This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce9e6bb9-c357-3d80-9d09-a1f5f9de1174.roa
File:                     ce9e6bb9-c357-3d80-9d09-a1f5f9de1174.roa (raw, json)
Hash identifier:          mQbZgisQsHybQGhOUuN3xR/20Jsye3pGqatZoLVORng=
Subject key identifier:   4C:66:8E:DB:B5:47:3B:76:D0:5A:95:E1:F6:88:85:F4:C5:7B:9E:69
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406FC5FBBBA480C98B54763480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce9e6bb9-c357-3d80-9d09-a1f5f9de1174.roa
Signing time:             Sun 01 Jan 2023 12:00:00 +0000
ROA not before:           Sun 01 Jan 2023 12:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     7224
IP address blocks:        3.4.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6f:c5:fb:bb:a4:80:c9:8b:54:76:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  1 12:00:00 2023 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=6dfb7a34-127c-4fa6-ad8a-e2b8c3169126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:30:5d:d5:80:c6:a1:98:aa:e9:1b:db:e7:
                    36:d4:d5:72:3e:dd:d4:51:6e:69:9f:a5:46:f2:c5:
                    83:6e:06:d4:0a:21:4f:05:36:d1:b2:f9:ef:b5:5a:
                    55:2e:6f:62:5c:e7:23:82:03:41:85:7e:1c:a6:a6:
                    47:02:66:87:6e:7f:27:4b:de:a7:52:19:8b:8e:3b:
                    e5:e3:34:c6:a6:45:08:fe:94:42:5b:e7:96:19:01:
                    73:dd:5e:c3:c3:22:11:ae:8c:52:fe:b7:45:9a:ab:
                    d0:3d:8c:c7:f0:0f:f7:7a:e9:83:bc:73:31:ca:55:
                    9d:67:49:0e:3f:3b:2f:3d:b1:eb:5b:96:38:45:b4:
                    a8:0d:24:a1:0e:80:d4:03:ef:4f:33:73:3d:e5:f9:
                    02:c9:db:e6:70:f6:95:1e:a8:d8:cf:49:a5:9a:c8:
                    36:93:1c:ea:f4:91:eb:d4:9a:12:dd:fe:06:24:76:
                    6c:2f:dc:24:89:d4:0d:36:4a:8f:e6:99:92:70:db:
                    16:2b:02:4c:ba:04:9e:4f:b2:83:9d:0d:1e:b4:5c:
                    1c:b9:d0:25:37:17:a9:aa:95:ca:45:cd:7a:ca:33:
                    32:55:ea:a6:7d:3f:e2:6b:85:cd:25:09:34:3d:a7:
                    e7:46:1b:e3:4b:b6:72:74:da:11:c4:85:a1:0d:01:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:66:8E:DB:B5:47:3B:76:D0:5A:95:E1:F6:88:85:F4:C5:7B:9E:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ce9e6bb9-c357-3d80-9d09-a1f5f9de1174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.4.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:55:cf:b5:ce:f6:67:9e:cc:82:06:f0:e1:78:27:fb:99:0b:
         f3:75:b6:54:0d:1f:aa:84:52:58:bc:ab:c5:0b:29:15:d5:da:
         e5:53:b6:47:46:02:6b:48:20:bc:0e:2e:35:2c:bc:52:06:8c:
         a7:72:3e:e0:4e:85:6d:6c:5a:15:62:68:6a:b6:50:b6:45:78:
         e9:b8:da:5e:f1:8e:24:0a:17:e3:ce:c8:c4:25:57:17:37:26:
         56:72:ff:11:0a:ed:df:4c:11:e3:44:ae:0c:6f:ce:b7:37:1d:
         5f:1b:a3:91:09:0d:76:1b:bf:7c:4d:b0:66:bd:75:e0:40:69:
         07:26:69:5e:ed:5f:29:f5:d4:b1:0a:f7:96:f0:47:29:fc:5b:
         07:40:0d:9c:2e:dc:5a:a8:e3:20:9a:39:c9:5b:8c:ae:7d:29:
         0a:18:14:e9:d9:d7:3d:29:99:90:da:2e:0a:17:f8:e1:5c:88:
         19:b7:19:0f:bf:51:c8:f7:37:2a:24:b1:e6:a2:c6:60:9e:d0:
         f7:1b:d3:ab:81:38:83:6d:a7:87:69:95:96:d1:d0:14:38:d0:
         f4:ba:a5:08:0e:74:9d:62:7c:63:a8:7f:f9:40:57:fc:47:b4:
         31:f6:7c:32:9d:a9:3f:fb:6b:2d:44:1d:2d:35:61:99:3f:b9:
         84:8a:2a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----