This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ed8be3e-9ccd-3746-b6d1-f29968cde8eb.roa
File:                     7ed8be3e-9ccd-3746-b6d1-f29968cde8eb.roa (raw, json)
Hash identifier:          LkIiOrWEGkil+4oQiUKnRUJfshfpNLIz2Qz8KYOhcdc=
Subject key identifier:   D9:D6:66:CB:2A:73:35:20:A1:69:33:41:54:FB:7E:2D:D6:E1:1E:D6
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FF20ED08E5A336F56CE160C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ed8be3e-9ccd-3746-b6d1-f29968cde8eb.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Fri 23 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.140.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f2:0e:d0:8e:5a:33:6f:56:ce:16:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Dec 23 05:00:00 2022 GMT
        Subject: CN=69a3cb01-f8da-4c6d-af91-ba7375c587c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:4a:6e:43:4a:46:46:57:b2:03:1a:7c:81:
                    3a:54:d4:d3:6a:47:79:96:42:66:f3:cd:61:89:8f:
                    d6:ef:e3:1c:f2:8b:56:88:0b:0b:25:2a:23:af:4f:
                    22:01:f0:d3:db:af:b6:12:31:e0:a8:ab:51:9a:6f:
                    12:e1:cc:76:14:fc:b5:77:5d:4a:1b:17:62:3e:55:
                    68:91:4e:b8:28:24:69:9b:4b:b4:cf:91:3a:24:aa:
                    23:38:90:24:03:3d:82:10:a9:cb:2d:34:cd:85:3a:
                    6f:fe:b0:a1:5b:87:f4:18:a3:b3:75:a2:29:c4:ae:
                    f8:7a:0e:c8:97:2a:ff:5a:c6:a3:4d:e9:ec:b7:7b:
                    ef:dc:ff:fb:ac:c0:b4:4c:8d:7f:65:d8:0c:99:70:
                    12:20:e4:69:ee:99:27:9f:94:0b:5f:18:b4:3a:51:
                    26:d7:fd:47:17:91:51:0a:b3:b2:69:43:cd:f8:ef:
                    73:b1:0c:5c:f9:21:db:34:62:5d:a9:3f:60:07:71:
                    d4:68:81:1f:ed:b8:ec:96:2b:10:9c:ff:8b:0a:ae:
                    e7:f2:68:97:94:81:d0:0f:42:3f:b3:39:2b:51:08:
                    85:53:2f:6a:e5:ba:9b:b3:33:8e:4c:18:35:b5:0c:
                    e2:b8:ed:1a:d9:e1:4e:89:e9:c0:f7:cc:2c:7f:ed:
                    5a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D6:66:CB:2A:73:35:20:A1:69:33:41:54:FB:7E:2D:D6:E1:1E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7ed8be3e-9ccd-3746-b6d1-f29968cde8eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.140.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:96:e5:37:15:a7:09:f7:3b:ab:d7:2d:00:a8:04:6a:e1:bd:
         c9:74:44:76:cd:da:95:17:9a:68:ca:66:13:67:e8:d9:51:f4:
         9d:54:82:ed:03:79:f5:b7:72:0c:d2:31:c4:5b:54:32:e8:6c:
         7a:53:46:8f:60:18:8d:bf:7e:69:d3:91:94:b8:c0:88:dc:4a:
         18:6e:57:7b:6c:8c:a0:70:8b:90:9d:47:2c:ec:a5:19:71:3e:
         f0:17:fe:1a:b7:d5:cc:4b:92:af:be:7d:5c:91:15:8f:0a:97:
         35:1d:80:db:ed:5c:a4:87:b9:93:3e:41:26:19:c2:22:9a:41:
         40:52:0c:df:69:d3:06:c8:e5:f5:9a:60:dd:9c:d0:55:72:cc:
         23:03:c9:a7:51:ac:f6:9d:e8:4d:a8:a6:fb:a8:57:53:7f:c6:
         cc:40:99:76:76:79:f3:94:b9:b8:97:eb:f8:29:c9:af:2a:b3:
         7a:9c:6f:3a:2a:dd:41:e0:ae:af:6f:48:ee:c9:68:a5:9d:91:
         51:aa:67:cd:3e:95:7b:17:b9:95:eb:67:20:c3:c8:d5:06:36:
         ee:fb:61:23:f4:1c:39:c1:7c:e0:be:49:f1:75:46:2a:48:b0:
         78:c7:4f:04:95:3e:ba:ef:e1:f3:56:a3:ed:03:e4:e6:f9:62:
         07:c9:1e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:25:27 2025 by rpki-client