This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8160945c-e6e5-362d-8255-806219c1e03c.roa
File:                     8160945c-e6e5-362d-8255-806219c1e03c.roa (raw, json)
Hash identifier:          sTMH7IUL2OeyueDtZZC37LVeWyUezF515ImhXgA6De4=
Subject key identifier:   47:EB:A8:36:F4:63:B1:A2:2A:E7:85:23:B8:A4:71:29:54:5B:B8:FA
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D8089077667311BB1FD00A580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8160945c-e6e5-362d-8255-806219c1e03c.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.70.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:80:89:07:76:67:31:1b:b1:fd:00:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=06f04dde-7841-4f78-afdf-c849dd418e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:c6:40:41:2c:52:99:d3:06:99:35:3b:83:
                    96:ec:db:c4:55:95:0f:e6:42:2e:01:9f:ed:fc:0c:
                    94:cb:0b:70:c6:f6:5c:8e:8a:44:44:5a:50:85:3b:
                    26:69:e3:ff:b4:a8:6b:7f:83:d0:9f:e1:48:85:e0:
                    64:5a:dc:ec:f7:42:55:92:bf:1d:8f:34:69:15:f5:
                    64:6e:08:d5:22:a9:b0:40:0a:c4:1a:bc:55:75:ff:
                    6f:63:a8:59:99:60:33:21:a2:a7:37:02:23:15:99:
                    40:a3:a9:47:9a:a5:71:ce:fa:3a:0b:b3:6e:10:39:
                    92:80:d7:b8:af:2e:ef:64:0b:3f:04:28:73:a2:34:
                    e2:27:1d:a3:a4:ea:74:da:10:fe:01:af:36:b9:18:
                    dd:f3:1f:08:1a:2f:75:d4:58:85:d7:64:02:52:5e:
                    21:e0:62:c8:b8:e8:e2:13:b4:d6:0f:e6:21:a7:b6:
                    e5:aa:37:37:85:29:b3:f6:b5:a6:da:a7:8d:09:69:
                    f5:08:59:a3:89:20:2e:53:ed:97:c1:dc:4f:94:75:
                    82:f2:69:62:c3:5f:2f:71:58:93:41:15:18:9f:66:
                    da:9b:37:2b:0f:2c:1f:73:2d:d4:b4:3f:1e:26:99:
                    10:b9:1d:88:f6:5e:8e:14:41:27:01:85:ea:90:65:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EB:A8:36:F4:63:B1:A2:2A:E7:85:23:B8:A4:71:29:54:5B:B8:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8160945c-e6e5-362d-8255-806219c1e03c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.70.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4b:b3:b7:55:12:4f:62:cb:04:2e:2b:ed:09:bf:f0:5c:31:
         b7:45:d6:d5:5c:f1:81:57:1b:f8:52:69:82:16:ab:65:60:38:
         4a:0e:ff:26:e2:73:a5:2c:25:a6:08:79:9d:12:84:e1:a3:d6:
         e3:ba:87:75:74:06:1f:2d:67:65:8c:fa:df:e0:27:84:1b:2b:
         62:ad:22:7b:60:ad:05:10:bf:c2:76:71:23:48:96:92:f7:d1:
         3f:04:f9:42:73:e2:89:cd:c2:b2:50:aa:8f:91:30:bd:d7:dd:
         f7:fe:32:58:6c:d7:d5:50:59:ce:ac:a7:d6:ca:2e:b0:2e:87:
         18:18:38:cb:6a:24:7b:9e:fe:6f:c5:39:25:a4:fe:f8:99:8f:
         ac:81:e8:e7:99:38:da:72:3d:40:b8:94:d8:bc:e0:35:10:33:
         97:2e:3d:db:43:3f:52:1a:90:37:74:43:76:bf:77:b2:f1:b4:
         40:8c:ad:01:a7:52:58:ec:c5:64:af:a4:d5:bf:ee:20:cf:f7:
         7c:c2:59:d7:85:c3:02:aa:f1:24:73:2c:c1:9b:38:0a:1e:36:
         ff:21:7d:95:d5:d3:bc:d9:b3:d9:89:c0:9f:2c:e0:27:f0:4b:
         9c:47:a1:5f:8b:07:e1:08:8e:13:ee:23:21:9c:68:ea:d9:7b:
         f0:01:db:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----