This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb8d5036-f6d8-3a53-8abd-478b592c9f31.roa
File:                     cb8d5036-f6d8-3a53-8abd-478b592c9f31.roa (raw, json)
Hash identifier:          NAtUYA2wxb20p/7ojHXC9HZeAESIWAQfUNPxoi5SELw=
Subject key identifier:   11:91:97:A3:0E:C2:48:01:CB:A7:2C:9B:A4:08:9F:0B:EC:B0:B5:C1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D329964DB5F2CEB52D4992A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb8d5036-f6d8-3a53-8abd-478b592c9f31.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.200.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:99:64:db:5f:2c:eb:52:d4:99:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=d6388e8e-d510-4ecc-8ee7-b72e9e09eb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:03:90:72:9d:46:75:4f:41:e1:19:31:64:80:
                    c8:15:bd:33:9c:ec:37:33:86:0d:1b:af:36:b1:a4:
                    37:d4:5f:89:10:0d:6c:99:0e:e2:96:a2:72:46:f5:
                    4c:bf:36:c2:3f:09:eb:61:a6:7c:57:00:2c:84:e2:
                    08:23:cc:f6:f5:33:01:0d:b2:7e:65:78:39:34:ea:
                    fc:d5:f6:22:5b:f9:3d:d1:ca:43:8e:f8:3d:74:e0:
                    ca:f8:8b:27:62:66:1a:6e:ff:3a:6f:26:b1:2e:1a:
                    94:5f:e4:d3:22:a1:c9:d2:ec:c0:3d:84:5d:61:96:
                    ad:5c:be:3c:7c:55:b7:a3:5a:d2:7b:1a:b8:6b:36:
                    1a:05:98:ed:75:f0:48:c0:c4:ee:54:5a:7f:bb:4b:
                    98:23:43:85:e0:c9:e7:f2:f7:01:30:ce:4d:99:d9:
                    61:8e:d8:0c:14:70:1d:81:0f:6a:6b:a8:07:00:48:
                    0f:71:b3:9e:3e:5a:5a:71:cc:df:97:b4:ca:30:a6:
                    c2:34:88:f2:05:48:30:3e:59:34:16:fd:38:c9:4d:
                    b5:84:d7:46:6e:6b:0a:60:ba:a9:03:85:d8:6a:11:
                    01:f2:f9:69:59:f5:01:53:56:2f:0e:8f:2b:31:15:
                    2a:f0:9b:02:39:0b:a9:f4:06:9a:da:d6:a9:6a:4f:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:91:97:A3:0E:C2:48:01:CB:A7:2C:9B:A4:08:9F:0B:EC:B0:B5:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb8d5036-f6d8-3a53-8abd-478b592c9f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:aa:3e:cd:ac:ff:d3:10:41:70:92:01:bd:08:79:7d:07:
         b9:fd:a8:a6:93:da:8a:86:10:3f:e5:d9:02:ee:88:93:53:36:
         e7:96:18:aa:9a:12:49:d6:23:65:80:ab:48:98:c0:0e:06:2d:
         61:8f:e8:89:2c:fd:26:0c:93:db:b8:8a:a3:5a:a0:f0:80:05:
         48:88:cc:6f:c7:67:18:46:9b:4c:ff:66:42:c4:1c:3a:6c:22:
         81:06:79:3c:37:aa:a7:97:54:ae:49:4a:d9:e3:ba:83:6f:4e:
         9d:a7:f6:35:36:dc:31:58:0b:8f:5a:4c:ad:04:d5:c5:81:cc:
         39:39:b4:35:61:d8:e2:d4:e9:c7:87:92:f6:92:cc:a6:dd:4b:
         1b:1a:18:e1:c6:b1:34:c9:34:0f:ab:9f:9f:a9:d4:8c:3d:35:
         6f:2e:41:c7:5d:58:da:57:b4:20:04:b6:70:31:d0:13:3d:b0:
         f6:9b:23:8c:4a:8f:f1:7e:57:6c:d1:c6:40:b4:4e:a6:55:e6:
         f0:8d:87:e2:66:90:ea:de:e8:2b:7d:67:a4:04:74:3b:e8:59:
         b1:a7:f9:63:e0:42:01:7f:21:68:75:a9:78:e8:28:87:c4:9e:
         b9:7a:88:b9:6c:ed:94:32:8b:85:c1:89:df:32:8c:c5:d9:40:
         74:b4:91:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----