This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7ae8b58-dd3e-3bf7-bb69-ea09cee95ccd.roa
File:                     a7ae8b58-dd3e-3bf7-bb69-ea09cee95ccd.roa (raw, json)
Hash identifier:          in21VZ9bR/zHipyo/Hk84kWqHZuwDz6kIrN7igEOMa8=
Subject key identifier:   80:D6:5A:B1:E9:66:EE:F3:93:24:A6:29:84:1F:0D:9C:D4:95:82:78
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F776548E3A49E8EC223F8A440
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7ae8b58-dd3e-3bf7-bb69-ea09cee95ccd.roa
Signing time:             Tue 04 Oct 2022 12:00:00 +0000
ROA not before:           Tue 04 Oct 2022 12:00:00 +0000
ROA not after:            Wed 09 Nov 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        13.36.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:77:65:48:e3:a4:9e:8e:c2:23:f8:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  4 12:00:00 2022 GMT
            Not After : Nov  9 05:00:00 2022 GMT
        Subject: CN=23579d9c-8bc9-46eb-8a8b-2dc408eda7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:26:01:43:d3:6a:0a:f4:28:05:2d:88:b2:62:
                    b3:94:25:82:ec:df:b1:ee:62:26:a4:c3:7a:8e:20:
                    6d:8b:b2:c9:55:3c:ec:34:97:f1:bd:c0:26:56:2b:
                    a7:81:60:85:23:78:62:07:ba:eb:09:52:e9:0a:52:
                    32:25:bb:e1:22:54:3b:74:47:28:6a:0e:df:18:04:
                    ee:a4:fa:81:76:76:e0:a8:4f:ab:ab:5b:7c:96:46:
                    88:a6:03:98:a1:8a:45:e9:09:1b:87:4e:ee:bb:ae:
                    b6:68:84:dc:8d:93:43:b5:73:ce:49:73:8a:62:b2:
                    e2:95:38:51:e1:2d:d9:8a:63:e6:9b:90:8a:78:37:
                    8e:d6:bc:78:38:65:4f:88:99:3f:a0:00:89:e9:b0:
                    4d:28:74:ba:79:fe:14:2f:33:a0:9d:57:4d:ae:ba:
                    a5:e1:11:70:99:6e:66:70:f0:3c:87:f3:98:ae:14:
                    93:b7:f5:84:08:5a:51:ba:cb:29:46:9d:0a:da:75:
                    81:93:e2:19:98:3e:e4:08:1e:b9:e6:30:e2:e5:cd:
                    9a:2e:8a:40:40:82:1f:e3:f9:aa:26:a1:75:fe:ed:
                    af:35:55:64:e1:38:a9:96:9b:95:4c:07:2e:8a:ca:
                    2b:5e:f4:84:f3:6b:96:83:b7:3a:0b:a7:54:42:7a:
                    1d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D6:5A:B1:E9:66:EE:F3:93:24:A6:29:84:1F:0D:9C:D4:95:82:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a7ae8b58-dd3e-3bf7-bb69-ea09cee95ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.36.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:97:d8:b3:2e:c9:57:66:46:25:1d:d1:0d:91:c1:bd:54:a1:
         78:37:8e:92:5b:93:11:20:a7:02:31:4b:fd:ce:53:e2:19:b0:
         7b:c3:b1:b4:e1:bd:9d:f8:e9:d0:af:66:4a:dd:23:aa:88:45:
         34:a4:00:3f:08:e5:45:32:53:3a:2d:2b:9f:c1:ef:f5:ad:05:
         3a:71:3c:4d:ec:1a:94:a4:58:73:95:8f:06:88:c2:e2:c6:22:
         d6:b3:a5:da:8f:51:92:e3:5c:fd:6a:99:a4:12:de:fc:f9:ab:
         3d:d5:be:b7:d3:ee:9c:47:16:60:71:92:d2:ad:42:76:fc:12:
         46:7b:f9:61:72:7c:e7:6c:b2:27:5c:f5:d6:f7:24:f4:e9:5b:
         04:fe:e0:6a:2e:bf:cc:92:78:a3:55:9d:47:07:32:3d:e3:80:
         9b:24:56:4e:fc:61:dc:73:ba:85:1d:16:30:1b:97:e6:cc:f3:
         f9:88:41:f5:8e:1d:95:86:99:9f:ce:95:e1:6c:b3:e6:54:fc:
         47:29:51:f7:f5:12:86:df:b0:a7:de:cf:d3:ac:8e:98:85:29:
         3a:84:22:7b:b5:ae:c3:cd:63:61:e1:0b:15:fd:16:4b:70:e8:
         29:40:1c:7b:ca:ef:7d:6a:9b:c8:87:f2:a3:bd:1b:f3:96:61:
         6f:e2:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----