This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73325750-a792-3017-9e9f-bb89305ad228.roa
File:                     73325750-a792-3017-9e9f-bb89305ad228.roa (raw, json)
Hash identifier:          +RwHQfdfQDC7RKQGF6Kk5/dQswvb0Qb4sQKE3RgLU14=
Subject key identifier:   C7:D2:E5:15:D5:20:4D:E1:62:3C:EE:B1:67:8C:1E:7D:25:B9:81:98
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F5BF18798EF45B57618D37100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73325750-a792-3017-9e9f-bb89305ad228.roa
Signing time:             Sat 24 Sep 2022 12:00:00 +0000
ROA not before:           Sat 24 Sep 2022 12:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.53.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5b:f1:87:98:ef:45:b5:76:18:d3:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 24 12:00:00 2022 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=df5a92b5-aa9a-4fb7-b4a0-41b64cc6cc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:85:32:ce:92:69:65:4d:49:5f:f4:cd:8d:03:
                    92:4b:84:f0:71:68:2f:69:df:ac:9d:38:d5:15:6a:
                    5a:61:44:9a:3f:24:3e:51:5d:43:8a:2d:bc:3b:dd:
                    c9:92:6a:1b:fd:97:7e:1e:d7:41:aa:20:75:5d:f3:
                    85:d8:cc:df:a1:f5:1e:b7:35:5b:cb:ed:f9:ca:f9:
                    d8:5b:b2:84:b7:77:f0:fa:87:e5:22:84:8c:01:ac:
                    9e:db:b7:3a:b1:8d:c2:04:3d:87:0e:7a:44:d8:97:
                    1d:d2:a4:77:12:ef:fe:18:dd:74:e6:68:8b:92:a9:
                    ef:07:ce:0e:bd:ac:bd:b7:95:89:00:04:bb:2a:6c:
                    2f:a9:0b:40:01:2a:2a:cb:e4:22:0e:2c:90:92:c7:
                    bb:7b:03:6f:6f:39:2b:ed:e5:94:c1:dc:ef:30:16:
                    68:36:10:69:d0:37:fd:d4:5c:80:bc:87:1e:cf:c4:
                    af:50:e0:c9:63:9b:f8:cc:c6:b7:cf:1c:10:25:e1:
                    1a:74:08:54:e5:41:b7:76:c0:9d:b4:16:8f:50:03:
                    1f:e1:2f:82:2e:84:91:f7:93:d7:26:89:fe:97:13:
                    ed:ec:52:c0:f9:12:d5:7e:f4:35:3a:27:20:e1:57:
                    cf:c3:ff:6b:9c:a0:7d:7e:88:d9:0f:1c:42:b4:53:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D2:E5:15:D5:20:4D:E1:62:3C:EE:B1:67:8C:1E:7D:25:B9:81:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/73325750-a792-3017-9e9f-bb89305ad228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a6:46:94:57:21:be:12:d3:0f:71:c7:71:0d:dc:92:e0:51:
         43:12:28:89:75:8a:49:ed:92:89:bf:78:49:57:52:50:2b:9d:
         fe:c2:01:31:01:a4:07:41:ec:72:e1:62:82:b2:43:aa:d1:11:
         4f:6d:48:21:77:2b:02:93:b4:2e:29:f3:fc:ea:c4:83:79:95:
         be:c8:5b:11:1e:da:bd:c7:64:c1:7e:d1:f6:05:48:f1:58:10:
         30:32:b7:3c:3d:5b:a8:ee:10:80:4b:1e:bb:77:9a:76:8b:ce:
         d7:85:f5:47:4d:12:21:bd:fb:a4:a3:b7:d8:60:03:c7:f7:05:
         e0:f9:66:b0:63:8f:46:fa:8d:5b:80:13:36:77:22:6f:ca:f0:
         4a:c4:a9:45:fb:bf:4c:64:cc:63:6b:7f:13:c4:82:4a:00:a6:
         1a:e0:0a:a1:bf:78:00:bd:57:03:cc:91:20:91:c1:61:21:56:
         64:20:d9:5e:ea:6d:77:0f:2c:a0:92:65:dd:7a:0c:2d:b4:dc:
         ec:03:f1:75:cf:f4:af:a4:79:ab:78:9c:27:db:98:92:37:d2:
         93:0e:55:c9:13:9b:4b:a5:e4:e4:a2:c3:c4:dc:6c:c9:ba:e2:
         c9:00:68:38:83:5e:ce:5f:e2:29:1b:ae:01:30:01:76:5f:92:
         25:9a:f9:ff
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9b8YeY70W1dhjTcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyNDEyMDAwMFoXDTIyMTAzMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZGY1YTkyYjUtYWE5YS00ZmI3LWI0YTAtNDFiNjRjYzZjYzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYUyzpJpZU1JX/TNjQOSS4TwcWgvad+snTjV
FWpaYUSaPyQ+UV1Dii28O93Jkmob/Zd+HtdBqiB1XfOF2MzfofUetzVby+35yvnY
W7KEt3fw+oflIoSMAaye27c6sY3CBD2HDnpE2Jcd0qR3Eu/+GN105miLkqnvB84O
vay9t5WJAAS7KmwvqQtAASoqy+QiDiyQkse7ewNvbzkr7eWUwdzvMBZoNhBp0Df9
1FyAvIcez8SvUODJY5v4zMa3zxwQJeEadAhU5UG3dsCdtBaPUAMf4S+CLoSR95PX
Jon+lxPt7FLA+RLVfvQ1Oicg4VfPw/9rnKB9fojZDxxCtFPs2wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMfS5RXVIE3hYjzusWeMHn0luYGYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNzMzMjU3NTAtYTc5Mi0z
MDE3LTllOWYtYmI4OTMwNWFkMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEjUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAR6ZGlFchvhLTD3HHcQ3ckuBRQxIoiXWKSe2Sib94SVdSUCud/sIBMQGk
B0HscuFigrJDqtERT21IIXcrApO0Linz/OrEg3mVvshbER7avcdkwX7R9gVI8VgQ
MDK3PD1bqO4QgEseu3eadovO14X1R00SIb37pKO32GADx/cF4PlmsGOPRvqNW4AT
Nncib8rwSsSpRfu/TGTMY2t/E8SCSgCmGuAKob94AL1XA8yRIJHBYSFWZCDZXupt
dw8soJJl3XoMLbTc7APxdc/0r6R5q3icJ9uYkjfSkw5VyRObS6Xk5KLDxNxsybri
yQBoOINezl/iKRuuATABdl+SJZr5/w==
-----END CERTIFICATE-----