This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8231eeb0-5dc2-336f-b301-9d5a8ec0c5be.roa
File:                     8231eeb0-5dc2-336f-b301-9d5a8ec0c5be.roa (raw, json)
Hash identifier:          wlkgMuNci1FWWg+maDKjBcLTJ1XyEQGsyfRrWtRpqS0=
Subject key identifier:   B6:69:C2:82:1D:5E:00:B8:6C:0D:61:F4:A8:5D:39:2B:F3:C9:60:1B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584016D85A8CB823D2D7DFB3A2E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8231eeb0-5dc2-336f-b301-9d5a8ec0c5be.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        15.253.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:16:d8:5a:8c:b8:23:d2:d7:df:b3:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=11fcb2ce-c462-475b-9cb6-5c9474f0cb03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:78:73:2b:e3:11:8e:15:46:47:9c:8e:6d:
                    3e:aa:2c:1b:87:ec:df:31:1c:9e:c7:ca:47:a6:6a:
                    96:73:f2:79:d1:a4:66:d8:47:eb:cd:bf:4c:c5:62:
                    d6:c8:6b:04:fc:40:49:0c:0a:24:54:77:04:78:e0:
                    9f:03:35:fb:77:44:8d:cc:9a:89:3d:2a:c0:08:e9:
                    39:a6:a6:15:29:67:60:08:b7:a9:9c:fd:e4:e5:cd:
                    c2:ee:06:c2:f6:68:9e:7e:dd:78:a9:1d:ba:74:d2:
                    09:56:25:b5:e7:6a:87:1b:b0:c7:e7:14:86:7a:47:
                    a9:32:fb:bd:43:90:91:d9:ca:10:c0:f0:26:1f:3f:
                    ff:81:e0:24:95:48:da:77:6f:b0:38:9a:6c:fd:24:
                    93:65:dc:1e:9d:67:67:06:0b:02:62:95:d0:de:44:
                    69:f2:94:f0:9c:1a:9f:b7:c8:39:56:25:05:26:cc:
                    53:1a:4e:01:55:1f:06:57:8a:5f:af:9c:9b:5f:87:
                    df:61:45:e0:57:88:84:0f:85:15:42:75:0e:ac:8f:
                    ba:b8:e2:ec:ab:9b:32:1e:bb:4d:5f:e7:8c:6a:04:
                    23:88:88:09:6d:ac:09:2e:b9:7f:f8:14:00:a7:64:
                    54:4f:d1:05:87:82:8b:ca:5b:43:5c:66:5b:a9:c4:
                    9c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:69:C2:82:1D:5E:00:B8:6C:0D:61:F4:A8:5D:39:2B:F3:C9:60:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8231eeb0-5dc2-336f-b301-9d5a8ec0c5be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:6c:05:cd:19:a9:fe:5d:8d:a7:32:7b:23:ad:53:e1:93:2b:
         f0:05:28:df:27:a3:b3:46:f1:54:0d:d8:9b:a0:e4:6e:91:8c:
         14:d8:b7:80:d9:e4:93:b8:e4:82:da:c1:82:1d:02:b7:38:c1:
         3b:69:b1:44:dd:4c:64:9f:bf:f8:65:2c:83:5d:c4:6e:cb:7a:
         ae:ae:7f:93:65:45:8d:c8:dc:fc:35:a5:a3:df:96:10:9c:98:
         af:c3:67:8c:ad:75:16:28:3c:ae:0b:8e:30:02:0e:eb:f0:06:
         7f:2a:52:ac:93:2c:d3:24:fa:64:ed:c3:9e:01:6f:cc:b6:c4:
         f1:29:6a:68:40:ad:8f:7a:55:7d:15:0a:f6:f3:d4:af:f8:65:
         a7:94:ce:6e:b7:8e:bc:4a:94:e8:58:26:af:02:e7:2a:ec:0f:
         a8:8c:b7:5d:c4:38:d3:62:d2:96:87:5e:b2:3c:2e:c9:4f:a3:
         58:d5:eb:33:a8:d9:2f:d8:eb:37:33:20:61:53:6c:e7:d1:9b:
         4c:86:02:95:86:52:03:cf:25:2f:80:ea:46:a4:70:ba:94:1d:
         0a:a1:b8:e7:f5:23:ef:0a:a2:ab:d6:58:22:f9:2c:56:73:c8:
         4c:11:6a:b2:ef:51:1f:b9:df:cf:ef:9e:99:12:b9:73:87:15:
         1e:da:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----