This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdd00c47-b7cc-34f7-9ab2-14060e208e44.roa
File:                     bdd00c47-b7cc-34f7-9ab2-14060e208e44.roa (raw, json)
Hash identifier:          gFhdW021YXqfL2ZMMe8oOGjbYSG2OloVomBeHc3fmJk=
Subject key identifier:   DE:CC:74:AC:D9:9B:E1:6D:05:5D:71:AB:CA:EB:7D:55:44:17:11:85
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DA1E4006AA2498EF4B2876900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdd00c47-b7cc-34f7-9ab2-14060e208e44.roa
Signing time:             Wed 20 Apr 2022 04:00:00 +0000
ROA not before:           Wed 20 Apr 2022 04:00:00 +0000
ROA not after:            Wed 25 May 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        13.248.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:e4:00:6a:a2:49:8e:f4:b2:87:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 20 04:00:00 2022 GMT
            Not After : May 25 04:00:00 2022 GMT
        Subject: CN=fabf7f66-c569-4937-be87-b907c1f45eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:43:bd:31:88:7d:43:35:28:78:35:44:ac:
                    60:0c:09:7d:70:3e:16:d7:3f:87:83:24:b2:b2:4c:
                    d5:0a:ed:cf:2b:4e:00:03:2c:bd:db:a0:65:71:74:
                    fd:51:ff:cf:2b:77:aa:50:69:49:78:29:3a:39:5f:
                    40:3e:31:84:87:67:bb:be:96:f0:90:4c:e8:c0:f9:
                    51:3c:da:34:c0:76:a9:23:05:31:43:d3:4e:cc:de:
                    cb:5f:c0:87:ec:14:26:65:a0:bc:4d:db:a6:e5:0d:
                    16:ae:95:18:26:9a:33:2a:10:68:53:b3:6c:3f:30:
                    28:05:1e:c5:cc:c0:43:e3:19:c5:52:d7:29:7c:39:
                    5b:b3:b0:eb:0e:43:5a:aa:17:18:ea:c4:67:c9:31:
                    41:8f:5d:16:b1:b2:71:b3:a1:11:34:b3:e4:af:e8:
                    14:3b:2f:43:98:99:73:a0:53:98:93:90:aa:3e:fe:
                    bd:ed:83:88:30:db:44:49:79:a4:da:33:f0:c5:19:
                    d2:17:47:ac:1e:28:c4:57:15:91:3b:af:40:c9:9a:
                    9b:32:b8:64:10:8d:44:10:8e:3a:46:c4:de:1f:e9:
                    b8:f2:5f:26:c4:36:b1:bf:3e:25:5b:e2:37:ce:8a:
                    ef:56:dd:09:c9:9c:52:b9:e1:70:64:60:a2:c5:60:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CC:74:AC:D9:9B:E1:6D:05:5D:71:AB:CA:EB:7D:55:44:17:11:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdd00c47-b7cc-34f7-9ab2-14060e208e44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:61:29:b7:c8:39:35:67:83:db:32:1e:59:51:3b:d1:93:
         87:f5:22:59:d6:2c:96:9f:b0:6c:e2:16:11:de:87:0a:98:d5:
         69:b7:13:cb:ff:35:cc:6f:27:8d:5b:2f:42:6a:c2:fa:f2:a1:
         54:fc:9f:d1:51:c2:f7:cd:80:d8:96:47:e8:80:21:ab:37:01:
         a0:6f:93:e5:09:4c:5d:c2:aa:20:56:d1:dc:59:a2:31:86:3f:
         64:77:0b:90:6f:a3:b3:d2:50:3a:a1:71:65:cb:bc:8f:50:03:
         af:1a:36:03:e3:ca:f3:a4:f3:4a:52:96:c2:a5:18:bb:32:00:
         a3:5d:d1:4e:60:98:4f:71:51:30:c7:b1:f9:a4:e3:de:e8:76:
         c6:f9:14:36:fc:fd:59:34:25:2a:dc:15:66:f1:80:08:a7:4f:
         f7:29:21:af:3f:f9:5d:ec:30:c0:21:5c:fc:6d:0f:37:e9:57:
         69:a2:a5:f3:d9:d5:fc:a0:c0:f6:73:88:72:7b:18:c0:0b:7a:
         e6:14:31:3a:24:bd:22:80:5e:a0:a1:a6:01:ab:75:2c:f2:ab:
         c4:5a:95:4f:aa:1e:d5:bc:ef:fa:b1:41:c2:b7:b8:f4:d0:57:
         53:85:84:53:ae:34:99:ce:68:ab:b5:7d:1c:fb:52:9f:8b:06:
         86:18:86:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:33:03 2025 by rpki-client