f-3a58-b0dd-3926a48ffb78.roa
File:                     6f65a9f1-c95f-3a58-b0dd-3926a48ffb78.roa (raw, json)
Hash identifier:          yOb6g5QX+bOCj9Abvdtf92s9WsQC86X0mBoPs63r8/c=
Subject key identifier:   20:E5:83:3B:B6:1B:8D:9A:C7:67:1C:9C:E6:C2:A2:90:D5:BB:D4:39
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DBB30A55025922ACDB14FBD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f65a9f1-c95f-3a58-b0dd-3926a48ffb78.roa
Signing time:             Thu 28 Apr 2022 12:00:00 +0000
ROA not before:           Thu 28 Apr 2022 12:00:00 +0000
ROA not after:            Fri 03 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        141.185.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:bb:30:a5:50:25:92:2a:cd:b1:4f:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 28 12:00:00 2022 GMT
            Not After : Jun  3 04:00:00 2022 GMT
        Subject: CN=94b837ae-e979-44dc-abec-f1507637d829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:04:67:ef:ae:1f:c1:6f:16:be:9f:9c:2b:
                    29:16:e7:8f:2d:33:f5:58:f2:1f:ef:1b:73:8e:49:
                    9f:d1:c4:70:f9:ec:75:88:b1:26:7e:b4:c6:55:07:
                    29:1b:3b:fc:ed:81:79:d8:13:a5:e2:ea:a4:85:e2:
                    ba:75:7b:60:1e:b2:ca:0d:dd:7e:59:fe:4b:1b:12:
                    e0:73:f2:fc:81:83:f5:43:ab:04:0f:98:65:e2:b6:
                    55:73:6f:81:58:ef:c5:34:cc:88:8b:76:35:03:9d:
                    39:56:59:ac:1c:16:81:60:8a:87:59:97:2c:98:dd:
                    c1:5c:51:01:9f:05:11:23:ae:fd:52:6b:73:4e:23:
                    87:e4:9b:fc:74:d5:be:31:28:6a:f7:59:fd:43:c7:
                    29:32:d2:c0:06:0a:32:70:6e:0b:3e:0c:f8:e9:b2:
                    7e:9a:b2:57:1e:05:ca:42:6f:45:eb:71:d9:11:c7:
                    81:6b:3d:eb:bf:7f:d3:a9:75:07:a7:35:c0:04:d9:
                    17:c6:d6:5c:9f:ca:4c:3c:1a:19:d0:e3:d5:67:91:
                    82:aa:35:39:d8:a5:e0:9c:64:ee:77:41:82:38:c4:
                    6b:42:0c:cd:3b:7d:a7:48:00:e3:1e:59:aa:2e:89:
                    49:83:14:5e:d6:22:79:1f:c0:26:fd:22:5e:1e:dc:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E5:83:3B:B6:1B:8D:9A:C7:67:1C:9C:E6:C2:A2:90:D5:BB:D4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f65a9f1-c95f-3a58-b0dd-3926a48ffb78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:22:39:2f:19:48:72:28:82:e6:6d:aa:e7:e7:85:19:72:
         df:ab:2e:9a:c7:d3:96:9f:69:0f:aa:7e:18:5d:16:cf:57:cc:
         98:6e:42:a9:3a:77:70:85:15:d8:0f:5a:fe:c7:df:5c:ab:f2:
         7e:80:66:bd:d8:59:4f:d3:0a:65:d6:14:90:04:be:00:86:4b:
         d6:f1:46:40:86:99:0d:01:95:76:bd:eb:0c:56:12:a0:77:ea:
         a0:f3:95:97:20:a7:96:1d:75:a9:f9:0c:2b:d6:87:84:fa:79:
         f4:e1:d7:3e:36:51:23:2f:65:b5:1a:21:fd:d0:f5:32:81:0e:
         4b:32:79:e1:fe:a3:f5:3f:7e:92:e6:b1:47:68:04:02:23:d8:
         a3:ce:da:1c:29:2d:91:a8:05:aa:94:65:fc:72:cc:34:0b:52:
         10:b4:be:1f:12:21:a9:eb:b0:2c:54:4d:e1:ad:f9:f4:78:87:
         27:83:c7:0e:ef:11:c1:ef:57:92:2d:04:de:70:9a:61:9e:22:
         59:2f:03:d7:63:62:0d:9c:f0:01:2b:4d:61:3e:a4:83:b3:c6:
         62:18:ea:af:58:b6:c7:6e:15:b7:07:65:3d:84:c9:e1:b1:2e:
         27:4f:68:b5:b6:27:2b:c6:a4:0e:80:ce:76:25:1f:dd:72:bd:
         78:b7:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----