This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96bf168d-f9de-37f7-91fc-0b37581af577.roa
File:                     96bf168d-f9de-37f7-91fc-0b37581af577.roa (raw, json)
Hash identifier:          i045diS1P3QYr78ZuZF8vmxKEhaggXwyl//JyN1GFpE=
Subject key identifier:   9D:CF:E4:65:51:E2:1C:D3:20:53:E1:00:DB:8B:23:9F:76:D7:CA:A8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E70B621799F2FCFACFC9DA7C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96bf168d-f9de-37f7-91fc-0b37581af577.roa
Signing time:             Sat 02 Jul 2022 12:00:00 +0000
ROA not before:           Sat 02 Jul 2022 12:00:00 +0000
ROA not after:            Sun 07 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.41.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:70:b6:21:79:9f:2f:cf:ac:fc:9d:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul  2 12:00:00 2022 GMT
            Not After : Aug  7 04:00:00 2022 GMT
        Subject: CN=fa2745e8-c099-4a83-b871-45e4e074c13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:2f:12:01:a2:4d:db:bb:b3:e3:cc:7e:56:
                    85:c2:ae:dc:26:e5:af:9c:33:6b:81:0e:75:3b:99:
                    4b:b3:e9:01:31:6e:07:2d:60:80:62:93:71:27:31:
                    03:59:99:71:be:f9:95:ac:be:e2:2c:f4:c1:e5:d8:
                    38:bb:8f:26:9e:8a:0a:ea:2b:f1:84:04:b1:32:c8:
                    94:11:35:34:7b:f2:37:f2:c4:7f:83:d0:95:f4:a5:
                    0a:2b:2c:6f:88:cb:4e:f8:e2:15:74:bb:0b:94:d9:
                    b5:d3:9f:26:1f:fd:be:41:5a:c3:fe:ff:69:55:eb:
                    99:08:0c:e7:27:50:19:49:a4:79:0a:0d:1c:41:44:
                    9d:12:33:0e:6d:70:f1:62:0c:8a:56:e1:bf:90:c1:
                    53:19:90:32:f7:01:cd:23:77:59:32:7b:b7:ac:cd:
                    73:31:ea:87:a0:f8:3d:33:19:dd:d1:71:26:71:80:
                    23:21:bb:b5:89:cd:d0:f0:64:d1:18:99:b5:c2:bf:
                    58:d6:a6:53:91:3d:a1:e4:fc:3f:54:eb:32:64:a9:
                    4a:19:42:61:2a:8b:43:26:f6:f0:f8:f2:99:c7:a6:
                    cf:91:1f:00:2f:79:6b:17:31:4c:91:46:78:40:ec:
                    23:00:94:a3:15:65:df:7d:79:a5:1c:4a:8c:8e:1c:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CF:E4:65:51:E2:1C:D3:20:53:E1:00:DB:8B:23:9F:76:D7:CA:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/96bf168d-f9de-37f7-91fc-0b37581af577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.41.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:3b:a6:f9:42:18:53:cc:e7:d2:a0:53:3c:69:cf:1e:85:4b:
         02:1d:1f:c8:ba:59:35:85:42:7b:4c:51:d5:15:65:dd:23:78:
         19:00:4d:5a:9b:0c:90:26:3f:7b:37:b7:7b:38:44:57:c7:49:
         3c:09:f1:5e:64:98:1f:23:ae:2c:f3:e6:51:73:28:21:52:a6:
         b9:b6:35:3c:d1:2f:6f:41:8f:48:13:8c:23:ed:d4:5e:50:21:
         bd:45:bf:af:d4:bf:ae:34:26:e3:40:60:0c:60:dd:af:97:13:
         f1:95:32:98:d2:eb:56:e5:aa:b4:78:a0:7d:f4:a3:e9:29:c0:
         d0:bc:74:b6:65:c3:07:af:4f:05:83:05:30:4e:e7:c7:8f:c4:
         48:61:c2:0a:93:b7:77:b5:a4:15:d1:61:f4:2d:8f:27:c4:cd:
         ca:00:93:02:d4:de:f9:8d:96:02:41:b1:a5:2c:78:1c:6c:88:
         53:25:bb:9c:e7:11:32:0a:bf:81:ad:fd:6a:fa:8c:e9:d1:00:
         6b:11:60:4e:65:a5:52:70:d8:63:8b:40:2d:b1:6f:6a:ce:cc:
         17:cb:d9:76:e0:c9:27:c0:c1:64:74:fe:84:f6:ea:1e:82:81:
         91:bd:24:6c:c4:29:e1:4c:2c:6b:9f:02:19:fb:5d:6a:44:f1:
         a0:04:90:69
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5wtiF5ny/PrPydp8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcwMjEyMDAwMFoXDTIyMDgwNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZmEyNzQ1ZTgtYzA5OS00YTgzLWI4NzEtNDVlNGUwNzRjMTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNMvEgGiTdu7s+PMflaFwq7cJuWvnDNrgQ51
O5lLs+kBMW4HLWCAYpNxJzEDWZlxvvmVrL7iLPTB5dg4u48mnooK6ivxhASxMsiU
ETU0e/I38sR/g9CV9KUKKyxviMtO+OIVdLsLlNm1058mH/2+QVrD/v9pVeuZCAzn
J1AZSaR5Cg0cQUSdEjMObXDxYgyKVuG/kMFTGZAy9wHNI3dZMnu3rM1zMeqHoPg9
Mxnd0XEmcYAjIbu1ic3Q8GTRGJm1wr9Y1qZTkT2h5Pw/VOsyZKlKGUJhKotDJvbw
+PKZx6bPkR8AL3lrFzFMkUZ4QOwjAJSjFWXffXmlHEqMjhwuFwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ3P5GVR4hzTIFPhANuLI59218qoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTZiZjE2OGQtZjlkZS0z
N2Y3LTkxZmMtMGIzNzU4MWFmNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEikwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgTum+UIYU8zn0qBTPGnPHoVLAh0fyLpZNYVCe0xR1RVl3SN4GQBNWpsM
kCY/eze3ezhEV8dJPAnxXmSYHyOuLPPmUXMoIVKmubY1PNEvb0GPSBOMI+3UXlAh
vUW/r9S/rjQm40BgDGDdr5cT8ZUymNLrVuWqtHigffSj6SnA0Lx0tmXDB69PBYMF
ME7nx4/ESGHCCpO3d7WkFdFh9C2PJ8TNygCTAtTe+Y2WAkGxpSx4HGyIUyW7nOcR
Mgq/ga39avqM6dEAaxFgTmWlUnDYY4tALbFvas7MF8vZduDJJ8DBZHT+hPbqHoKB
kb0kbMQp4Uwsa58CGftdakTxoASQaQ==
-----END CERTIFICATE-----