This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a73c0c70-5c78-32d4-a27f-1a9295147013.roa
File:                     a73c0c70-5c78-32d4-a27f-1a9295147013.roa (raw, json)
Hash identifier:          jQ+gsI43enA3cHsupGjCmH4QohRfUe4pVtKPQjTU6UY=
Subject key identifier:   C2:FB:FA:BE:9B:DD:B6:70:FA:74:91:85:00:E2:B9:8A:0B:BE:2F:36
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F818BA88FCCD902A9A84DBC50
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a73c0c70-5c78-32d4-a27f-1a9295147013.roa
Signing time:             Fri 07 Oct 2022 12:00:00 +0000
ROA not before:           Fri 07 Oct 2022 12:00:00 +0000
ROA not after:            Sat 12 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        18.163.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:81:8b:a8:8f:cc:d9:02:a9:a8:4d:bc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  7 12:00:00 2022 GMT
            Not After : Nov 12 05:00:00 2022 GMT
        Subject: CN=1384828f-115b-4489-8b7c-3b601f0a6a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:8f:c7:2d:43:d5:22:a7:81:a9:3c:0a:d2:
                    cd:0e:9b:dc:5f:d0:4c:d1:8e:63:48:95:88:03:fe:
                    a7:5a:c6:d7:3d:1c:ac:ce:e7:d2:d5:70:86:b1:c5:
                    8a:2a:70:52:40:53:7f:3c:c5:27:7c:d7:cb:83:75:
                    9d:ee:ac:5a:39:55:21:5b:20:43:66:3f:be:7d:12:
                    87:b6:75:0c:41:13:54:19:d3:24:72:80:8e:fb:71:
                    c4:1a:71:5b:9d:02:5a:64:49:18:5a:52:64:cc:65:
                    a8:98:12:2d:fe:95:2f:ef:86:a6:eb:e8:53:c6:46:
                    d3:d4:08:f8:37:11:b5:d0:1c:f6:04:20:c6:99:f2:
                    2e:e6:ad:ba:89:de:80:80:9f:8c:f9:3e:60:d0:34:
                    6f:90:a2:89:19:f6:f6:d7:00:ff:32:3a:bc:21:b6:
                    15:4a:2e:52:24:9f:2b:dc:80:22:ae:25:f7:bf:58:
                    59:a9:d8:5f:85:d0:83:f0:d7:c8:7f:5a:6a:e8:ab:
                    c5:cd:ee:c3:a8:16:73:27:19:34:7f:ca:5f:58:19:
                    66:34:59:3b:c8:b9:84:34:b6:19:f6:c9:03:75:6d:
                    9a:94:04:d6:fe:6c:6a:04:9f:72:30:d4:2f:08:ad:
                    13:86:1d:80:05:1b:c4:f5:4a:01:0c:5a:1e:c6:90:
                    15:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FB:FA:BE:9B:DD:B6:70:FA:74:91:85:00:E2:B9:8A:0B:BE:2F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a73c0c70-5c78-32d4-a27f-1a9295147013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:65:80:6e:95:5b:eb:fb:ed:ce:32:5c:c0:a7:fe:fa:39:
         c3:11:dc:fb:05:85:ba:e7:60:79:36:15:74:56:27:d6:73:ea:
         d1:a2:b0:78:51:d9:3a:1a:d0:d0:f3:91:42:26:ba:fa:09:af:
         b6:ff:29:4a:3d:b2:bd:e5:96:ac:53:b9:45:e7:7c:12:cc:b4:
         f4:a2:e4:4c:b8:93:c6:23:9d:c1:d6:aa:75:eb:f7:e8:21:93:
         ce:73:7d:d6:71:5c:5d:36:4a:8b:f0:c5:f8:45:50:88:d8:f1:
         38:b9:b1:d9:cc:8e:4b:7e:39:d4:27:0a:b0:63:0d:32:ce:4e:
         2c:cd:59:ae:95:d0:b9:ff:3b:40:4c:53:c4:e8:0c:19:f9:2b:
         a2:2b:97:7b:ce:2d:76:5b:89:5e:be:8f:6c:e8:43:c2:00:fd:
         b2:3f:cf:93:0d:49:f2:c0:4e:82:70:3a:5a:49:bb:65:25:d4:
         8e:35:a2:16:1e:0f:b0:7a:62:45:90:ec:0c:99:db:a1:1a:5c:
         2b:5b:fa:44:ef:84:02:5d:67:04:cc:30:de:1d:37:65:d9:9e:
         f8:18:64:65:b3:9f:b2:4d:b4:2f:a1:ac:94:5e:e9:c0:47:1f:
         3b:b4:a3:be:ce:99:43:34:8d:3e:e3:c5:a0:91:ff:10:55:d7:
         0c:78:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----