This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/921514e6-0a3b-304d-b37a-39c2f523e22b.roa
File:                     921514e6-0a3b-304d-b37a-39c2f523e22b.roa (raw, json)
Hash identifier:          EQNCvE7l9flN7zBIh49m6Bl+WG//F1wE71uN8dOD/gk=
Subject key identifier:   1B:CF:D9:F7:6D:B0:A4:9D:AF:A6:C2:97:1D:86:E4:8E:6A:74:74:9F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E6ED9B6BD8C71938EBB59E500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/921514e6-0a3b-304d-b37a-39c2f523e22b.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        54.192.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6e:d9:b6:bd:8c:71:93:8e:bb:59:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=6d127291-e996-4e6e-a40a-f45cc948e67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a0:37:d7:1f:29:a3:fc:fe:b3:b0:78:5e:a8:
                    b1:53:9c:7c:ca:73:8f:62:2f:4a:0d:4d:20:be:24:
                    c5:f2:73:f2:7c:ec:16:9a:ed:43:1e:d9:9d:7a:5b:
                    26:07:d1:d4:5c:d9:36:47:22:5e:15:92:2f:59:fb:
                    c0:87:92:ae:30:d0:01:ce:c8:06:c7:ab:fb:f1:f5:
                    0f:1d:94:d3:ad:6e:49:ce:d0:99:20:af:67:98:10:
                    91:f2:db:03:2d:0f:b9:04:c5:39:f1:2a:02:a2:6f:
                    ed:44:26:9b:71:b9:59:83:9a:1d:b6:47:9d:b2:fa:
                    bf:9b:84:dc:85:ab:15:bc:c6:ec:16:89:22:d6:ca:
                    f0:0d:f9:07:d9:d6:68:a6:1e:3f:06:0a:4e:b0:56:
                    45:a7:10:4a:39:55:9a:92:ae:cf:6a:11:b6:59:36:
                    6e:be:28:d8:c6:cb:b3:8f:7a:dc:e4:ce:1c:b9:ae:
                    29:ba:df:a5:bf:48:fd:64:4b:ca:06:34:17:dc:e6:
                    04:0c:29:ad:00:25:d1:3c:12:c2:4f:d4:80:41:2c:
                    52:de:7b:ca:1d:30:39:30:89:c8:94:07:a9:ec:a9:
                    a6:ea:26:d1:6d:37:20:2f:43:f9:ba:f1:19:a4:f1:
                    5d:b9:31:ef:c2:ed:eb:37:dc:e0:19:b2:31:75:9d:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CF:D9:F7:6D:B0:A4:9D:AF:A6:C2:97:1D:86:E4:8E:6A:74:74:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/921514e6-0a3b-304d-b37a-39c2f523e22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.192.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:02:af:91:91:1f:ac:50:ca:7a:36:84:a7:7e:e8:45:8c:4a:
         65:49:37:7f:b6:0e:33:01:34:29:c9:86:bf:48:e8:1b:ca:68:
         dc:7b:88:85:e2:e1:ec:ef:18:22:b2:4f:3d:9a:4c:df:19:04:
         ac:88:19:fb:7d:b3:81:b2:b8:bf:a1:11:74:b2:91:cc:b0:8d:
         bc:ed:b5:76:aa:c3:5f:30:fc:03:f3:ff:bf:f6:eb:d6:bd:55:
         d6:95:d1:a2:0d:7e:21:da:0e:d7:4f:ff:5e:6f:30:3d:49:81:
         a0:97:09:ad:59:f8:48:02:09:f6:8d:e7:b7:07:fa:0f:c0:44:
         e6:f1:e5:8c:fe:a6:e0:d4:a1:0e:ca:61:90:97:bf:b3:e6:ce:
         e8:ae:91:5c:61:9e:d4:c0:ca:01:94:b1:1a:d9:38:5c:a8:26:
         ae:bb:70:b9:d0:2e:7b:8e:6c:b3:1e:4f:c9:41:44:d7:7e:a6:
         2b:dc:b4:3b:d9:7f:a8:36:c1:0f:1e:ef:c7:45:f3:47:b7:b0:
         2b:27:43:a5:35:cb:0d:4c:23:6e:93:54:bd:b6:a9:b8:83:d7:
         7d:b4:1f:54:36:1e:18:7c:96:10:51:ca:0f:50:33:f4:f3:61:
         ed:14:95:9a:98:23:15:a3:92:5b:4d:2c:f6:9f:e5:f1:52:11:
         a2:db:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:48:09 2025 by rpki-client