This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f5b5f4b-29b8-3a9c-87c2-e2f941bbf5a2.roa
File:                     9f5b5f4b-29b8-3a9c-87c2-e2f941bbf5a2.roa (raw, json)
Hash identifier:          SDbXdth+Kl0+lZvoytRDk3KbXCDDDegFiAXFxt9Qveg=
Subject key identifier:   1A:03:91:D3:D3:E6:5F:58:D0:F1:F2:BB:B3:97:1A:9B:F3:42:33:3F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840BC05B701D0941030B2527D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f5b5f4b-29b8-3a9c-87c2-e2f941bbf5a2.roa
Signing time:             Sat 28 Jan 2023 12:00:00 +0000
ROA not before:           Sat 28 Jan 2023 12:00:00 +0000
ROA not after:            Sun 05 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        129.160.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bc:05:b7:01:d0:94:10:30:b2:52:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 12:00:00 2023 GMT
            Not After : Mar  5 05:00:00 2023 GMT
        Subject: CN=dc4abfcf-4d9b-4330-b621-0e1300ccadae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:41:25:6c:db:95:88:b5:d9:01:d0:ab:db:
                    38:2f:92:5f:1a:2f:28:67:20:88:4b:5a:80:e5:06:
                    7e:9d:b4:c9:ed:ac:9b:3b:a2:86:bf:28:7f:8b:c0:
                    22:5f:b7:68:3b:0b:29:e6:fe:4f:2b:15:3b:58:8a:
                    ec:9a:d9:89:98:8e:7f:92:fe:ad:fb:48:ee:e0:e8:
                    d4:ff:dd:12:48:28:cf:a0:80:aa:38:00:e7:b1:c5:
                    9c:bc:7a:61:7e:88:71:7a:f6:cc:f9:d9:60:ea:3a:
                    33:43:2f:2a:6e:26:6b:19:13:f4:35:2c:b3:8d:29:
                    e6:9a:92:41:58:63:b6:dd:d3:f5:94:73:66:17:61:
                    bb:88:3a:bd:02:c1:98:93:59:09:bd:a3:8f:cb:c9:
                    42:b0:2a:2e:db:1b:3b:ee:d3:8e:c7:5a:bd:fa:57:
                    ed:e2:b8:7d:07:8d:7a:fb:63:4e:46:05:e2:33:22:
                    9d:0e:60:23:f5:ae:d8:a5:ae:f0:bf:64:73:1b:25:
                    e0:d5:7c:ca:ab:06:4a:1e:56:a6:d7:76:6a:6e:a8:
                    e6:04:e1:2a:9a:9c:6c:e4:32:bf:74:54:4f:03:21:
                    1e:88:af:00:df:3e:00:39:25:e6:33:e5:b7:b5:0e:
                    96:eb:ba:c3:93:48:69:0f:13:35:ea:a7:1e:6b:e0:
                    41:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:03:91:D3:D3:E6:5F:58:D0:F1:F2:BB:B3:97:1A:9B:F3:42:33:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9f5b5f4b-29b8-3a9c-87c2-e2f941bbf5a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:3a:7b:b8:d2:09:71:34:a6:70:02:61:f3:65:ff:e9:7c:1e:
         8e:b8:29:8b:f8:ae:4a:b7:38:bb:9e:6c:78:11:7f:17:5e:d7:
         f4:3e:e7:1a:b5:94:1e:d9:20:32:f7:47:07:40:b4:8b:24:8d:
         80:ad:1a:97:6d:01:cd:33:f6:f4:c5:77:7a:37:14:f6:01:0c:
         07:9c:9a:64:9b:46:03:5d:f0:58:ba:8b:f2:a7:4a:84:10:34:
         16:8b:af:66:ad:e2:44:e5:13:1e:28:01:27:c0:1a:23:e5:0a:
         f6:52:ae:8b:af:39:1b:d6:43:23:72:b3:f5:2d:5a:ac:c4:2d:
         96:4f:74:44:d9:b1:29:68:49:ad:87:8b:73:70:5a:7b:c9:87:
         80:fc:18:ac:21:46:89:f5:87:18:6e:5b:ad:40:2b:f1:e7:d6:
         5c:d7:c6:e9:df:d6:b1:38:77:5c:45:34:97:9d:2b:b6:ff:e8:
         bd:c6:53:07:7e:4a:37:78:c0:14:53:31:00:ef:f6:63:69:08:
         4a:b1:da:d6:3a:1f:94:29:63:06:eb:64:06:3b:80:62:d6:bf:
         2f:f4:49:f1:f4:44:b2:36:41:c2:49:17:22:88:88:ea:b6:a5:
         b6:7c:7b:67:34:bf:5d:3d:96:0f:c4:b3:b8:7a:5c:19:b5:1c:
         15:2e:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----