This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fab6b3a-e467-32dc-b067-1f7128c55ecb.roa
File:                     7fab6b3a-e467-32dc-b067-1f7128c55ecb.roa (raw, json)
Hash identifier:          7vkOnJz7GnwrT0Dr1qvyM9U8p9MT3ybZaAK7oqN2rWU=
Subject key identifier:   CD:4B:24:53:A6:B1:24:6D:C2:FA:EB:7A:22:FA:0E:7D:FF:CF:A5:38
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F7D098D14C5BDC6C444F95E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fab6b3a-e467-32dc-b067-1f7128c55ecb.roa
Signing time:             Thu 06 Oct 2022 12:00:00 +0000
ROA not before:           Thu 06 Oct 2022 12:00:00 +0000
ROA not after:            Fri 11 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        52.222.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:7d:09:8d:14:c5:bd:c6:c4:44:f9:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  6 12:00:00 2022 GMT
            Not After : Nov 11 05:00:00 2022 GMT
        Subject: CN=e87e0c51-8c2e-4f63-8f71-8e2f38cc15a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:ab:55:64:5e:2c:30:8c:2b:0d:63:84:36:
                    c5:d4:e9:7a:00:fc:31:87:39:4c:02:aa:14:b0:f0:
                    85:8c:a1:ff:0c:58:03:3b:83:02:98:6f:13:f4:f7:
                    c2:16:77:8e:f3:ee:28:b7:75:d0:70:18:c5:b3:ff:
                    48:72:99:39:7f:0c:f7:ae:67:ea:f6:d3:a3:a6:ce:
                    81:bd:13:65:2a:61:90:bd:92:16:8d:94:79:0f:1a:
                    9d:0e:21:42:0e:1b:56:57:bf:cc:12:78:5f:9e:fc:
                    6c:d0:b8:d8:d7:ce:54:b6:b3:d1:b6:02:00:6f:73:
                    32:d9:57:9a:ca:8e:49:1b:06:c9:31:b5:a9:a6:3e:
                    a8:0b:85:2a:7e:69:79:49:f1:73:20:66:9d:16:80:
                    77:3b:47:bb:30:94:6f:5a:1a:2e:e2:dd:42:ab:3a:
                    fa:94:53:a0:73:e5:f8:5a:d9:5c:63:db:79:65:f6:
                    bf:fd:3c:a0:18:f8:85:90:40:e2:c5:1b:a8:37:3f:
                    9f:40:ca:41:e7:02:e7:56:d1:8b:d1:56:f2:44:97:
                    52:5b:78:83:c2:58:0b:df:e6:3e:63:33:8b:22:9c:
                    8f:00:6c:80:a5:3d:83:ba:0a:85:a7:60:c2:51:2f:
                    04:a7:fb:03:0c:a8:3d:32:d6:af:43:b1:67:c6:64:
                    c9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4B:24:53:A6:B1:24:6D:C2:FA:EB:7A:22:FA:0E:7D:FF:CF:A5:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7fab6b3a-e467-32dc-b067-1f7128c55ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.222.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:15:f4:87:20:19:76:bd:67:3a:42:9c:d6:12:84:a3:c8:71:
         fc:d0:c4:1f:9f:4c:7c:b1:98:bf:50:29:a5:cb:f8:4d:e1:44:
         24:d5:b4:be:eb:b9:ca:89:dd:cc:3a:a9:da:7e:94:f0:74:cc:
         3a:f5:f7:32:6d:d8:59:b2:aa:31:5c:ed:d6:5a:64:56:1d:fe:
         71:40:8c:fc:93:35:a0:57:4d:f6:03:60:1f:7c:c9:ef:0c:ec:
         15:e4:54:3b:ec:c6:c4:2d:a3:9c:37:32:17:25:cb:13:b0:9f:
         55:a0:cd:d3:99:08:45:04:a4:01:5a:82:90:65:60:2c:96:3c:
         03:83:5c:d0:84:2e:94:ef:d5:dd:17:32:9f:27:18:ae:74:10:
         b5:f9:88:ab:9d:d8:4b:31:b3:72:f7:d2:31:e9:ad:30:70:c7:
         bb:39:88:f2:66:d5:40:2e:89:39:de:b3:d3:a0:e9:ea:11:05:
         4f:04:69:20:c8:b4:8a:3b:d5:a2:d9:1f:6d:3a:ea:b0:ec:a1:
         f2:bf:30:c8:d3:17:9f:64:d5:4a:5f:2b:0a:2c:a5:3d:5e:2e:
         2c:26:66:ed:c4:bc:06:5a:e7:ae:b1:e0:34:17:7a:80:48:0e:
         69:f5:ed:0c:c8:5d:da:77:0a:44:09:cb:5e:22:e5:33:e6:9f:
         45:b4:29:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----