This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf4ec4d7-9bb5-3322-9f78-750a830bf7e1.roa
File:                     cf4ec4d7-9bb5-3322-9f78-750a830bf7e1.roa (raw, json)
Hash identifier:          OyX8ozDtNr3XX9gW65KGLdjeK6VefSFmDBzQsMlbFOQ=
Subject key identifier:   23:88:88:6C:5C:92:D8:05:93:C3:36:22:A9:5D:C1:BB:97:E5:3C:4B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DF9EAA905DC4FC3550132FB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf4ec4d7-9bb5-3322-9f78-750a830bf7e1.roa
Signing time:             Fri 20 May 2022 12:00:00 +0000
ROA not before:           Fri 20 May 2022 12:00:00 +0000
ROA not after:            Sat 25 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        35.71.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f9:ea:a9:05:dc:4f:c3:55:01:32:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 20 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2022 GMT
        Subject: CN=727f0b88-1b0b-4302-898b-0a17243b2d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:ec:d7:90:cb:58:c9:c5:f9:ad:7b:07:5e:
                    70:46:88:a2:c7:1c:ba:5d:ca:8e:da:3c:e7:e0:93:
                    02:19:b3:77:0e:45:6b:e7:7a:bf:c4:86:84:d4:ef:
                    86:73:54:b2:6e:d8:d9:86:35:4c:68:be:eb:37:5e:
                    c8:eb:bb:dd:be:94:b6:a4:bf:12:92:1d:78:ca:a1:
                    22:33:47:c7:cc:88:3a:07:20:2b:02:c4:cc:3e:f9:
                    ec:b1:a3:4c:3f:68:f6:25:57:48:7e:07:b8:27:be:
                    35:51:02:d2:c7:a7:99:56:35:2b:ab:89:a0:f8:49:
                    02:0f:24:9a:57:d2:54:cd:29:bd:46:ec:71:47:f7:
                    83:79:19:f6:d3:0a:f0:60:d1:74:db:ab:dc:44:8f:
                    3e:25:82:d8:02:8d:bb:43:81:e5:01:77:61:f0:4e:
                    da:45:fe:39:2c:76:d7:48:73:65:16:78:3a:a3:ee:
                    32:e7:5b:ec:a2:e3:db:d4:21:40:01:63:8e:6d:45:
                    3b:1e:c1:2a:c4:0e:67:f2:3a:0b:0b:01:04:65:cd:
                    84:90:27:c9:78:28:d2:e6:96:46:b2:28:98:9d:50:
                    7f:c9:f7:84:9e:4f:07:30:5b:40:18:7a:bd:a2:24:
                    35:fe:91:04:84:20:0e:07:62:8d:f9:c6:0a:07:dc:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:88:88:6C:5C:92:D8:05:93:C3:36:22:A9:5D:C1:BB:97:E5:3C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf4ec4d7-9bb5-3322-9f78-750a830bf7e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.71.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:8a:08:93:84:20:ed:14:0a:33:73:bd:88:46:ae:9a:9b:07:
         54:65:8e:c9:8f:90:ea:df:6c:3d:89:db:24:a6:6f:17:26:a3:
         eb:2a:07:e2:ce:0a:77:22:65:8d:77:11:c1:4a:09:1a:4d:f0:
         37:61:bd:82:96:5d:7a:75:fb:24:c7:76:11:8f:07:ee:45:af:
         f6:a8:da:ac:37:af:a3:63:53:ee:73:55:60:c3:cf:cc:40:5c:
         d9:0e:81:31:b1:d1:7a:26:ab:e6:e9:37:56:b5:ca:84:c8:3d:
         8b:70:87:27:9a:9e:ce:b3:59:79:d3:45:37:a7:3e:51:42:79:
         96:01:95:2b:8f:73:6b:93:c7:c1:54:e3:d8:3f:50:c1:de:b1:
         1f:bd:21:e4:c6:5b:57:3b:44:e4:dd:b3:ed:84:f4:da:53:02:
         59:64:f7:68:c5:3d:f0:84:02:64:0d:f3:18:30:d0:6f:e5:ed:
         2a:8e:5c:dd:02:75:a2:cd:75:08:26:47:7b:ca:80:8b:0e:4b:
         76:83:c2:10:22:4a:7a:c7:d4:f5:11:32:4f:c1:cc:6f:ad:56:
         ac:1a:35:9e:37:b1:7a:3e:94:4f:6a:49:c8:0a:82:ad:f1:7f:
         6c:31:b1:c3:45:7c:74:ea:ec:d5:2f:bf:ae:e0:f4:71:fc:e5:
         0b:d3:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----