This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c01ec5d1-98c8-3b4b-a672-51ccdf1598e8.roa
File:                     c01ec5d1-98c8-3b4b-a672-51ccdf1598e8.roa (raw, json)
Hash identifier:          VCkw23hEkDCyKImkBemrFxL/ALI2ibX0sKt2GOzZqcY=
Subject key identifier:   F0:78:56:90:EF:20:DC:DC:41:3F:6D:AA:21:54:0F:E5:E9:FB:CE:4F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E6FA2839FCD24429B86B400C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c01ec5d1-98c8-3b4b-a672-51ccdf1598e8.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        18.194.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6f:a2:83:9f:cd:24:42:9b:86:b4:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=b4ef6166-4178-4dfd-9f5f-669ae7a027f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:12:f3:a1:dc:8b:36:f2:05:0c:ee:ee:77:
                    dd:90:47:aa:84:34:8d:84:b0:28:6b:43:31:ec:e9:
                    aa:2b:9c:1d:c6:a9:bd:57:92:a1:d1:e4:b1:ec:e2:
                    1e:e0:68:75:ab:c8:c2:b3:87:96:0e:74:c1:0e:10:
                    39:b1:d4:74:80:c0:8f:df:c7:3b:d2:d8:ea:ad:e6:
                    b0:b2:ae:fd:7d:84:cd:a7:81:b5:a7:0f:bb:9f:4b:
                    b2:4b:f7:a3:98:b3:da:5a:79:19:06:e2:44:87:0e:
                    14:e8:ca:09:0b:59:7c:15:83:8e:e1:8f:65:fa:9b:
                    bd:02:86:d9:b1:8e:0f:98:bb:88:dc:b8:5a:f3:0e:
                    47:f8:3e:36:7d:1b:b2:41:45:bd:fd:62:ec:ab:9f:
                    3b:9f:ab:06:11:8c:80:16:6b:52:07:b2:b6:5a:4f:
                    b8:49:e0:2d:4d:35:6e:95:c7:6a:e1:59:8f:e6:6c:
                    55:01:66:2d:2b:4d:4f:06:16:76:04:08:27:f2:1b:
                    77:c8:13:b6:95:fa:53:d5:88:b5:f3:6b:17:24:c1:
                    8a:82:37:28:00:4a:fb:92:0a:8a:9c:a5:cd:2c:7e:
                    d1:6f:9f:e4:42:d2:37:8e:85:ed:78:ef:53:01:74:
                    ea:53:64:46:ac:19:57:fe:17:4b:e6:54:c7:7a:e7:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:78:56:90:EF:20:DC:DC:41:3F:6D:AA:21:54:0F:E5:E9:FB:CE:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c01ec5d1-98c8-3b4b-a672-51ccdf1598e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.194.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:76:fc:0b:7a:b5:5f:d1:b0:91:f7:07:c2:b4:4d:fd:d2:3f:
         50:0c:f9:33:36:a7:9a:14:71:13:a8:76:d0:a3:a9:6b:d0:20:
         05:e4:15:dc:0f:00:6a:5e:b2:26:28:e5:2b:87:d0:2e:2c:8f:
         9f:06:7b:f9:78:1a:5f:d3:cc:43:89:40:9f:17:63:4a:03:fa:
         df:37:41:8d:de:53:34:b6:0d:6c:c6:e1:c0:73:e2:ef:09:ca:
         00:b7:90:16:da:59:f6:c3:ea:aa:16:3c:f5:3c:14:05:04:18:
         a0:2b:25:66:45:6d:07:0f:d0:76:59:24:4a:8e:3d:ff:76:35:
         09:72:24:3a:b6:ff:cc:54:7b:c3:72:b0:00:05:a5:dd:c3:1a:
         44:aa:e6:52:c2:fd:dc:39:41:ca:37:be:11:40:23:a4:74:69:
         36:3a:b8:55:00:1c:75:03:20:e4:17:e9:a7:da:af:ba:8a:05:
         8d:1e:96:bd:67:51:a3:97:d7:52:9d:6d:79:20:0b:dc:6e:82:
         76:ce:d0:dc:55:be:8b:3f:83:33:5c:b9:86:02:23:33:eb:3c:
         5a:26:ce:b5:b4:e7:fa:fd:dc:ff:03:79:da:c9:1f:7f:42:6e:
         7b:53:45:da:54:24:f4:6d:0e:b2:f2:61:81:c9:15:2e:a6:7f:
         8b:f9:da:ea
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5vooOfzSRCm4a0AMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcwMTEyMDAwMFoXDTIyMDgwNjA0MDAwMFowLzEtMCsGA1UEAxMk
YjRlZjYxNjYtNDE3OC00ZGZkLTlmNWYtNjY5YWU3YTAyN2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvigS86HcizbyBQzu7nfdkEeqhDSNhLAoa0Mx
7OmqK5wdxqm9V5Kh0eSx7OIe4Gh1q8jCs4eWDnTBDhA5sdR0gMCP38c70tjqreaw
sq79fYTNp4G1pw+7n0uyS/ejmLPaWnkZBuJEhw4U6MoJC1l8FYOO4Y9l+pu9AobZ
sY4PmLuI3Lha8w5H+D42fRuyQUW9/WLsq587n6sGEYyAFmtSB7K2Wk+4SeAtTTVu
lcdq4VmP5mxVAWYtK01PBhZ2BAgn8ht3yBO2lfpT1Yi182sXJMGKgjcoAEr7kgqK
nKXNLH7Rb5/kQtI3joXteO9TAXTqU2RGrBlX/hdL5lTHeudgYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPB4VpDvINzcQT9tqiFUD+Xp+85PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzAxZWM1ZDEtOThjOC0z
YjRiLWE2NzItNTFjY2RmMTU5OGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEsIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASXb8C3q1X9GwkfcHwrRN/dI/UAz5MzanmhRxE6h20KOpa9AgBeQV3A8A
al6yJijlK4fQLiyPnwZ7+XgaX9PMQ4lAnxdjSgP63zdBjd5TNLYNbMbhwHPi7wnK
ALeQFtpZ9sPqqhY89TwUBQQYoCslZkVtBw/QdlkkSo49/3Y1CXIkOrb/zFR7w3Kw
AAWl3cMaRKrmUsL93DlByje+EUAjpHRpNjq4VQAcdQMg5Bfpp9qvuooFjR6WvWdR
o5fXUp1teSAL3G6Cds7Q3FW+iz+DM1y5hgIjM+s8WibOtbTn+v3c/wN52skff0Ju
e1NF2lQk9G0OsvJhgckVLqZ/i/na6g==
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:32:45 2025 by rpki-client