This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a3914c4d-f34b-3c45-b60a-c56b57559352.roa
File:                     a3914c4d-f34b-3c45-b60a-c56b57559352.roa (raw, json)
Hash identifier:          FEpK+kTilhy1arQTqxuRJQOn8IC6m6SivjVoIpmr7KU=
Subject key identifier:   B3:50:64:1F:26:A1:46:66:75:23:26:34:CF:BB:3D:36:43:6E:31:E1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C79CBBC9181C9129E422DE9A8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a3914c4d-f34b-3c45-b60a-c56b57559352.roa
Signing time:             Tue 04 Jan 2022 05:00:00 +0000
ROA not before:           Tue 04 Jan 2022 05:00:00 +0000
ROA not after:            Tue 08 Feb 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        136.19.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:79:cb:bc:91:81:c9:12:9e:42:2d:e9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  4 05:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2022 GMT
        Subject: CN=84a171ec-96a2-4474-b2f9-6fb925472c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:19:f7:da:0d:fc:4a:25:48:42:bf:5f:bb:74:
                    ec:b7:49:d4:41:44:7a:d1:ec:43:29:d1:4e:15:b4:
                    e6:ee:0d:94:ed:65:4f:3a:7b:e8:47:0d:b3:fd:ef:
                    d0:d1:26:88:af:a6:c1:86:90:aa:9c:ac:f6:65:af:
                    0b:c6:6d:d1:aa:ac:8a:9d:2f:b6:2f:a0:7b:ea:4b:
                    0a:14:d6:ab:ac:a4:c8:18:98:71:14:84:7b:3d:6c:
                    c7:65:1a:99:2d:6d:05:a4:8d:bd:fb:3f:d5:86:6b:
                    0f:f0:51:ac:03:1c:ac:25:2c:84:8d:fe:97:86:67:
                    99:c5:79:01:4a:d8:6e:bb:48:e3:08:63:e3:80:09:
                    21:cc:fd:84:15:1a:d6:cc:b7:74:25:0c:1a:98:67:
                    b4:5b:24:cd:69:95:1a:76:eb:19:3e:d9:8c:70:71:
                    45:15:e3:cf:7f:59:92:62:37:6a:3b:06:44:9f:e2:
                    23:ee:5b:48:a5:97:ed:ce:86:8d:1f:23:a8:1c:14:
                    1a:b2:a1:18:a0:b4:ed:5f:03:a1:97:64:06:d4:82:
                    2a:ac:b8:61:16:f9:2d:7e:00:24:28:3a:98:57:21:
                    00:75:b1:b3:d8:01:84:36:e3:3f:6b:57:ca:ae:a0:
                    53:b8:e0:cd:0f:05:1d:93:fd:5d:6f:42:44:24:b2:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:50:64:1F:26:A1:46:66:75:23:26:34:CF:BB:3D:36:43:6E:31:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a3914c4d-f34b-3c45-b60a-c56b57559352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.19.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:06:ce:84:26:5a:db:2b:84:80:97:05:41:25:b5:6a:c8:ce:
         ce:b0:61:a4:0e:1a:c5:9e:7d:63:9f:17:14:8e:c6:0d:ea:d0:
         8a:84:43:a9:5e:2f:18:96:85:25:29:6a:fd:2d:93:3b:49:cd:
         80:36:cc:a6:bb:73:63:d0:6e:05:96:ec:18:fa:6b:2c:9b:ee:
         84:99:78:eb:5a:93:86:d3:76:66:a3:1c:4c:ad:ad:78:71:0e:
         fd:e4:7f:30:ee:e7:ef:6e:31:8b:c9:4a:31:3b:fa:cc:70:9c:
         07:25:79:e5:c1:3c:80:9e:5f:7e:21:a9:a2:6f:a5:03:e3:e4:
         5c:5d:87:72:7c:41:9f:c3:ce:cb:6a:50:35:26:28:33:fc:40:
         b3:97:c1:35:5c:3e:f2:38:1d:a0:de:b7:cb:8d:30:2e:ad:83:
         32:2c:a0:27:59:4a:82:7c:00:77:bd:f2:41:35:eb:70:a9:d5:
         7d:d2:6a:01:90:df:36:4e:7a:69:89:1e:34:95:d9:88:3c:47:
         05:90:a0:51:be:5f:c8:89:08:ce:02:ab:2b:ee:84:f2:eb:e1:
         09:08:37:9b:76:0d:91:cc:f2:95:a4:36:8c:d5:31:49:57:0f:
         b1:dc:b2:00:84:25:4a:17:8b:ec:35:a0:74:61:3d:7a:87:09:
         7b:3d:b5:b5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDx5y7yRgckSnkIt6agwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEwNDA1MDAwMFoXDTIyMDIwODA1MDAwMFowLzEtMCsGA1UEAxMk
ODRhMTcxZWMtOTZhMi00NDc0LWIyZjktNmZiOTI1NDcyYzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Bn32g38SiVIQr9fu3Tst0nUQUR60exDKdFO
FbTm7g2U7WVPOnvoRw2z/e/Q0SaIr6bBhpCqnKz2Za8Lxm3RqqyKnS+2L6B76ksK
FNarrKTIGJhxFIR7PWzHZRqZLW0FpI29+z/VhmsP8FGsAxysJSyEjf6XhmeZxXkB
Sthuu0jjCGPjgAkhzP2EFRrWzLd0JQwamGe0WyTNaZUadusZPtmMcHFFFePPf1mS
YjdqOwZEn+Ij7ltIpZftzoaNHyOoHBQasqEYoLTtXwOhl2QG1IIqrLhhFvktfgAk
KDqYVyEAdbGz2AGENuM/a1fKrqBTuODNDwUdk/1db0JEJLKcZwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLNQZB8moUZmdSMmNM+7PTZDbjHhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTM5MTRjNGQtZjM0Yi0z
YzQ1LWI2MGEtYzU2YjU3NTU5MzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiBMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcgbOhCZa2yuEgJcFQSW1asjOzrBhpA4axZ59Y58XFI7GDerQioRDqV4v
GJaFJSlq/S2TO0nNgDbMprtzY9BuBZbsGPprLJvuhJl461qThtN2ZqMcTK2teHEO
/eR/MO7n724xi8lKMTv6zHCcByV55cE8gJ5ffiGpom+lA+PkXF2HcnxBn8POy2pQ
NSYoM/xAs5fBNVw+8jgdoN63y40wLq2DMiygJ1lKgnwAd73yQTXrcKnVfdJqAZDf
Nk56aYkeNJXZiDxHBZCgUb5fyIkIzgKrK+6E8uvhCQg3m3YNkczylaQ2jNUxSVcP
sdyyAIQlSheL7DWgdGE9eocJez21tQ==
-----END CERTIFICATE-----