This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/77f5eca2-970a-3a15-b48b-b127a9f34795.roa
File:                     77f5eca2-970a-3a15-b48b-b127a9f34795.roa (raw, json)
Hash identifier:          myAE3e+qb47VmjaYkrBOjbO2NARX53gacVgBGUR+aMk=
Subject key identifier:   38:17:79:77:ED:9B:3B:7B:EB:CB:1C:42:50:17:76:72:3F:F6:EF:5A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D80906F7AE1F9CADD70541DB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/77f5eca2-970a-3a15-b48b-b127a9f34795.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.49.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:80:90:6f:7a:e1:f9:ca:dd:70:54:1d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=e96153b7-1e88-4aa3-b66a-016381ca8613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:49:f4:c2:0e:f2:5e:c1:b2:ea:23:8b:67:
                    e0:7c:15:f5:98:98:9f:39:2a:0d:a1:63:7f:21:31:
                    f6:72:84:fd:45:24:bc:02:92:6a:f4:21:3a:34:7f:
                    02:b9:81:b6:bc:fe:4f:3e:58:7d:51:84:5f:a0:e8:
                    1b:b5:37:4d:fb:5c:4c:94:61:31:ca:1b:43:26:8d:
                    39:20:e5:6a:f6:84:ce:88:9a:2c:06:fd:92:58:35:
                    0e:42:ec:85:27:42:62:60:5f:9c:94:99:2d:35:d0:
                    e8:e6:5a:21:87:1f:e4:77:77:70:16:64:05:ad:9d:
                    df:04:d2:0b:cc:5c:17:79:40:85:b4:88:b0:11:6e:
                    5d:29:8c:21:1f:22:78:cc:a7:ea:9c:fb:10:af:aa:
                    10:80:8d:3e:82:dd:ba:9a:d8:61:bf:ae:9f:ae:5b:
                    c7:de:48:86:c4:0b:94:e8:f1:b2:5a:31:95:0a:4f:
                    b8:0f:91:76:f9:25:c2:b9:7d:a0:a8:1e:cc:e2:0f:
                    ee:20:df:1d:41:26:e6:43:37:ab:1b:ed:6e:ba:59:
                    78:bc:23:4e:10:5d:4e:d3:b6:c0:21:5b:db:e0:41:
                    78:8a:e7:3e:08:de:97:99:cb:6e:ff:a5:23:62:95:
                    a3:48:75:6f:62:08:7f:5d:16:83:c0:b4:52:7f:16:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:17:79:77:ED:9B:3B:7B:EB:CB:1C:42:50:17:76:72:3F:F6:EF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/77f5eca2-970a-3a15-b48b-b127a9f34795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:12:53:61:d0:d3:06:aa:74:2c:ff:01:31:59:0f:45:7c:43:
         16:76:a9:db:b3:2b:f5:5e:fb:f7:07:52:a2:88:88:98:1e:52:
         16:fa:7b:14:1c:3d:9e:e4:a3:d3:dd:12:07:33:62:e3:60:e1:
         e5:44:9b:28:20:eb:2e:42:44:66:b3:fc:18:8a:fb:bc:01:aa:
         c1:37:64:a2:06:fa:61:a0:b8:e7:5c:72:c1:04:3c:ce:43:ad:
         f8:50:17:40:fe:8c:48:ae:9e:4e:42:c9:d8:a5:43:5b:3b:dd:
         9c:c0:f1:51:1f:42:ef:b0:ef:5b:f1:ea:64:e8:f2:3e:bf:e3:
         2a:48:4a:c7:48:87:a7:47:54:77:53:e2:20:7f:3a:bc:30:dd:
         be:48:40:a6:26:2b:9c:7d:dd:00:da:e9:4a:40:d4:8f:48:bc:
         74:7e:f2:1c:f1:9b:d2:f9:d7:da:81:af:90:60:1d:95:f8:bc:
         96:0a:e9:41:d5:d3:c0:52:a6:76:a1:c3:36:ab:2c:27:ff:38:
         07:b7:7f:48:4b:a3:4e:95:1a:d1:9c:a9:5c:81:25:63:a9:f9:
         18:fd:d0:b3:aa:c7:fb:ff:25:c2:10:59:6d:e2:46:27:a4:3d:
         94:2e:3b:eb:ab:ce:18:23:5d:38:e1:92:b7:2c:30:6c:08:9a:
         51:46:9a:92
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2AkG964fnK3XBUHbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZTk2MTUzYjctMWU4OC00YWEzLWI2NmEtMDE2MzgxY2E4NjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQBJ9MIO8l7Bsuoji2fgfBX1mJifOSoNoWN/
ITH2coT9RSS8ApJq9CE6NH8CuYG2vP5PPlh9UYRfoOgbtTdN+1xMlGExyhtDJo05
IOVq9oTOiJosBv2SWDUOQuyFJ0JiYF+clJktNdDo5lohhx/kd3dwFmQFrZ3fBNIL
zFwXeUCFtIiwEW5dKYwhHyJ4zKfqnPsQr6oQgI0+gt26mthhv66frlvH3kiGxAuU
6PGyWjGVCk+4D5F2+SXCuX2gqB7M4g/uIN8dQSbmQzerG+1uull4vCNOEF1O07bA
IVvb4EF4iuc+CN6Xmctu/6UjYpWjSHVvYgh/XRaDwLRSfxaKGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDgXeXftmzt768scQlAXdnI/9u9aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNzdmNWVjYTItOTcwYS0z
YTE1LWI0OGItYjEyN2E5ZjM0Nzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEjEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWhJTYdDTBqp0LP8BMVkPRXxDFnap27Mr9V779wdSooiImB5SFvp7FBw9
nuSj090SBzNi42Dh5USbKCDrLkJEZrP8GIr7vAGqwTdkogb6YaC451xywQQ8zkOt
+FAXQP6MSK6eTkLJ2KVDWzvdnMDxUR9C77DvW/HqZOjyPr/jKkhKx0iHp0dUd1Pi
IH86vDDdvkhApiYrnH3dANrpSkDUj0i8dH7yHPGb0vnX2oGvkGAdlfi8lgrpQdXT
wFKmdqHDNqssJ/84B7d/SEujTpUa0ZypXIElY6n5GP3Qs6rH+/8lwhBZbeJGJ6Q9
lC4766vOGCNdOOGStywwbAiaUUaakg==
-----END CERTIFICATE-----