This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e88c38c-4335-3c6f-a7a9-1644e7e58b8b.roa
File:                     9e88c38c-4335-3c6f-a7a9-1644e7e58b8b.roa (raw, json)
Hash identifier:          sXhVczpZdTQaZqRtYldY3AMN+26lLbAbnffyPvPpV1E=
Subject key identifier:   48:D8:9C:E8:0B:DB:96:41:DE:7E:11:3A:86:5B:63:1F:80:7E:C5:68
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F9E915B65AFA1B54395100800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e88c38c-4335-3c6f-a7a9-1644e7e58b8b.roa
Signing time:             Tue 18 Oct 2022 12:00:00 +0000
ROA not before:           Tue 18 Oct 2022 12:00:00 +0000
ROA not after:            Wed 23 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        158.221.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:9e:91:5b:65:af:a1:b5:43:95:10:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 18 12:00:00 2022 GMT
            Not After : Nov 23 05:00:00 2022 GMT
        Subject: CN=9debd184-3a9d-4704-9f27-776cb82ede88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:5c:af:2f:8d:a9:45:ab:af:44:d7:1d:4f:
                    1a:e7:cb:26:8e:44:08:bc:bd:d6:ed:b1:f4:06:6f:
                    5a:d7:46:f5:fb:7d:68:24:02:88:34:ae:be:e9:e0:
                    80:db:67:3c:01:79:60:b4:7d:0b:26:33:49:0d:b2:
                    ee:4d:9c:88:0e:2e:56:4e:5c:0d:56:12:52:46:d0:
                    58:82:e1:3c:89:dc:e0:23:2a:a1:6d:77:e4:b3:2f:
                    f9:ba:5e:25:54:0f:72:8a:b6:de:0c:27:d9:3f:b9:
                    72:20:13:97:44:49:01:2e:bd:5a:4f:a9:5e:5b:1c:
                    81:9f:d1:4e:97:37:20:bb:fb:ce:c7:e0:54:27:82:
                    31:40:a4:6f:e5:40:89:0f:2b:87:89:1b:10:0f:fc:
                    ff:5d:20:98:d8:1e:b6:fd:d4:de:a9:0a:5e:e5:78:
                    cd:7a:12:af:23:dd:2e:09:24:bf:25:77:4b:30:e7:
                    15:4b:7f:f0:76:1b:fe:34:28:f6:f7:9c:e5:d0:fa:
                    fb:a9:3e:4d:6b:2a:8b:5d:67:66:82:41:88:64:de:
                    23:1f:ad:e4:0a:e5:8e:b1:55:79:21:02:7a:b0:cd:
                    73:8b:c2:4a:25:6a:1a:63:0a:2e:3b:57:b5:5d:8b:
                    99:58:74:c3:5b:c1:1f:44:43:09:f2:65:ba:29:06:
                    cb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D8:9C:E8:0B:DB:96:41:DE:7E:11:3A:86:5B:63:1F:80:7E:C5:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e88c38c-4335-3c6f-a7a9-1644e7e58b8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.221.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:97:67:38:26:46:ab:fc:65:17:5b:fb:8d:c6:52:bf:cb:52:
         70:d7:4e:dc:38:a2:58:a3:3c:b4:73:a7:e5:7f:48:fe:df:87:
         d3:17:c1:f2:d5:18:c6:0c:31:e7:6e:80:58:2b:ad:97:7b:a5:
         97:a0:d1:58:3b:57:14:36:d3:69:62:70:f6:65:b9:a5:a0:79:
         5b:26:a6:8f:24:0e:18:91:6d:ee:74:69:21:47:98:4b:67:01:
         cf:77:1a:44:97:f6:ee:4d:a1:6c:e6:f6:cc:7c:0f:f5:89:51:
         90:5f:e3:95:37:bd:0f:f0:0e:7a:b0:66:b8:a2:98:9a:02:d8:
         95:ad:9a:c6:55:a4:a5:06:39:ea:56:2f:90:da:61:af:33:61:
         b1:b6:9d:d6:cf:60:af:06:5b:ef:3e:f3:55:c3:e0:87:93:37:
         ea:29:f6:63:2b:2c:20:ed:d3:15:19:15:16:a5:80:eb:9b:4e:
         10:10:ca:f5:ae:e4:24:a0:4b:40:76:e9:94:20:46:ad:77:27:
         44:88:c6:00:78:15:76:a6:b3:a3:1c:28:a5:a7:60:ad:8e:94:
         cc:5b:23:8a:01:82:c7:cc:de:57:51:fc:82:ac:24:24:56:44:
         04:75:16:90:9e:d1:f9:a0:88:13:d3:81:76:6e:ec:cf:f1:06:
         fc:fb:02:29
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+ekVtlr6G1Q5UQCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAxODEyMDAwMFoXDTIyMTEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
OWRlYmQxODQtM2E5ZC00NzA0LTlmMjctNzc2Y2I4MmVkZTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP9cry+NqUWrr0TXHU8a58smjkQIvL3W7bH0
Bm9a10b1+31oJAKINK6+6eCA22c8AXlgtH0LJjNJDbLuTZyIDi5WTlwNVhJSRtBY
guE8idzgIyqhbXfksy/5ul4lVA9yirbeDCfZP7lyIBOXREkBLr1aT6leWxyBn9FO
lzcgu/vOx+BUJ4IxQKRv5UCJDyuHiRsQD/z/XSCY2B62/dTeqQpe5XjNehKvI90u
CSS/JXdLMOcVS3/wdhv+NCj295zl0Pr7qT5NayqLXWdmgkGIZN4jH63kCuWOsVV5
IQJ6sM1zi8JKJWoaYwouO1e1XYuZWHTDW8EfREMJ8mW6KQbLcQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEjYnOgL25ZB3n4ROoZbYx+AfsVoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOWU4OGMzOGMtNDMzNS0z
YzZmLWE3YTktMTY0NGU3ZTU4YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnt0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAs5dnOCZGq/xlF1v7jcZSv8tScNdO3DiiWKM8tHOn5X9I/t+H0xfB8tUY
xgwx526AWCutl3ull6DRWDtXFDbTaWJw9mW5paB5WyamjyQOGJFt7nRpIUeYS2cB
z3caRJf27k2hbOb2zHwP9YlRkF/jlTe9D/AOerBmuKKYmgLYla2axlWkpQY56lYv
kNphrzNhsbad1s9grwZb7z7zVcPgh5M36in2YyssIO3TFRkVFqWA65tOEBDK9a7k
JKBLQHbplCBGrXcnRIjGAHgVdqazoxwopadgrY6UzFsjigGCx8zeV1H8gqwkJFZE
BHUWkJ7R+aCIE9OBdm7sz/EG/PsCKQ==
-----END CERTIFICATE-----