This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9c39ad1-17db-319f-86b8-ca8de0535f85.roa
File:                     b9c39ad1-17db-319f-86b8-ca8de0535f85.roa (raw, json)
Hash identifier:          X+X+RbJdOUqGJfOr1p6usPecUqtj+kJpa4kcz55k0vw=
Subject key identifier:   BF:1B:52:47:B7:2E:16:C4:59:60:4B:96:D1:D5:D6:0E:BD:47:B9:18
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D8169267719D8F12D8E161B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9c39ad1-17db-319f-86b8-ca8de0535f85.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Fri 13 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        129.160.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:69:26:77:19:d8:f1:2d:8e:16:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : May 13 04:00:00 2022 GMT
        Subject: CN=eaca116c-7e65-4084-a179-a5ef75008d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ff:29:7b:47:6e:e4:2d:bf:65:0a:7d:10:1e:
                    6a:ff:98:19:b5:5f:71:f7:30:57:a8:20:68:63:c6:
                    11:43:3d:e0:19:54:0f:b3:ed:5c:43:58:86:ee:67:
                    3c:c4:2b:b4:9c:5d:6d:71:39:1a:e7:da:8c:ef:a2:
                    7d:0f:ec:e6:cd:48:5a:23:0c:35:38:f7:0c:70:91:
                    07:70:91:d6:e0:5d:66:48:62:ad:2b:ba:b8:9f:bc:
                    3c:86:e4:a6:d7:d2:1f:23:f6:84:9b:87:34:1b:e1:
                    7a:f2:b6:ab:ca:d1:39:47:b7:5e:d4:84:c9:45:8b:
                    a0:a7:08:f3:31:ae:c1:69:54:3e:29:1c:c3:c0:52:
                    ee:84:40:9c:bb:e8:4e:a6:c5:ca:66:ad:75:09:d8:
                    d1:5f:26:bf:7f:4c:aa:69:f4:9f:da:bc:b2:dc:e0:
                    db:2d:a1:2a:a8:37:70:09:4b:8d:c0:f6:5a:c2:1a:
                    53:21:7a:57:34:ae:ac:cc:18:44:42:eb:56:27:93:
                    22:b4:09:32:be:ab:09:6b:12:ca:e0:fe:b6:7b:ef:
                    50:3d:79:f7:03:b5:92:ab:0d:09:5a:53:e7:45:b5:
                    10:6b:1c:90:59:c2:c2:07:44:23:15:97:bc:e7:ec:
                    7e:7d:c1:ef:37:e2:4f:ed:71:a8:b4:31:4d:9e:45:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1B:52:47:B7:2E:16:C4:59:60:4B:96:D1:D5:D6:0E:BD:47:B9:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9c39ad1-17db-319f-86b8-ca8de0535f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9a:59:f3:2b:d6:1d:ab:b0:ac:42:99:e4:b7:c1:70:44:52:
         1d:27:97:0f:80:e5:5a:ac:c6:d4:11:b3:d4:b7:b4:1f:c0:d9:
         b4:2c:1f:af:2d:fe:e0:d9:97:10:25:00:b1:ef:66:d8:57:99:
         3f:84:b7:e0:e4:6a:64:9f:c4:67:0c:00:7d:97:cd:47:fb:4e:
         01:94:ba:d1:11:62:d7:44:b6:3a:2c:85:3d:69:9b:d7:66:ae:
         0a:8b:1e:e0:79:52:e4:8f:87:13:9f:c9:3b:5b:41:fd:e8:ec:
         67:3c:5b:1e:be:d8:2d:73:00:9d:58:1d:1d:36:16:78:68:22:
         74:7d:51:fb:be:68:6c:4c:bd:80:a9:d8:84:4b:ec:2f:b6:dd:
         a1:67:3a:1c:20:ab:51:c4:1d:03:4b:5b:01:6e:7a:49:8c:e5:
         82:fe:53:ff:21:e3:ec:cd:ce:4f:b7:4b:d5:0d:a9:c7:e2:0d:
         9e:4e:75:8d:6a:03:bb:90:bc:4c:18:92:78:78:a2:00:75:1a:
         e8:93:54:49:9f:54:39:81:13:52:39:94:62:61:63:a8:12:1e:
         3b:ff:53:fc:c3:dd:d5:c6:85:8f:bf:e6:39:c0:7f:ab:e0:d8:
         91:94:cc:8e:b4:42:78:f5:b4:39:cc:b1:1e:be:65:c3:d7:31:
         0f:69:b2:26
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2BaSZ3GdjxLY4WG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZWFjYTExNmMtN2U2NS00MDg0LWExNzktYTVlZjc1MDA4ZDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v8pe0du5C2/ZQp9EB5q/5gZtV9x9zBXqCBo
Y8YRQz3gGVQPs+1cQ1iG7mc8xCu0nF1tcTka59qM76J9D+zmzUhaIww1OPcMcJEH
cJHW4F1mSGKtK7q4n7w8huSm19IfI/aEm4c0G+F68rarytE5R7de1ITJRYugpwjz
Ma7BaVQ+KRzDwFLuhECcu+hOpsXKZq11CdjRXya/f0yqafSf2ryy3ODbLaEqqDdw
CUuNwPZawhpTIXpXNK6szBhEQutWJ5MitAkyvqsJaxLK4P62e+9QPXn3A7WSqw0J
WlPnRbUQaxyQWcLCB0QjFZe85+x+fcHvN+JP7XGotDFNnkV49QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL8bUke3LhbEWWBLltHV1g69R7kYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjljMzlhZDEtMTdkYi0z
MTlmLTg2YjgtY2E4ZGUwNTM1Zjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgaAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXJpZ8yvWHauwrEKZ5LfBcERSHSeXD4DlWqzG1BGz1Le0H8DZtCwfry3+
4NmXECUAse9m2FeZP4S34ORqZJ/EZwwAfZfNR/tOAZS60RFi10S2OiyFPWmb12au
Cose4HlS5I+HE5/JO1tB/ejsZzxbHr7YLXMAnVgdHTYWeGgidH1R+75obEy9gKnY
hEvsL7bdoWc6HCCrUcQdA0tbAW56SYzlgv5T/yHj7M3OT7dL1Q2px+INnk51jWoD
u5C8TBiSeHiiAHUa6JNUSZ9UOYETUjmUYmFjqBIeO/9T/MPd1caFj7/mOcB/q+DY
kZTMjrRCePW0OcyxHr5lw9cxD2myJg==
-----END CERTIFICATE-----
Generated at Wed Dec 17 15:17:15 2025 by rpki-client