This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82b3eb59-9684-3631-8535-cc1b2a6c1115.roa
File:                     82b3eb59-9684-3631-8535-cc1b2a6c1115.roa (raw, json)
Hash identifier:          sva8rZgp1mKvIJ7NC+ubtKlW5rA8CU4vrYzk1i6hzC4=
Subject key identifier:   06:B8:A2:56:65:34:E1:57:66:C2:C0:CB:B4:CE:D7:25:D7:7A:80:1F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FA7C969639F76B375FB817F20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82b3eb59-9684-3631-8535-cc1b2a6c1115.roa
Signing time:             Fri 21 Oct 2022 12:00:00 +0000
ROA not before:           Fri 21 Oct 2022 12:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        54.144.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:a7:c9:69:63:9f:76:b3:75:fb:81:7f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 12:00:00 2022 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=4fac3fab-a048-4fb6-82ab-4b3406c04ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4b:f9:ee:6c:1e:47:60:43:0d:09:5d:2f:d1:
                    17:c6:4e:62:f8:b4:05:47:c2:40:a6:33:dc:95:af:
                    23:1e:45:01:dc:75:86:4d:1c:97:2d:c7:b3:55:84:
                    d0:18:92:e6:35:33:1b:1c:84:d9:be:b8:ce:e7:c1:
                    70:38:a4:02:b1:7e:2f:97:13:ff:32:d1:47:70:fc:
                    a3:84:86:ac:ee:45:21:4b:85:8d:97:dc:fd:5a:9f:
                    d1:6d:0d:f7:1a:47:e1:48:75:02:2f:46:92:c9:18:
                    0c:ec:fe:e4:7e:1f:65:52:4a:2f:2d:50:f5:b2:64:
                    3b:22:91:7a:5a:ca:8c:c2:fb:98:3d:43:14:72:9d:
                    58:08:00:42:2d:fb:57:3b:63:f1:6a:0b:d2:88:f0:
                    03:15:f5:8c:bf:a7:50:6a:81:ed:26:1a:ed:2d:55:
                    bb:5a:39:e2:2c:10:a9:af:02:6a:d6:d8:7b:a6:b3:
                    c3:1e:89:bb:ff:cc:22:a2:f5:ae:dc:0e:c8:7e:81:
                    d0:5f:65:a9:a7:4e:fa:1e:bc:08:0e:f0:ca:09:9e:
                    55:04:74:a9:8c:2b:ae:c7:4a:f1:10:b8:fa:a3:e4:
                    69:1f:2c:d3:04:ee:54:70:25:db:b1:ec:a8:82:2d:
                    21:bd:eb:7f:c4:ce:7b:2f:e2:c8:44:6b:90:61:4c:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B8:A2:56:65:34:E1:57:66:C2:C0:CB:B4:CE:D7:25:D7:7A:80:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/82b3eb59-9684-3631-8535-cc1b2a6c1115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.144.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3a:8b:8e:32:fa:31:2f:51:77:ef:24:40:53:53:ac:2a:3b:
         30:c9:f9:7b:2c:34:dd:42:c3:e0:08:6d:25:f9:98:91:9e:29:
         07:8d:79:b8:cf:07:93:30:94:d1:6a:82:9a:18:88:01:95:e8:
         c9:38:10:da:a0:52:a7:d7:6d:7f:8d:29:a5:1f:32:26:1b:a9:
         3b:a6:bc:c3:22:9b:e1:f3:c7:7b:11:59:c0:a7:ff:68:54:72:
         bb:41:5e:25:c9:c5:10:77:2a:bc:af:4a:05:45:59:2c:37:27:
         f6:19:8e:2c:f5:b1:3f:3c:5a:df:af:f7:db:d3:6a:e9:06:d9:
         84:90:5f:72:5a:8a:69:51:ca:43:dc:8f:47:a7:0a:be:b1:30:
         31:10:9a:54:5f:39:3b:28:6d:08:4f:f6:b9:81:f3:d9:83:bf:
         64:a5:ab:2f:01:1a:6f:e0:1e:1b:9d:1d:0f:72:ce:99:78:83:
         e5:af:8d:fa:60:0c:51:12:fd:db:59:94:ab:97:89:be:65:ec:
         fb:37:f1:db:72:e5:fd:a7:80:fe:3d:16:97:24:ed:2e:f7:fe:
         38:00:83:ed:9d:e3:65:6b:4b:a5:b0:c7:2d:0b:fe:70:4c:6f:
         bb:49:69:e6:62:a8:a9:53:b5:e1:4b:e1:ab:ff:5b:61:56:9f:
         d8:32:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:50:59 2025 by rpki-client