This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c314deed-f0f2-35c3-ba2f-8acbe49daaee.roa
File:                     c314deed-f0f2-35c3-ba2f-8acbe49daaee.roa (raw, json)
Hash identifier:          lRQotcwufHOrp0wyQhwgxElPIIPkEEIK9Zgukju5IR0=
Subject key identifier:   F9:DB:8B:99:04:7C:17:57:37:AB:9B:B4:53:59:5E:4F:6C:49:12:C0
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E95F6917539EB71197654A000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c314deed-f0f2-35c3-ba2f-8acbe49daaee.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sat 20 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        54.176.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:95:f6:91:75:39:eb:71:19:76:54:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Aug 20 04:00:00 2022 GMT
        Subject: CN=cf33a065-465c-4da6-a04a-80325114e2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:af:ce:88:c2:70:5e:4b:d8:3d:1f:07:8e:
                    7c:2e:7b:59:12:7d:a4:01:a2:b1:9e:1f:36:6b:31:
                    22:7d:6a:da:0d:93:c4:74:ef:a0:f4:2b:a6:c4:71:
                    2d:21:ca:d6:b1:88:0b:cb:32:44:e1:65:05:a2:ba:
                    ac:78:6d:3c:07:2d:4d:df:17:dc:32:c1:32:1f:41:
                    44:1c:97:61:79:f2:05:90:80:0f:5a:45:c2:a6:43:
                    44:71:43:23:d6:ea:84:f0:cc:fe:49:b1:f3:60:59:
                    c7:65:5b:e0:15:de:02:54:05:08:67:6f:1c:62:99:
                    b2:9d:85:da:f5:15:73:b9:1e:c1:4a:4b:fe:1c:b1:
                    46:00:54:e2:f4:af:e8:94:31:81:8b:e2:3b:87:7c:
                    ce:dc:6b:02:a6:a6:bd:e6:de:af:60:82:d1:1a:63:
                    e2:d5:df:c2:60:ef:4c:8a:b1:a1:af:bf:06:71:8f:
                    0f:64:66:19:e0:7a:c4:3e:db:1c:7c:3a:88:c4:38:
                    ac:ff:e5:32:88:17:e0:53:48:ac:00:68:e4:2f:41:
                    9d:d9:03:17:7b:7f:1d:1f:22:e9:93:02:35:86:05:
                    35:7d:b6:67:88:d5:49:fe:98:a7:4c:92:61:e0:c0:
                    f8:06:2a:de:d1:ed:64:6f:10:e5:37:f2:4c:b0:fa:
                    ee:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DB:8B:99:04:7C:17:57:37:AB:9B:B4:53:59:5E:4F:6C:49:12:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c314deed-f0f2-35c3-ba2f-8acbe49daaee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.176.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a1:43:41:87:68:30:73:42:dd:3d:8b:6e:ae:2e:4f:00:25:
         be:4c:91:cc:dd:a0:f1:93:0e:f0:47:c1:9d:21:26:74:f6:cb:
         4f:78:0a:be:f9:52:74:dc:46:42:29:a0:b9:76:d0:14:41:ce:
         ff:6f:be:a5:76:23:45:95:13:bd:69:11:ef:d2:59:18:06:5c:
         bd:56:8d:3a:9e:de:52:d3:e1:e7:36:d4:a1:d2:0e:e9:29:59:
         e8:89:e0:13:c3:15:27:a5:6e:57:05:41:0b:87:c8:1e:0e:3b:
         16:fb:94:5b:ef:8e:d5:73:e7:48:6a:ab:d7:da:a6:22:83:c4:
         e1:63:65:8a:3c:fc:c0:4c:85:d7:fe:a0:2a:9a:8e:0a:12:73:
         fd:85:39:7d:1c:eb:85:0b:e8:7b:11:4a:0b:c2:ee:c0:9a:9e:
         4f:79:f6:67:4c:4f:d2:7e:c3:7b:0d:71:76:0f:bd:d3:66:d2:
         a1:56:22:0c:3f:23:f2:48:82:4d:ec:bf:04:78:66:20:ec:96:
         e4:33:de:db:59:6d:0e:ba:1f:6b:bf:35:ad:a9:e1:04:f9:a9:
         d3:d4:aa:9d:ef:7b:8d:28:3e:6e:a5:cf:37:18:72:f4:15:05:
         a5:89:94:71:cd:eb:2f:e4:0a:4a:f5:16:6b:5d:a6:99:c3:32:
         22:b9:6a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:40:13 2025 by rpki-client