This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf3692b9-58ca-3cd3-80dc-f556b5756bb6.roa
File:                     cf3692b9-58ca-3cd3-80dc-f556b5756bb6.roa (raw, json)
Hash identifier:          U8XdPqU4wdubywcMHMXcvubC6TuTMUvML2kzZsmmpr8=
Subject key identifier:   36:6D:FA:31:B6:51:DE:83:82:EC:70:AF:BA:BA:FA:20:05:7E:1C:1B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858401756AAE0A40A26915DE3C100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf3692b9-58ca-3cd3-80dc-f556b5756bb6.roa
Signing time:             Wed 30 Nov 2022 12:00:00 +0000
ROA not before:           Wed 30 Nov 2022 12:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.231.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:17:56:aa:e0:a4:0a:26:91:5d:e3:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 30 12:00:00 2022 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=91a8e806-66cb-4fcd-abd9-e9cb5e197a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:a0:2a:40:f0:69:fa:22:2b:5c:f9:7e:44:
                    4d:14:9f:06:9f:e7:63:e8:4b:43:57:ce:80:44:ea:
                    78:73:89:7c:07:b6:17:cf:1d:08:e1:6f:5e:a0:86:
                    67:08:2e:ef:f9:73:95:b1:38:ec:d2:b2:ef:52:12:
                    66:dd:7f:7e:f5:b0:26:78:f8:1f:b6:da:62:71:2e:
                    65:c9:e5:67:94:83:35:8d:8a:43:a4:5a:07:7f:88:
                    d5:bb:76:8d:6f:6b:70:6b:d8:96:4f:2b:61:6a:e2:
                    7f:dc:1d:b0:7f:9f:56:75:ee:08:fa:6c:d7:07:86:
                    de:61:ef:60:92:b1:86:28:7f:45:95:15:03:50:eb:
                    77:b8:b9:61:35:ae:6f:15:6d:e6:37:0f:ec:60:81:
                    72:26:16:f6:2d:f2:35:a9:d5:42:a2:ca:5c:4c:d6:
                    fb:56:40:7d:1a:05:f8:85:85:cf:67:55:64:2a:75:
                    34:bd:0a:71:64:38:a4:13:25:a9:8f:67:df:31:a2:
                    eb:10:44:e0:23:3d:43:fa:a3:96:fa:9a:c6:63:07:
                    eb:c4:26:d0:0c:8a:d2:f1:d1:d9:58:d7:b6:e7:ac:
                    ef:8c:23:de:e8:62:6f:bf:78:6e:90:cb:f1:d0:06:
                    04:6d:4c:af:cf:58:30:f0:ad:77:74:dd:fe:d4:9b:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6D:FA:31:B6:51:DE:83:82:EC:70:AF:BA:BA:FA:20:05:7E:1C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf3692b9-58ca-3cd3-80dc-f556b5756bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.231.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:db:4f:15:1a:99:fc:6f:d8:1b:ca:04:cf:d0:8a:c4:0a:79:
         22:3e:64:fb:06:d5:3a:89:1a:dd:a1:64:a6:af:2e:19:22:22:
         c7:3d:0c:dd:91:77:f2:0d:14:c4:f2:a0:25:11:23:4f:de:78:
         29:d7:7c:47:df:80:ff:53:50:4d:ab:f7:71:8f:1a:0d:19:da:
         3e:2a:ae:e2:69:66:22:17:99:3e:fc:df:89:43:69:24:cf:eb:
         20:5a:a1:1e:0e:bf:68:29:38:32:f3:8b:8d:fa:47:30:a8:c6:
         9e:18:ee:03:c2:8a:07:b0:8b:b3:41:a8:2d:88:5a:4e:94:e7:
         06:da:08:f4:30:b4:24:7b:0c:c5:a8:9b:0c:8d:b6:7c:4c:14:
         4f:3d:28:f1:7f:2f:8f:71:01:9c:80:92:8f:4f:8a:6b:c2:98:
         51:65:56:d7:29:ae:82:ec:bc:86:44:32:04:ec:0f:02:57:ce:
         fa:ac:97:bd:cb:f0:b1:d5:90:87:4c:84:8e:36:c6:71:85:6e:
         84:f1:df:13:60:ea:c7:e7:7e:f7:e8:ca:0e:8b:14:b3:1d:96:
         ad:b8:38:69:25:61:dd:c0:ea:dc:39:ca:cf:6e:87:d6:c7:31:
         6e:1f:b4:a4:b5:5b:dd:9d:99:f9:ee:01:84:de:04:36:0e:5e:
         78:3e:49:0c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAXVqrgpAomkV3jwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEzMDEyMDAwMFoXDTIzMDEwNTA1MDAwMFowLzEtMCsGA1UEAxMk
OTFhOGU4MDYtNjZjYi00ZmNkLWFiZDktZTljYjVlMTk3YTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos6gKkDwafoiK1z5fkRNFJ8Gn+dj6EtDV86A
ROp4c4l8B7YXzx0I4W9eoIZnCC7v+XOVsTjs0rLvUhJm3X9+9bAmePgfttpicS5l
yeVnlIM1jYpDpFoHf4jVu3aNb2twa9iWTythauJ/3B2wf59Wde4I+mzXB4beYe9g
krGGKH9FlRUDUOt3uLlhNa5vFW3mNw/sYIFyJhb2LfI1qdVCospcTNb7VkB9GgX4
hYXPZ1VkKnU0vQpxZDikEyWpj2ffMaLrEETgIz1D+qOW+prGYwfrxCbQDIrS8dHZ
WNe256zvjCPe6GJvv3hukMvx0AYEbUyvz1gw8K13dN3+1JvO6QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDZt+jG2Ud6Dguxwr7q6+iAFfhwbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2YzNjkyYjktNThjYS0z
Y2QzLTgwZGMtZjU1NmI1NzU2YmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD+cwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApttPFRqZ/G/YG8oEz9CKxAp5Ij5k+wbVOoka3aFkpq8uGSIixz0M3ZF3
8g0UxPKgJREjT954Kdd8R9+A/1NQTav3cY8aDRnaPiqu4mlmIheZPvzfiUNpJM/r
IFqhHg6/aCk4MvOLjfpHMKjGnhjuA8KKB7CLs0GoLYhaTpTnBtoI9DC0JHsMxaib
DI22fEwUTz0o8X8vj3EBnICSj0+Ka8KYUWVW1ymuguy8hkQyBOwPAlfO+qyXvcvw
sdWQh0yEjjbGcYVuhPHfE2Dqx+d+9+jKDosUsx2Wrbg4aSVh3cDq3DnKz26H1scx
bh+0pLVb3Z2Z+e4BhN4ENg5eeD5JDA==
-----END CERTIFICATE-----