This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae7e370c-2301-310f-85c9-f8d78dae662e.roa
File:                     ae7e370c-2301-310f-85c9-f8d78dae662e.roa (raw, json)
Hash identifier:          xfhPJB9bhF6I8gXKROBYXop3re/f77SHGrZ6e4Vl/is=
Subject key identifier:   73:67:F1:17:C7:56:0F:E5:AE:7E:CA:4D:04:44:EE:C0:5F:2A:63:F8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F2EF4D6B4715C298FDE197C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae7e370c-2301-310f-85c9-f8d78dae662e.roa
Signing time:             Thu 08 Sep 2022 12:00:00 +0000
ROA not before:           Thu 08 Sep 2022 12:00:00 +0000
ROA not after:            Fri 14 Oct 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.113.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2e:f4:d6:b4:71:5c:29:8f:de:19:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep  8 12:00:00 2022 GMT
            Not After : Oct 14 04:00:00 2022 GMT
        Subject: CN=59c75c0e-a573-4266-aa5b-b4699ccc8122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:40:83:9b:bb:d2:54:6c:8b:96:be:72:f6:
                    67:1e:23:8e:8b:51:01:0f:28:6a:cc:dc:1d:5b:26:
                    c7:c0:70:79:a9:7e:ba:0f:ed:8d:45:45:31:54:ae:
                    52:a6:07:23:8f:78:19:63:e1:aa:cf:ee:aa:54:aa:
                    3e:d5:0d:7b:db:dd:71:3a:89:a8:7d:5a:b1:1e:d4:
                    09:f7:a5:09:3d:23:0c:34:4a:ea:45:9c:75:07:d4:
                    bc:c2:82:49:66:5a:e4:b2:a4:96:28:6c:7e:99:77:
                    aa:50:3f:ec:a0:34:d3:4a:bc:a7:68:e7:a1:e2:03:
                    13:e1:12:a6:23:87:3b:c4:a4:40:52:f0:45:ea:1e:
                    28:1b:54:dc:7c:3f:b4:d5:36:30:0d:3c:d0:01:de:
                    74:ab:03:34:1e:4b:33:af:3d:b1:a7:98:2b:b2:0c:
                    49:7c:f0:3b:f1:3a:db:05:c5:85:de:f1:16:a1:b9:
                    b9:21:55:76:70:52:d8:e9:7a:26:f7:aa:e4:52:1c:
                    6e:64:b8:8a:9a:ca:e3:ac:ff:30:4b:b9:e3:d0:ad:
                    75:8b:8c:f1:3b:b3:32:71:71:95:ad:22:83:c2:bc:
                    d2:46:80:9e:99:7f:c7:4b:60:6b:5e:c3:45:0c:92:
                    7e:af:b1:f4:b3:87:36:7c:17:53:c4:f6:41:69:a1:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:67:F1:17:C7:56:0F:E5:AE:7E:CA:4D:04:44:EE:C0:5F:2A:63:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ae7e370c-2301-310f-85c9-f8d78dae662e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.113.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:cc:63:e6:71:ba:25:28:e8:75:d9:91:08:0d:ad:d9:3b:4d:
         16:46:b9:8c:e6:64:d7:ec:79:53:32:f4:66:fd:a3:e0:e8:74:
         80:e1:e3:4d:ea:40:d8:24:1a:10:34:09:74:70:9a:81:aa:5b:
         65:7a:06:52:bb:81:e2:bc:1b:eb:cf:eb:9d:cf:f3:5e:83:d8:
         10:56:cb:8b:bd:0a:7d:ae:8a:e6:f9:8b:b3:fa:49:a9:e5:5d:
         ab:99:dc:17:f3:16:00:7e:99:ab:3b:7b:d9:6d:22:6c:1f:2d:
         54:1c:03:42:9d:25:9b:91:c9:ae:e4:38:35:69:8c:38:19:54:
         63:9e:84:b7:cc:00:9d:79:99:f9:88:73:dd:66:50:30:cf:ba:
         71:d2:97:98:a7:5c:60:74:7d:8d:ce:05:8d:cb:77:ff:87:3a:
         43:ab:17:1a:7a:53:b4:15:25:c4:99:ce:80:e2:df:33:fc:6c:
         e6:24:fa:a5:a3:e9:fa:b8:a0:14:fb:ee:4c:d1:66:25:1b:4d:
         a9:da:fa:d3:4e:f9:8e:14:a6:80:64:b6:79:d3:2d:08:18:9b:
         59:d7:0d:e2:5b:45:01:b1:d9:22:d4:78:9a:57:04:3f:0d:d0:
         88:49:f2:38:34:f3:e2:86:f9:9c:14:e5:75:9a:2f:6a:fb:78:
         08:57:f1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----