This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c66ee79c-f1e4-37d2-a1bf-b2f8f47c7c6f.roa
File:                     c66ee79c-f1e4-37d2-a1bf-b2f8f47c7c6f.roa (raw, json)
Hash identifier:          OZvRzE1REk1isWOlmAaihnljKKknrjXsOmBzAqZ/uW4=
Subject key identifier:   BF:2D:67:92:34:80:CE:EA:18:86:DD:55:7A:36:27:2C:BD:A4:BF:98
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DF65E8C4FB213A7876D43E410
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c66ee79c-f1e4-37d2-a1bf-b2f8f47c7c6f.roa
Signing time:             Thu 19 May 2022 12:00:00 +0000
ROA not before:           Thu 19 May 2022 12:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        52.124.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f6:5e:8c:4f:b2:13:a7:87:6d:43:e4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 19 12:00:00 2022 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=165782c6-7279-4a94-8b2b-2b589f4c8c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:da:d0:42:16:c6:1b:66:04:9f:2c:00:15:
                    1e:15:18:e7:82:d1:78:e0:cf:19:b7:bb:9b:1b:c1:
                    da:5d:e3:af:44:9e:81:7e:b4:43:97:bf:7d:02:ee:
                    af:e8:30:b0:fa:72:ff:93:cc:07:1d:33:14:a3:bc:
                    39:42:16:dc:29:36:41:10:6f:97:2b:34:93:49:6f:
                    22:d8:d5:35:97:03:17:7a:37:d8:51:73:c3:9e:83:
                    c5:62:2b:ac:28:11:3e:2d:90:07:5d:df:3a:87:0e:
                    6d:19:1f:53:72:4a:ef:c8:47:64:f4:7c:fc:66:92:
                    4f:38:69:cc:04:0e:72:18:62:e5:f7:d8:3a:af:60:
                    fa:98:99:fe:2e:bd:ce:ef:e0:2c:31:c1:c2:7d:cf:
                    f0:cd:08:1d:ae:81:fd:bb:01:28:08:98:93:0e:b2:
                    60:fe:fb:66:23:15:d8:80:4a:6f:c1:cb:0f:46:65:
                    98:1c:d1:b2:05:1f:ca:73:c4:8b:23:d4:6b:91:53:
                    bf:79:b8:30:d4:6c:eb:e6:f0:70:24:19:38:e4:79:
                    ff:5d:1f:82:e8:4a:b1:af:fc:df:8b:e8:78:8a:31:
                    ea:7b:bf:1c:61:72:34:d4:af:fa:c1:6f:fc:81:bc:
                    61:ca:ab:01:1c:bf:46:ab:d7:68:85:9e:60:6e:ef:
                    2b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2D:67:92:34:80:CE:EA:18:86:DD:55:7A:36:27:2C:BD:A4:BF:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c66ee79c-f1e4-37d2-a1bf-b2f8f47c7c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:fc:3e:7f:21:84:4d:69:a9:7b:d3:59:88:1f:69:e0:55:43:
         e2:17:84:71:5b:29:79:26:01:96:12:39:9d:b3:f8:0d:e6:a5:
         77:8d:15:59:96:19:3c:00:8e:c5:72:67:2b:21:90:79:d8:2d:
         a8:ee:21:7a:31:66:78:44:83:d4:a1:ab:9e:a7:2d:04:d1:94:
         89:25:ea:c8:12:72:e0:53:74:49:9b:d4:ed:c0:d8:d7:8e:0e:
         23:3c:52:de:67:05:aa:6e:89:41:b5:8e:c9:09:15:7a:a2:66:
         3a:b7:36:91:9d:b9:51:5b:e5:59:03:8b:ec:40:aa:4b:af:0d:
         a0:bd:79:3f:6b:97:6c:5e:84:06:e1:11:61:1d:ed:0e:be:a1:
         2d:16:a1:2f:39:53:7f:a3:4b:dc:e0:ea:6e:56:3c:19:d1:b5:
         74:67:65:dd:6d:95:39:52:9c:a9:ab:9c:c5:4e:6a:a0:58:93:
         43:bf:61:c0:20:3b:eb:03:d8:aa:28:ce:63:89:5b:4d:23:80:
         48:81:45:bd:0c:9b:27:03:44:68:7b:d5:12:76:17:63:97:0a:
         da:40:2b:7f:3b:34:fc:b7:36:d0:7d:29:78:cb:2d:e8:57:b9:
         cb:b1:86:3f:be:5b:99:25:09:5f:a2:06:53:80:b8:9b:57:d1:
         b4:96:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:50:02 2025 by rpki-client