This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb96c383-5d0d-3e43-a760-0771d343e4a5.roa
File:                     bb96c383-5d0d-3e43-a760-0771d343e4a5.roa (raw, json)
Hash identifier:          365CnknQ/BQLdRK9OKCYehD2ftU4NohIRuMireI82M8=
Subject key identifier:   BF:71:43:7D:EB:51:02:5C:B0:EB:EB:C9:3B:C1:0C:DA:8A:0A:DF:53
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840470F563F20BF346BA0C16A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb96c383-5d0d-3e43-a760-0771d343e4a5.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        160.1.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:47:0f:56:3f:20:bf:34:6b:a0:c1:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=c4ae683f-47c1-451f-b523-23434650276f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b7:fd:67:4f:8b:dc:ec:7f:75:2c:fc:6d:88:
                    f4:87:1f:5b:77:cc:95:b8:1c:c3:1f:60:e5:b4:d8:
                    ca:1b:54:3b:77:49:87:ba:af:3e:15:ca:32:91:e7:
                    f2:c9:61:6d:1f:b5:3d:9b:09:e4:7a:cc:f5:79:5f:
                    d0:c1:8c:50:ff:19:87:17:4a:d4:c1:99:85:1d:ec:
                    48:96:a5:88:f8:b6:b4:68:ca:7c:b7:59:44:e2:41:
                    8f:8e:3a:a7:61:25:42:32:50:db:0c:85:db:ea:bc:
                    75:1a:77:0a:70:74:d1:70:d1:26:85:de:6e:cc:af:
                    01:e8:92:53:48:15:0c:09:fb:fe:d9:e7:ed:bb:b6:
                    38:e3:56:88:7b:65:74:fa:14:2f:f3:52:2b:cb:11:
                    01:d5:0c:97:3a:75:d0:c4:75:29:45:be:8b:71:b3:
                    14:81:2b:3e:cf:3e:6e:24:47:10:c5:d1:2c:9a:1e:
                    a2:f7:96:22:49:20:56:7d:0a:28:2a:8c:33:64:61:
                    ac:67:06:00:3e:f8:71:b7:f1:3e:c5:32:90:0b:3a:
                    33:be:89:6c:4c:19:1a:77:4a:87:53:b4:c9:65:1d:
                    75:56:3c:3c:0e:13:21:25:98:b4:de:d7:61:20:f1:
                    d8:71:f7:d3:18:bd:8f:ee:58:16:ad:8b:53:28:fc:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:71:43:7D:EB:51:02:5C:B0:EB:EB:C9:3B:C1:0C:DA:8A:0A:DF:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb96c383-5d0d-3e43-a760-0771d343e4a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.1.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:9a:af:9b:56:fe:d4:a0:d0:e9:ea:a8:a8:28:25:e6:21:70:
         f8:b1:72:03:e4:e3:0b:5d:95:24:78:29:49:3a:f9:16:f5:73:
         5b:77:da:28:73:ab:bf:b5:a4:4d:21:f7:78:a7:f9:cb:2c:2f:
         29:ab:43:2b:be:55:ce:3c:fd:f6:8c:70:ea:9e:ce:47:f8:e1:
         38:7f:80:65:6c:47:6c:e8:73:63:c2:23:c7:b7:be:bf:55:44:
         c7:2d:02:02:d4:50:dd:6e:e5:36:e1:c9:40:1d:f6:37:26:9c:
         1c:2d:7b:f2:00:86:d1:a7:9a:84:91:91:89:a5:7b:95:0d:1d:
         de:bb:e8:bf:db:1e:8f:78:95:cc:02:ec:ca:b1:6c:be:3d:03:
         db:99:12:e7:56:66:9b:1b:0d:c7:20:e1:ac:60:a6:b0:18:cb:
         ec:d5:06:8d:fb:f9:64:0c:3f:27:f3:8c:3c:39:d5:d6:ce:26:
         f7:f2:fd:b4:27:ad:a8:fc:93:8a:5a:9d:29:84:80:de:be:97:
         1e:19:1b:09:32:87:93:02:ba:4a:73:a4:55:42:c7:dc:f9:2b:
         c3:48:0f:39:f6:ed:21:1b:c1:de:bd:9b:d8:ff:40:18:d3:67:
         fe:e7:2c:48:e9:92:47:ee:47:7b:11:d4:01:0c:95:a0:86:fe:
         66:d8:ed:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:05:07 2025 by rpki-client