This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbe9f411-ed36-3133-b8db-9d13e6c65134.roa
File:                     cbe9f411-ed36-3133-b8db-9d13e6c65134.roa (raw, json)
Hash identifier:          uvebNdpZEsferASA7iP8ic22QSeToxTmWi+o0jBSgmc=
Subject key identifier:   D0:B6:1C:F8:34:FE:03:92:E5:0F:61:52:BD:33:C2:9B:5F:E5:7E:E4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FCF04329274955D840391BC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbe9f411-ed36-3133-b8db-9d13e6c65134.roa
Signing time:             Fri 04 Nov 2022 12:00:00 +0000
ROA not before:           Fri 04 Nov 2022 12:00:00 +0000
ROA not after:            Sat 10 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.196.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cf:04:32:92:74:95:5d:84:03:91:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  4 12:00:00 2022 GMT
            Not After : Dec 10 05:00:00 2022 GMT
        Subject: CN=c1267cfb-fba8-4219-ac91-dfca798b2e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:66:32:6e:cc:37:70:ed:70:99:c7:36:96:4d:
                    a6:96:83:10:2d:ac:a5:7f:ab:45:0f:f2:e7:77:2c:
                    18:7c:86:ec:66:25:db:f9:d3:08:56:5e:9d:4b:bc:
                    57:52:7b:7b:8a:d7:f7:2f:63:c8:3b:5a:58:38:7d:
                    50:e3:b0:d5:18:e9:71:d1:81:47:4b:30:5c:e6:c4:
                    84:78:27:a8:e1:28:42:55:aa:51:27:6c:b8:f4:14:
                    05:6c:fb:28:65:59:66:cb:65:18:57:d8:c7:de:e1:
                    06:2e:98:b6:61:fa:84:22:1f:10:03:e8:84:a9:96:
                    d7:4c:29:8d:19:5b:9c:77:83:35:d5:4b:62:c4:1d:
                    c4:31:7f:a4:28:65:20:ea:f1:46:ab:00:50:cd:0f:
                    d3:a3:ed:2c:16:6e:70:2e:01:e6:81:bc:b7:9e:d2:
                    86:8e:82:50:25:18:39:43:01:12:ea:0a:64:9c:91:
                    52:50:80:69:27:15:67:27:82:15:fa:7c:04:d5:5a:
                    ca:06:6f:d1:15:90:54:8f:25:0e:05:d4:a6:d0:24:
                    96:95:7d:fd:29:8c:34:26:52:1a:60:39:d9:2b:09:
                    e1:64:19:56:12:7a:27:19:43:b8:1a:4c:be:cf:2e:
                    dd:cd:d6:1b:36:14:6e:07:85:fd:18:c4:b3:2d:3b:
                    9b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B6:1C:F8:34:FE:03:92:E5:0F:61:52:BD:33:C2:9B:5F:E5:7E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cbe9f411-ed36-3133-b8db-9d13e6c65134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.196.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:16:f2:ab:bd:de:6e:76:63:65:7c:77:3f:75:23:8b:c5:a1:
         d9:f3:59:cd:6f:f4:fc:84:a2:20:b2:d3:4c:00:29:39:04:20:
         3a:44:c0:9e:d2:d2:53:55:35:e2:de:d1:1f:8f:8a:d1:2f:a3:
         f3:04:08:f6:b8:db:84:c7:d9:d6:c6:44:23:8c:74:c1:2b:4e:
         0b:d0:7d:90:31:eb:a6:58:c8:76:28:43:fd:15:c3:f9:fb:46:
         a5:2c:1d:1a:03:39:af:79:6e:77:d6:8f:72:07:7b:47:f0:8c:
         1c:60:e1:97:f9:be:0f:bf:5a:2c:d7:08:01:b8:6e:62:93:4e:
         6d:d2:3b:bb:c1:f9:90:d0:28:29:9b:d7:8a:73:b1:5a:ba:41:
         19:d1:82:00:f5:52:c9:0a:f4:c8:e0:27:5a:12:e7:3f:7b:ad:
         59:20:c3:31:0b:cd:c9:51:b8:99:24:47:ac:f9:f4:77:d6:16:
         a9:6e:10:2f:67:03:ab:2a:7a:c8:ef:ed:b7:f7:a5:00:27:67:
         79:17:91:eb:7e:96:5f:67:00:89:44:ab:8a:e2:d9:24:a0:a4:
         47:fa:36:7e:28:cd:84:5e:87:05:1e:6a:7b:b2:bd:b1:45:31:
         e4:79:6d:79:c3:b9:0a:ba:4f:54:d3:3a:15:78:34:79:21:35:
         bd:ad:b5:36
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/PBDKSdJVdhAORvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwNDEyMDAwMFoXDTIyMTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
YzEyNjdjZmItZmJhOC00MjE5LWFjOTEtZGZjYTc5OGIyZTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGYybsw3cO1wmcc2lk2mloMQLaylf6tFD/Ln
dywYfIbsZiXb+dMIVl6dS7xXUnt7itf3L2PIO1pYOH1Q47DVGOlx0YFHSzBc5sSE
eCeo4ShCVapRJ2y49BQFbPsoZVlmy2UYV9jH3uEGLpi2YfqEIh8QA+iEqZbXTCmN
GVucd4M11UtixB3EMX+kKGUg6vFGqwBQzQ/To+0sFm5wLgHmgby3ntKGjoJQJRg5
QwES6gpknJFSUIBpJxVnJ4IV+nwE1VrKBm/RFZBUjyUOBdSm0CSWlX39KYw0JlIa
YDnZKwnhZBlWEnonGUO4Gky+zy7dzdYbNhRuB4X9GMSzLTub2QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNC2HPg0/gOS5Q9hUr0zwptf5X7kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2JlOWY0MTEtZWQzNi0z
MTMzLWI4ZGItOWQxM2U2YzY1MTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEsQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWRbyq73ebnZjZXx3P3Uji8Wh2fNZzW/0/ISiILLTTAApOQQgOkTAntLS
U1U14t7RH4+K0S+j8wQI9rjbhMfZ1sZEI4x0wStOC9B9kDHrpljIdihD/RXD+ftG
pSwdGgM5r3lud9aPcgd7R/CMHGDhl/m+D79aLNcIAbhuYpNObdI7u8H5kNAoKZvX
inOxWrpBGdGCAPVSyQr0yOAnWhLnP3utWSDDMQvNyVG4mSRHrPn0d9YWqW4QL2cD
qyp6yO/tt/elACdneReR636WX2cAiUSriuLZJKCkR/o2fijNhF6HBR5qe7K9sUUx
5HltecO5CrpPVNM6FXg0eSE1va21Ng==
-----END CERTIFICATE-----