This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8312e2c7-1188-3e4e-99b0-abd193b5b844.roa
File:                     8312e2c7-1188-3e4e-99b0-abd193b5b844.roa (raw, json)
Hash identifier:          Kvfb4FAbohwpxDn7VudeTGrsR+Ij14dKa8bPU3K9c7g=
Subject key identifier:   CF:54:DD:CB:92:B6:DF:2A:44:8E:EB:B6:0A:FB:C0:36:5E:9A:E4:A4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CBD1D70B1C18ABE6E1CC17780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8312e2c7-1188-3e4e-99b0-abd193b5b844.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.111.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:1d:70:b1:c1:8a:be:6e:1c:c1:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=269555ad-2811-474b-8a10-e859567ab776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:a3:89:49:aa:f6:b4:a8:69:73:f8:9c:65:
                    95:25:b4:0c:0d:72:fd:a8:1b:1a:26:65:f7:b3:1f:
                    cc:5a:08:32:a7:68:82:df:fb:3b:f1:7a:90:21:d7:
                    2d:97:f9:08:dd:28:9d:72:04:d5:be:6a:8d:e0:e2:
                    8e:7c:bf:3b:1b:37:b9:c9:e3:d8:e8:02:8d:19:21:
                    dc:c2:0d:ce:1b:38:87:fc:72:89:9f:0b:9f:9d:9f:
                    ab:b8:2e:c1:d4:36:47:43:83:c7:2b:90:f9:0c:2f:
                    60:08:17:e0:d4:ca:bf:4e:8a:a9:ef:d8:7b:0f:36:
                    c0:f9:cd:4f:c0:d5:23:82:23:10:92:05:f8:c5:22:
                    4b:87:30:a0:59:98:7a:92:b3:d6:26:ab:ce:3a:21:
                    31:7a:07:48:14:1a:ba:8a:37:3e:54:8e:b4:f5:b4:
                    fc:33:5c:00:e8:c3:80:3f:db:10:25:b5:69:e2:89:
                    65:6f:9a:85:a1:ee:5e:26:00:f5:64:a9:da:65:94:
                    c6:2f:2a:e8:0e:1c:0a:32:0b:8b:06:ce:20:a8:67:
                    7c:89:14:e0:30:b4:c1:3e:43:64:7f:9f:5b:da:b3:
                    46:90:22:3e:4b:f7:64:40:1c:cd:ee:2a:92:d7:7f:
                    f4:6f:7d:23:a0:64:7d:a3:83:ce:f2:fd:43:ac:a9:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:54:DD:CB:92:B6:DF:2A:44:8E:EB:B6:0A:FB:C0:36:5E:9A:E4:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8312e2c7-1188-3e4e-99b0-abd193b5b844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.111.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:02:a2:62:d1:50:a0:50:e4:23:2f:6e:6d:92:34:17:47:
         8f:5f:8f:7b:d6:c5:02:3d:7e:fa:31:8d:56:b1:ca:51:17:21:
         f7:ec:b8:5c:19:dd:a8:05:e2:b7:36:d3:3c:a0:4f:2b:d5:e5:
         89:da:ef:c2:e0:5a:68:0e:c5:53:d7:71:e8:68:91:08:6e:4a:
         8b:d0:f3:c8:a0:92:4b:bd:da:06:13:53:f0:12:71:b9:b1:cc:
         39:75:8a:c8:a5:96:3a:0b:19:92:29:c4:ea:d5:3e:92:e1:70:
         f5:d4:2e:b8:6a:95:02:fa:6a:37:94:e9:ff:fd:a1:ad:e4:00:
         f4:7c:5b:af:b8:b4:6b:56:35:1c:7b:da:3f:92:db:7c:29:24:
         a1:fb:7a:95:f5:9c:41:9b:e1:31:63:1e:59:02:db:69:6e:7e:
         7a:d4:c6:ad:c6:4e:05:ae:35:93:86:da:79:29:c5:ee:15:80:
         e9:4e:37:89:e6:a5:a0:4b:54:db:45:8b:0b:e4:76:3b:d8:10:
         9c:f5:07:e6:11:c2:86:67:3a:8d:ab:de:5d:40:44:98:c3:9f:
         e9:74:bc:e1:95:fb:ae:f3:ff:a2:95:83:fd:31:b7:e0:a9:20:
         98:5c:2a:23:ee:fb:c5:ab:e3:7a:0f:74:f5:61:25:0b:88:5d:
         70:ea:43:ae
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy9HXCxwYq+bhzBd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MjY5NTU1YWQtMjgxMS00NzRiLThhMTAtZTg1OTU2N2FiNzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8SjiUmq9rSoaXP4nGWVJbQMDXL9qBsaJmX3
sx/MWggyp2iC3/s78XqQIdctl/kI3SidcgTVvmqN4OKOfL87Gze5yePY6AKNGSHc
wg3OGziH/HKJnwufnZ+ruC7B1DZHQ4PHK5D5DC9gCBfg1Mq/Toqp79h7DzbA+c1P
wNUjgiMQkgX4xSJLhzCgWZh6krPWJqvOOiExegdIFBq6ijc+VI609bT8M1wA6MOA
P9sQJbVp4ollb5qFoe5eJgD1ZKnaZZTGLyroDhwKMguLBs4gqGd8iRTgMLTBPkNk
f59b2rNGkCI+S/dkQBzN7iqS13/0b30joGR9o4PO8v1DrKnuywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM9U3cuStt8qRI7rtgr7wDZemuSkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODMxMmUyYzctMTE4OC0z
ZTRlLTk5YjAtYWJkMTkzYjViODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEm8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAV/AComLRUKBQ5CMvbm2SNBdHj1+Pe9bFAj1++jGNVrHKURch9+y4XBnd
qAXitzbTPKBPK9XlidrvwuBaaA7FU9dx6GiRCG5Ki9DzyKCSS73aBhNT8BJxubHM
OXWKyKWWOgsZkinE6tU+kuFw9dQuuGqVAvpqN5Tp//2hreQA9Hxbr7i0a1Y1HHva
P5LbfCkkoft6lfWcQZvhMWMeWQLbaW5+etTGrcZOBa41k4baeSnF7hWA6U43ieal
oEtU20WLC+R2O9gQnPUH5hHChmc6javeXUBEmMOf6XS84ZX7rvP/opWD/TG34Kkg
mFwqI+77xavjeg909WElC4hdcOpDrg==
-----END CERTIFICATE-----