This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c67c40c7-191e-39cc-a30f-2f34fd78804f.roa
File:                     c67c40c7-191e-39cc-a30f-2f34fd78804f.roa (raw, json)
Hash identifier:          ekj/bTbOCB1cdgK4pGnMuH4NpiHflP3r25WBckxs0ns=
Subject key identifier:   F5:0E:1D:CE:74:29:1D:4E:19:3A:46:98:02:2D:EE:C2:EE:11:47:7F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DD32E9CD44B580E311E916900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c67c40c7-191e-39cc-a30f-2f34fd78804f.roa
Signing time:             Fri 06 May 2022 12:00:00 +0000
ROA not before:           Fri 06 May 2022 12:00:00 +0000
ROA not after:            Sat 11 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.194.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d3:2e:9c:d4:4b:58:0e:31:1e:91:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  6 12:00:00 2022 GMT
            Not After : Jun 11 04:00:00 2022 GMT
        Subject: CN=733ed56c-052f-41ac-8ccc-d3b169d3af0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e6:d4:79:f9:99:a4:bb:0f:ae:37:09:f9:23:
                    e0:e1:c9:4b:b0:d7:12:c5:51:ad:97:7c:56:c8:34:
                    91:c4:0a:a0:77:0d:d4:4d:5d:26:6c:87:82:7b:8c:
                    40:ed:66:fa:73:57:d5:0e:2c:f2:f8:65:a8:1f:01:
                    69:39:52:94:8f:8d:2e:17:16:b5:01:2e:70:e5:48:
                    b4:64:8e:24:f9:2b:e6:d9:66:b4:cd:0a:4e:ae:74:
                    d3:5d:f7:12:50:3a:61:8e:93:64:70:6e:79:60:d4:
                    68:96:ec:34:f7:d7:bf:38:cd:0d:72:d8:f0:f0:d8:
                    0a:9c:25:a8:0c:fb:91:ef:39:39:52:b1:75:9c:9c:
                    60:7b:e6:bb:8c:9e:42:43:4f:fa:93:0c:01:4a:69:
                    e9:9d:1e:ee:3d:7d:e9:d8:1a:94:9c:9a:9e:35:56:
                    64:a3:3e:8b:58:f9:d1:02:3f:6a:29:3a:df:00:5a:
                    a5:c8:b9:f5:18:17:92:1c:45:f4:38:68:a1:8c:5c:
                    97:e7:5c:17:46:c5:ca:3e:1a:f3:68:9d:03:97:df:
                    fb:9b:60:86:e7:78:b5:ac:73:39:de:27:27:f0:ea:
                    61:5c:e0:2b:50:78:6d:9f:04:a8:b5:42:69:d9:23:
                    41:83:73:10:3f:30:08:92:f6:c7:c8:80:b8:72:21:
                    7e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0E:1D:CE:74:29:1D:4E:19:3A:46:98:02:2D:EE:C2:EE:11:47:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c67c40c7-191e-39cc-a30f-2f34fd78804f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.194.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:0a:8e:f2:c5:d0:59:b9:41:cd:1a:a6:b2:8c:73:1f:f6:6f:
         6d:41:30:9b:76:b0:10:af:09:35:46:f5:75:cf:40:38:32:0b:
         bb:67:e3:89:f0:64:b9:a0:69:80:a1:c3:01:cd:f3:10:c1:7c:
         9e:3f:04:6f:d1:ad:78:9f:ee:de:92:93:e3:6b:e3:e3:72:35:
         4a:56:1e:a7:e2:ea:b8:bc:66:16:1c:77:7d:80:73:a6:05:8b:
         53:9e:a9:0c:ef:9d:45:7e:bb:8d:35:88:5d:93:83:67:6c:ee:
         27:ac:97:27:f8:9c:ea:7e:76:9c:3c:72:62:ad:d4:a9:e9:f3:
         3a:8c:61:71:d8:ca:6c:7f:62:8f:d3:3f:75:99:c1:82:4f:78:
         a0:72:da:a3:f9:ec:b0:9f:10:a0:44:17:e6:f8:56:16:04:0c:
         77:07:c1:27:4b:27:9b:30:cd:bb:47:1e:f0:8b:bc:c2:22:14:
         9d:4b:08:e2:16:6e:0e:78:37:a2:9e:a9:15:b8:78:1a:23:7b:
         a6:7c:b0:35:c4:c8:83:15:14:bd:cd:c3:8d:2d:aa:8f:ff:4b:
         04:52:c2:c2:ef:df:19:6b:d6:98:40:b6:2b:16:0d:27:ff:12:
         2e:44:37:c6:4a:d1:be:34:86:59:f5:96:a6:a1:82:a3:94:7e:
         b2:4d:50:dd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3TLpzUS1gOMR6RaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwNjEyMDAwMFoXDTIyMDYxMTA0MDAwMFowLzEtMCsGA1UEAxMk
NzMzZWQ1NmMtMDUyZi00MWFjLThjY2MtZDNiMTY5ZDNhZjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgubUefmZpLsPrjcJ+SPg4clLsNcSxVGtl3xW
yDSRxAqgdw3UTV0mbIeCe4xA7Wb6c1fVDizy+GWoHwFpOVKUj40uFxa1AS5w5Ui0
ZI4k+Svm2Wa0zQpOrnTTXfcSUDphjpNkcG55YNRoluw099e/OM0Nctjw8NgKnCWo
DPuR7zk5UrF1nJxge+a7jJ5CQ0/6kwwBSmnpnR7uPX3p2BqUnJqeNVZkoz6LWPnR
Aj9qKTrfAFqlyLn1GBeSHEX0OGihjFyX51wXRsXKPhrzaJ0Dl9/7m2CG53i1rHM5
3icn8OphXOArUHhtnwSotUJp2SNBg3MQPzAIkvbHyIC4ciF+RQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPUOHc50KR1OGTpGmAIt7sLuEUd/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYzY3YzQwYzctMTkxZS0z
OWNjLWEzMGYtMmYzNGZkNzg4MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEsIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqwqO8sXQWblBzRqmsoxzH/ZvbUEwm3awEK8JNUb1dc9AODILu2fjifBk
uaBpgKHDAc3zEMF8nj8Eb9GteJ/u3pKT42vj43I1SlYep+LquLxmFhx3fYBzpgWL
U56pDO+dRX67jTWIXZODZ2zuJ6yXJ/ic6n52nDxyYq3UqenzOoxhcdjKbH9ij9M/
dZnBgk94oHLao/nssJ8QoEQX5vhWFgQMdwfBJ0snmzDNu0ce8Iu8wiIUnUsI4hZu
Dng3op6pFbh4GiN7pnywNcTIgxUUvc3DjS2qj/9LBFLCwu/fGWvWmEC2KxYNJ/8S
LkQ3xkrRvjSGWfWWpqGCo5R+sk1Q3Q==
-----END CERTIFICATE-----