This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/785add4c-32b5-36db-9d7b-b97be458d898.roa
File:                     785add4c-32b5-36db-9d7b-b97be458d898.roa (raw, json)
Hash identifier:          3uw0F/GkGvGCFe4o4DTjhSVZDLQ1jwJLgYDPoJQCFew=
Subject key identifier:   F4:71:DE:1E:C4:6D:E7:F7:FD:6C:DF:2D:CF:F6:D2:F2:AA:95:86:C0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F80E04BC90C1DF1E391A3B780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/785add4c-32b5-36db-9d7b-b97be458d898.roa
Signing time:             Fri 07 Oct 2022 12:00:00 +0000
ROA not before:           Fri 07 Oct 2022 12:00:00 +0000
ROA not after:            Sat 12 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        52.64.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:80:e0:4b:c9:0c:1d:f1:e3:91:a3:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  7 12:00:00 2022 GMT
            Not After : Nov 12 05:00:00 2022 GMT
        Subject: CN=0d06826d-c4d7-4043-b7a9-ccdc4b3cada2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:d6:53:bb:81:df:32:c9:73:3f:33:d3:38:76:
                    c7:6e:e1:e2:e8:f9:4a:ca:95:75:47:3a:3a:bd:39:
                    7c:7a:b6:44:58:b1:e1:83:dd:21:84:b4:52:23:48:
                    20:a8:3f:8d:e2:cd:02:c9:36:e3:1c:7a:62:c4:ba:
                    7e:88:ce:0b:b1:c7:a2:59:2f:25:0a:ee:ca:15:4c:
                    f2:23:0a:ff:80:68:9d:d2:67:35:40:5b:cc:9a:11:
                    ca:dd:e6:b2:9f:3f:61:e3:5d:eb:a5:d2:8e:e1:e2:
                    fd:d6:5b:0d:e3:aa:7a:67:d4:07:cb:11:61:9a:28:
                    41:d2:ca:10:10:7f:f2:0d:fe:e6:e0:69:c1:85:d1:
                    d6:32:cf:3e:11:a7:f8:b0:f2:59:41:34:98:3d:1f:
                    3d:5b:83:fa:74:62:45:b2:eb:87:c7:92:7d:9c:bb:
                    a2:d9:ea:eb:f3:e5:ad:30:b6:85:ed:fb:57:36:eb:
                    dc:99:a2:b8:1a:0f:e9:74:02:4c:c3:f0:4e:3f:55:
                    58:12:0c:32:2c:6a:32:1e:55:f9:fd:8d:b8:8f:84:
                    0f:12:96:22:9d:33:ba:fa:7e:05:62:9c:cd:6e:41:
                    bb:ee:e3:1e:85:e1:07:8f:f6:fa:f3:70:f7:2c:be:
                    66:79:4e:f0:5a:8d:46:65:6e:be:8e:af:05:2e:6a:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:71:DE:1E:C4:6D:E7:F7:FD:6C:DF:2D:CF:F6:D2:F2:AA:95:86:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/785add4c-32b5-36db-9d7b-b97be458d898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.64.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6e:16:82:58:31:fe:e9:04:2e:8a:b1:54:35:a3:55:e3:28:
         56:a0:24:45:63:3f:e3:da:2f:36:6d:4b:57:42:38:aa:82:17:
         65:3a:a4:bd:84:5e:5a:1c:81:d4:c1:34:42:ac:4b:0e:00:c0:
         fa:b4:85:8f:76:6c:96:07:6d:37:de:e5:f1:4f:ea:68:ba:bf:
         00:c0:e3:d3:48:6a:80:43:1b:36:17:00:ed:19:55:93:1c:27:
         f8:9a:60:be:09:97:c8:38:27:30:97:4a:0f:3a:e9:f8:89:69:
         d7:10:8e:e3:61:5f:d7:ba:31:12:d3:1d:18:71:15:64:cf:40:
         87:97:82:4e:d4:47:16:fd:14:1e:11:21:a7:68:99:31:93:e7:
         ca:61:52:bf:6d:28:83:7b:5e:a0:7e:d8:8d:8c:3b:59:8a:23:
         ae:a9:c1:34:be:f7:b1:c1:d4:1f:d6:b0:0c:26:1f:03:f4:d6:
         82:38:5b:94:40:cc:21:47:57:f7:9a:4b:e4:2b:34:17:96:67:
         cd:31:92:8d:34:02:fc:7a:a7:76:36:86:a8:1e:80:38:e9:4f:
         29:7f:35:8c:14:31:9d:98:ed:8d:10:07:b9:e2:87:53:fc:dd:
         aa:a8:55:cb:26:a1:21:26:8c:92:a5:ff:5c:37:27:52:39:98:
         71:3d:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----