This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9a8d354-0e12-36f1-afdc-f98e02fdfd6d.roa
File:                     b9a8d354-0e12-36f1-afdc-f98e02fdfd6d.roa (raw, json)
Hash identifier:          +6F4qrQSO6uAPz1KEBzaqro7RPsHxW/R+xxOJoTnwxw=
Subject key identifier:   3D:48:67:68:31:1C:EE:20:4B:6C:19:7D:C1:11:EC:F5:D2:C4:4D:F9
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858400DDBB80750F9630D041ECB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9a8d354-0e12-36f1-afdc-f98e02fdfd6d.roa
Signing time:             Sun 27 Nov 2022 12:00:00 +0000
ROA not before:           Sun 27 Nov 2022 12:00:00 +0000
ROA not after:            Mon 02 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        52.32.0.0/11 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0d:db:b8:07:50:f9:63:0d:04:1e:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 27 12:00:00 2022 GMT
            Not After : Jan  2 05:00:00 2023 GMT
        Subject: CN=b62d8f03-81e8-4cee-bb1c-69d7671c1505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:b9:7c:06:4f:d4:cd:d3:5a:3c:7f:77:b7:
                    eb:5b:44:84:ed:da:c3:cb:cd:c5:62:3f:e2:a5:5b:
                    cb:79:f3:a3:5e:cf:4b:77:1c:78:9a:16:7f:a1:c3:
                    88:ec:17:6e:59:8c:eb:4b:99:e5:b0:e6:b7:5d:fe:
                    76:f3:4c:76:e4:35:fc:7f:dd:38:b5:54:b6:9b:06:
                    da:e1:02:55:cc:10:5e:7c:13:55:91:8d:83:10:7f:
                    a2:49:54:15:ff:20:d9:74:75:ed:c7:69:6a:2b:10:
                    7f:5c:67:63:77:10:14:42:da:7c:96:44:77:90:d7:
                    6f:ba:52:9e:b5:b1:a9:d2:5b:d1:c0:cc:69:de:b0:
                    7f:43:03:fb:6d:bd:4f:7d:c7:69:14:de:19:c1:30:
                    bf:f5:c6:07:1c:aa:97:3f:d5:3f:12:4e:3f:a3:30:
                    57:5d:bf:13:e2:09:4e:04:f2:2b:bf:d2:82:fb:c5:
                    2d:60:86:4b:e4:b1:ae:53:7c:ce:9a:73:0b:e4:7c:
                    32:f9:d4:f8:75:be:2e:a6:ad:fb:f1:1d:9c:e1:04:
                    01:1f:44:21:ad:83:66:0e:ee:56:a5:ae:65:24:7a:
                    5b:11:12:d1:2e:84:21:74:0d:cd:8d:e6:44:f8:0b:
                    27:7d:81:63:df:09:d6:c3:92:6d:68:85:dc:be:52:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:48:67:68:31:1C:EE:20:4B:6C:19:7D:C1:11:EC:F5:D2:C4:4D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9a8d354-0e12-36f1-afdc-f98e02fdfd6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.32.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:25:23:e4:b7:e4:3a:87:51:dd:a7:d7:fa:4d:8e:c3:c1:83:
         b8:f7:d1:90:f2:6c:54:9a:6c:27:69:f8:72:e2:45:4d:92:1f:
         e3:9c:b7:4e:77:20:52:c5:88:00:96:e0:4c:c6:00:7d:4b:69:
         af:87:32:25:9b:61:97:8a:b9:89:5e:46:56:14:84:b9:45:7d:
         8d:71:db:17:7a:27:3d:d0:1c:b6:17:16:aa:e3:e9:9c:e1:84:
         91:70:66:59:de:ae:16:23:de:a3:11:5d:48:0a:40:c0:13:c0:
         a2:b8:48:75:11:fd:b6:03:01:97:76:86:c9:b5:73:3f:16:0f:
         c8:17:d8:f5:d7:65:27:12:b9:7c:1c:7a:c9:a4:ba:66:69:77:
         20:6c:89:b0:05:fe:d8:03:05:c5:b3:e6:79:af:9d:20:fb:a8:
         a7:5a:c8:28:0d:5d:3f:f2:ff:f2:04:c6:29:e5:73:80:58:ce:
         40:8d:c9:c7:9f:94:48:07:11:e9:7e:5c:6b:6a:3a:11:60:b9:
         82:41:15:df:71:72:45:cd:ca:77:14:6e:a4:d6:cb:a6:7e:c4:
         e5:40:c1:d5:6f:88:cb:1a:f0:35:a0:d9:fe:ba:34:6b:cc:70:
         b9:e2:4d:c0:10:2a:5c:a2:e9:e9:b9:a5:71:7c:43:88:ab:ce:
         41:fd:42:21
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAN27gHUPljDQQey4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEyNzEyMDAwMFoXDTIzMDEwMjA1MDAwMFowLzEtMCsGA1UEAxMk
YjYyZDhmMDMtODFlOC00Y2VlLWJiMWMtNjlkNzY3MWMxNTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiva5fAZP1M3TWjx/d7frW0SE7drDy83FYj/i
pVvLefOjXs9Ldxx4mhZ/ocOI7BduWYzrS5nlsOa3Xf5280x25DX8f904tVS2mwba
4QJVzBBefBNVkY2DEH+iSVQV/yDZdHXtx2lqKxB/XGdjdxAUQtp8lkR3kNdvulKe
tbGp0lvRwMxp3rB/QwP7bb1PfcdpFN4ZwTC/9cYHHKqXP9U/Ek4/ozBXXb8T4glO
BPIrv9KC+8UtYIZL5LGuU3zOmnML5Hwy+dT4db4upq378R2c4QQBH0QhrYNmDu5W
pa5lJHpbERLRLoQhdA3NjeZE+AsnfYFj3wnWw5JtaIXcvlKoGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFD1IZ2gxHO4gS2wZfcER7PXSxE35MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjlhOGQzNTQtMGUxMi0z
NmYxLWFmZGMtZjk4ZTAyZmRmZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFNCAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsiUj5LfkOodR3afX+k2Ow8GDuPfRkPJsVJpsJ2n4cuJFTZIf45y3Tncg
UsWIAJbgTMYAfUtpr4cyJZthl4q5iV5GVhSEuUV9jXHbF3onPdActhcWquPpnOGE
kXBmWd6uFiPeoxFdSApAwBPAorhIdRH9tgMBl3aGybVzPxYPyBfY9ddlJxK5fBx6
yaS6Zml3IGyJsAX+2AMFxbPmea+dIPuop1rIKA1dP/L/8gTGKeVzgFjOQI3Jx5+U
SAcR6X5ca2o6EWC5gkEV33FyRc3KdxRupNbLpn7E5UDB1W+IyxrwNaDZ/ro0a8xw
ueJNwBAqXKLp6bmlcXxDiKvOQf1CIQ==
-----END CERTIFICATE-----