This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/824f09e0-31f4-3b9e-a38f-235314be8168.roa
File:                     824f09e0-31f4-3b9e-a38f-235314be8168.roa (raw, json)
Hash identifier:          iV2TeIR6SUteHRSPg1fSMIvZLKW9kRxXb31Yt6+W/F4=
Subject key identifier:   6D:24:89:F0:F7:09:AE:C8:85:91:9B:99:7B:5D:45:6A:29:D9:0B:DD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EBDB01A6DFA8B909FD834D740
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/824f09e0-31f4-3b9e-a38f-235314be8168.roa
Signing time:             Fri 29 Jul 2022 12:00:00 +0000
ROA not before:           Fri 29 Jul 2022 12:00:00 +0000
ROA not after:            Sat 03 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.220.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:bd:b0:1a:6d:fa:8b:90:9f:d8:34:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 29 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2022 GMT
        Subject: CN=390060d4-e8d2-4310-b6c2-3a60e305e60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:53:80:a6:22:ff:75:8b:97:03:fc:83:20:
                    96:ed:0f:1b:7e:34:cf:50:1a:47:c6:5a:49:53:d3:
                    85:0b:b9:8c:db:ea:34:c1:f2:b0:eb:df:75:6a:5d:
                    70:01:cb:34:5b:c4:a2:87:d1:1b:fc:4b:ae:e3:60:
                    ff:f4:d0:ab:85:64:c6:00:bb:d6:f4:7a:7c:48:e1:
                    ea:c5:e9:81:ab:aa:b9:75:04:b2:4b:bc:55:ea:63:
                    a2:2c:28:76:06:64:de:a6:6c:9a:9f:6c:30:88:91:
                    d5:18:06:d5:d6:22:79:99:2b:b7:32:a4:24:10:ab:
                    e1:3b:ab:b7:00:74:c0:d6:e2:58:2e:79:bf:e0:0a:
                    b2:3e:c9:cc:d3:99:8f:0d:bd:4d:bf:ee:d9:a8:2b:
                    f4:db:76:42:14:cf:f2:a7:4e:94:3b:40:6e:cf:90:
                    60:09:70:30:84:f4:b6:70:88:9d:51:22:26:16:61:
                    e1:0f:5e:dc:d8:2b:53:bc:93:c2:6d:cb:05:b6:f1:
                    8a:8e:ef:af:2b:b6:57:da:2e:21:d2:4f:ae:39:41:
                    fe:40:5e:f6:d7:82:a6:0d:fd:12:23:46:86:21:3d:
                    c7:b7:6d:39:e7:f4:18:ff:d4:a1:c2:bd:9e:ec:bd:
                    91:1b:0f:79:4c:e3:0a:09:7c:9b:bf:9c:8d:c8:19:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:24:89:F0:F7:09:AE:C8:85:91:9B:99:7B:5D:45:6A:29:D9:0B:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/824f09e0-31f4-3b9e-a38f-235314be8168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.220.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:62:34:2f:79:4b:d5:67:a2:3b:21:86:7e:0a:50:94:d2:32:
         df:79:a3:95:5c:d6:fe:57:11:1b:17:38:d2:15:09:c0:79:07:
         3c:d9:aa:96:a0:ed:bb:12:ba:f8:a7:2a:a6:86:20:9e:2b:14:
         32:f4:9c:90:27:57:c0:fc:07:e8:5b:13:16:be:40:2d:30:68:
         6d:32:e2:d6:ab:df:c4:c5:e4:48:47:1c:c0:8a:7f:e4:3c:15:
         c7:cf:e1:20:7f:41:cc:aa:59:aa:4b:88:5d:c0:e4:01:9b:ad:
         ea:0f:67:3b:93:32:0b:45:63:42:1c:2f:65:98:3d:1c:94:c2:
         71:ea:a0:7d:ee:ff:0d:45:3e:3d:41:29:8d:7a:08:d3:0b:f9:
         54:97:14:70:c9:81:e1:7b:db:34:9f:7c:40:3d:7d:1e:04:9a:
         f8:5c:ef:85:1d:71:f2:f1:c5:1a:b8:ea:ed:cd:be:cd:cb:b2:
         ea:1c:a0:92:50:68:14:32:17:f6:72:06:99:2d:88:91:a4:a2:
         de:9e:a8:52:b7:54:8a:6a:81:bb:9f:b1:06:46:39:03:d9:7f:
         d6:70:f9:b8:82:0b:f3:16:f5:17:db:37:5d:0a:a1:f7:bf:7f:
         8f:23:70:35:22:75:de:f1:81:f2:a6:41:ac:95:ee:b2:47:97:
         d5:c4:8d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----