This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bec5729b-7e63-3c32-b9d9-e7029236db4b.roa
File:                     bec5729b-7e63-3c32-b9d9-e7029236db4b.roa (raw, json)
Hash identifier:          tg2SQCGlAzTN4c5NXKcfGJqCyoSWGVHSODVEMu3zYK0=
Subject key identifier:   A0:63:E0:AD:87:B7:58:EA:5F:87:45:3D:AA:04:EA:BD:DE:7C:25:3E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840B5D3E0DF261F9577477D6500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bec5729b-7e63-3c32-b9d9-e7029236db4b.roa
Signing time:             Thu 26 Jan 2023 12:00:00 +0000
ROA not before:           Thu 26 Jan 2023 12:00:00 +0000
ROA not after:            Fri 03 Mar 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        52.222.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b5:d3:e0:df:26:1f:95:77:47:7d:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 26 12:00:00 2023 GMT
            Not After : Mar  3 05:00:00 2023 GMT
        Subject: CN=28aa4a3d-8428-49db-a68a-56e27e89c4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:13:13:80:ba:c9:0c:a5:98:68:e9:e8:68:87:
                    1a:d9:5f:39:9b:08:8b:e7:f7:55:7b:6f:69:88:bb:
                    cc:8f:1f:5e:fd:2e:6c:a1:82:02:90:8e:ad:c5:cc:
                    04:5c:69:5c:6c:27:21:af:66:4b:90:f5:ce:81:2c:
                    3f:30:5b:72:a2:f6:14:45:07:b5:d4:2b:a0:02:d2:
                    27:f2:50:a0:66:54:59:33:90:a6:ec:b6:73:cf:4b:
                    e2:fa:67:76:1c:1d:2d:db:a3:24:de:03:53:7a:ab:
                    5d:91:31:ec:d8:dc:31:1b:d3:f3:46:09:eb:67:f2:
                    34:32:c8:14:19:22:99:81:49:e5:ed:a4:43:90:d0:
                    60:b4:dd:cc:19:9c:33:72:82:87:b5:c2:c2:c9:11:
                    4e:5a:1a:35:df:9a:f7:99:52:c6:3d:25:d6:0d:07:
                    d9:c8:52:4d:d6:d5:94:28:32:de:ee:3a:f6:99:a2:
                    ce:11:d3:28:c5:da:f7:39:2f:25:58:ec:ef:88:42:
                    b7:40:49:e4:08:50:7e:83:cd:06:67:60:1a:0c:ce:
                    99:1a:94:ca:56:04:b4:6a:fc:c4:1c:f9:25:57:ee:
                    68:1e:aa:8a:93:10:e8:43:cd:c4:2c:54:01:87:00:
                    7e:5f:20:ab:e0:bd:48:7e:bf:87:31:65:2a:40:aa:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:63:E0:AD:87:B7:58:EA:5F:87:45:3D:AA:04:EA:BD:DE:7C:25:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bec5729b-7e63-3c32-b9d9-e7029236db4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.222.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:86:3d:18:76:6b:38:fa:08:d7:da:aa:55:a8:be:a7:83:58:
         37:83:82:0b:18:ae:b5:9e:5c:7b:b0:5a:14:be:e0:5b:f8:5f:
         68:ae:6c:3e:a2:a8:58:c9:9f:c9:d3:98:92:ae:3c:0f:71:6a:
         fb:6f:a9:48:89:b0:9b:fb:7b:e0:b4:8a:4d:05:c9:32:44:d1:
         d4:9a:dd:71:12:f7:77:fa:1e:db:75:46:6f:f8:62:81:45:93:
         ab:1d:c7:ec:e8:09:9b:91:31:48:3f:3f:aa:90:c7:e3:35:88:
         56:21:2b:31:3a:19:94:75:34:ce:a0:82:19:67:c9:bd:a7:c4:
         78:d8:ef:b6:13:41:09:cd:a6:35:cb:77:08:7c:5b:9d:27:cf:
         3b:7e:7a:f3:66:7a:94:05:83:9b:53:42:18:58:98:e9:78:aa:
         a1:17:78:e1:89:cf:64:6f:35:58:b8:3b:72:94:36:a1:2f:c9:
         3f:76:e6:d4:e5:2c:1f:d1:43:88:20:ba:0a:17:f5:b4:49:61:
         83:a0:89:44:a6:8a:3c:1b:7e:f6:16:5a:60:96:83:55:3a:ab:
         35:db:dd:8a:fd:bb:32:ce:8e:33:65:7b:b6:6f:85:a6:0d:c8:
         78:7f:fc:8e:ca:6f:08:37:77:2c:b1:e6:d3:37:40:86:83:7b:
         06:38:b1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----