This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/907ccfac-b94e-313e-9776-8d7b822a3603.roa
File:                     907ccfac-b94e-313e-9776-8d7b822a3603.roa (raw, json)
Hash identifier:          xrtdELrC82VS16PQmKsSWFM+/sXbZOJCXqa44+oH9FU=
Subject key identifier:   3B:FB:87:A8:4E:C0:0D:F9:D5:8B:86:8E:EE:BC:D8:A8:8D:C8:A6:25
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F178BC8C3994379BCC40D0F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/907ccfac-b94e-313e-9776-8d7b822a3603.roa
Signing time:             Tue 30 Aug 2022 12:00:00 +0000
ROA not before:           Tue 30 Aug 2022 12:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        15.153.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:17:8b:c8:c3:99:43:79:bc:c4:0d:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 30 12:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=43fe0d43-472b-4f74-9615-a943d5c39162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:db:81:c8:e4:08:48:4e:63:cd:ef:88:52:
                    e4:b4:47:10:39:17:ce:f1:fd:7a:ad:04:33:f1:a0:
                    27:68:da:3c:f9:24:b3:10:0a:98:c4:9a:d1:c6:ee:
                    d8:a7:23:73:8e:3d:d6:8d:70:73:e3:58:08:5f:81:
                    6a:58:bd:2e:b5:66:0b:f1:35:6c:14:e7:67:8b:d6:
                    2e:24:03:74:36:3f:f1:ce:e8:99:ac:f7:ca:28:15:
                    7f:44:23:a9:f5:ee:53:a4:3e:d2:07:c8:b8:f4:2b:
                    44:e0:a2:4b:4d:0b:59:f2:c7:0f:f3:9f:22:af:f3:
                    c4:ad:e8:b9:f4:04:41:ca:d3:86:e4:67:e7:71:2e:
                    83:95:14:a1:5f:cb:f8:2c:cf:fa:b7:22:76:76:86:
                    dd:90:27:a7:e1:4f:1d:31:3c:17:c0:1a:e8:59:4b:
                    3a:d6:dc:aa:20:cd:37:79:cb:e9:5b:b5:6d:e0:d0:
                    eb:25:f0:15:c9:77:e8:42:3b:27:43:60:b2:2d:90:
                    e6:55:82:b5:5b:08:e5:97:ab:bd:bc:e9:6e:28:f7:
                    00:f1:a9:a4:71:2c:47:3c:3c:5e:06:ec:ca:9e:a8:
                    c2:43:66:e1:ae:fe:26:a3:00:aa:37:40:aa:22:53:
                    47:19:ca:ee:30:29:22:6e:0a:52:51:20:4b:b7:bc:
                    b9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FB:87:A8:4E:C0:0D:F9:D5:8B:86:8E:EE:BC:D8:A8:8D:C8:A6:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/907ccfac-b94e-313e-9776-8d7b822a3603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.153.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a7:75:2e:8c:42:e3:51:e5:f5:fc:6d:69:86:e9:28:e6:e8:
         b9:6e:f8:a6:d6:8b:e3:c8:06:b6:5d:18:b3:16:8a:6c:c0:d3:
         c1:57:21:12:e6:83:a1:ca:51:1f:f9:a5:bd:23:d2:49:06:9e:
         57:e6:7f:21:75:04:a5:38:20:33:db:2a:d6:b5:44:bc:85:96:
         9a:de:cf:5c:f7:c9:fe:ff:82:1c:ec:f2:61:99:16:35:2f:2d:
         d0:d0:ce:0c:90:82:0c:8e:53:83:c3:64:11:d6:0b:5c:38:08:
         6d:9a:71:f1:19:dd:eb:62:a0:e6:b0:fa:53:4b:2a:be:9a:d3:
         ec:32:85:1f:39:cd:61:9f:db:4a:9c:19:95:20:6c:58:c0:c7:
         27:63:1d:86:21:01:68:e3:4e:a2:30:d7:18:ae:79:8f:2c:e5:
         7a:87:7b:d0:53:14:ea:74:08:0a:e0:7a:54:aa:e3:51:06:54:
         e7:b7:3b:69:58:74:d9:e6:e0:55:27:64:ef:d2:73:f5:48:dd:
         27:9c:37:77:22:84:f7:b3:c1:97:e9:28:18:2e:5e:4e:63:95:
         6f:0a:8a:18:93:79:f5:9f:b7:6e:70:ba:82:ae:5e:f9:f2:df:
         9f:7e:fd:e3:e9:21:3c:8a:07:5b:9a:94:93:e4:17:b4:f2:c3:
         f0:49:6f:fd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8Xi8jDmUN5vMQNDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgzMDEyMDAwMFoXDTIyMTAwNTA0MDAwMFowLzEtMCsGA1UEAxMk
NDNmZTBkNDMtNDcyYi00Zjc0LTk2MTUtYTk0M2Q1YzM5MTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRbbgcjkCEhOY83viFLktEcQORfO8f16rQQz
8aAnaNo8+SSzEAqYxJrRxu7YpyNzjj3WjXBz41gIX4FqWL0utWYL8TVsFOdni9Yu
JAN0Nj/xzuiZrPfKKBV/RCOp9e5TpD7SB8i49CtE4KJLTQtZ8scP858ir/PErei5
9ARBytOG5GfncS6DlRShX8v4LM/6tyJ2dobdkCen4U8dMTwXwBroWUs61tyqIM03
ecvpW7Vt4NDrJfAVyXfoQjsnQ2CyLZDmVYK1Wwjll6u9vOluKPcA8amkcSxHPDxe
BuzKnqjCQ2bhrv4mowCqN0CqIlNHGcruMCkibgpSUSBLt7y5AQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDv7h6hOwA351YuGju682KiNyKYlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTA3Y2NmYWMtYjk0ZS0z
MTNlLTk3NzYtOGQ3YjgyMmEzNjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD5kwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARad1LoxC41Hl9fxtaYbpKObouW74ptaL48gGtl0YsxaKbMDTwVchEuaD
ocpRH/mlvSPSSQaeV+Z/IXUEpTggM9sq1rVEvIWWmt7PXPfJ/v+CHOzyYZkWNS8t
0NDODJCCDI5Tg8NkEdYLXDgIbZpx8Rnd62Kg5rD6U0sqvprT7DKFHznNYZ/bSpwZ
lSBsWMDHJ2MdhiEBaONOojDXGK55jyzleod70FMU6nQICuB6VKrjUQZU57c7aVh0
2ebgVSdk79Jz9UjdJ5w3dyKE97PBl+koGC5eTmOVbwqKGJN59Z+3bnC6gq5e+fLf
n3794+khPIoHW5qUk+QXtPLD8Elv/Q==
-----END CERTIFICATE-----