This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d194db95-ddd2-3f18-bcb4-9d82b809cff4.roa
File:                     d194db95-ddd2-3f18-bcb4-9d82b809cff4.roa (raw, json)
Hash identifier:          t4iO2lrVmsuM0PDrQ2MYe5bstRqETVv0iOLzFLrzLu8=
Subject key identifier:   A9:6E:FE:F6:E4:FD:74:03:AB:A5:3A:4A:CE:5C:B2:56:2B:4A:9E:A4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584092777F779220E7307DE46380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d194db95-ddd2-3f18-bcb4-9d82b809cff4.roa
Signing time:             Fri 13 Jan 2023 12:00:00 +0000
ROA not before:           Fri 13 Jan 2023 12:00:00 +0000
ROA not after:            Sat 18 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        35.71.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:92:77:7f:77:92:20:e7:30:7d:e4:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 13 12:00:00 2023 GMT
            Not After : Feb 18 05:00:00 2023 GMT
        Subject: CN=42aedaac-6da2-42ad-a2c9-16fbc79c5d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b3:0a:1a:03:a9:74:a6:1b:cf:d8:92:ca:a8:
                    5e:69:54:a9:56:95:83:72:ec:1e:7a:e1:a6:6e:78:
                    07:d8:f4:20:14:ea:00:0c:ec:46:f5:ce:8f:5c:7f:
                    cb:4f:fb:03:a7:c4:0f:1d:49:17:ca:4c:e2:07:af:
                    9e:58:79:ef:0d:9a:d9:50:72:df:6b:ac:41:91:e0:
                    3a:bb:9a:b8:a2:b4:b1:01:d5:c1:b5:7d:23:ae:a8:
                    0b:65:c1:08:ea:75:d7:1b:f1:44:0f:71:5c:db:a1:
                    03:3e:1d:24:cc:50:0d:47:fd:5e:f8:fe:53:72:1c:
                    32:cf:00:ff:60:0c:32:ca:97:09:b2:b7:87:cf:bc:
                    40:11:e7:29:b1:a5:ca:57:bc:e8:5d:dd:77:fc:56:
                    37:fc:ce:79:61:dc:c4:d4:a1:a1:34:df:ba:22:6d:
                    95:6c:d3:1d:aa:59:58:36:30:26:4e:e7:b1:37:68:
                    13:d2:65:10:2d:3a:3f:f0:4e:f0:ec:ba:10:50:78:
                    c5:11:37:07:b2:18:8d:84:0f:03:b8:17:1c:71:a3:
                    e1:68:2e:d2:af:57:2f:58:45:a2:b4:6b:e7:68:72:
                    82:9a:1d:1e:38:da:ef:ca:31:4f:7c:a9:66:ae:54:
                    39:c4:8e:9a:57:54:d6:3f:e5:02:99:98:f5:f6:09:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6E:FE:F6:E4:FD:74:03:AB:A5:3A:4A:CE:5C:B2:56:2B:4A:9E:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d194db95-ddd2-3f18-bcb4-9d82b809cff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.71.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:86:24:cb:6b:c0:f6:12:5f:1d:03:93:28:98:23:ab:b9:d7:
         09:36:51:aa:96:8b:18:95:28:5f:63:b0:89:25:4d:ce:37:4c:
         c6:45:25:a2:0a:89:d3:85:8d:59:f5:20:04:3b:ac:c9:a4:c9:
         4a:fe:fe:81:fb:2e:a0:4c:1f:20:ca:50:a3:a7:db:65:26:fc:
         d9:3c:a0:26:b4:83:59:d8:df:90:4d:2a:c1:23:5c:a7:98:b1:
         c5:00:5d:28:51:a6:9d:70:b1:a7:5c:13:63:59:c3:f0:d4:9b:
         fc:83:cd:5d:5e:d0:29:e2:06:50:4a:9a:f1:45:98:4c:4a:9c:
         7a:d5:99:43:c8:0a:6c:de:77:61:02:0e:12:7a:c7:f6:70:86:
         5d:df:93:cc:aa:77:3e:2a:74:10:88:fc:84:8e:c8:35:e7:52:
         92:e1:be:fc:95:0a:c6:46:1e:14:0f:33:9a:0c:b8:78:b7:3f:
         cb:1b:f9:52:c9:44:81:33:37:d6:77:fd:e2:68:6e:c3:f3:e2:
         c1:69:24:96:ed:19:56:14:d5:c2:7b:c5:a6:c8:ab:57:93:5f:
         8e:6c:8c:d4:fa:ae:31:cf:8a:8e:13:10:67:d8:9a:fb:ba:ec:
         e5:50:73:9b:1d:1d:9e:a8:d0:24:29:f7:ea:4b:6f:7c:e1:c6:
         ea:e7:77:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECSd393kiDnMH3kY4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExMzEyMDAwMFoXDTIzMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
NDJhZWRhYWMtNmRhMi00MmFkLWEyYzktMTZmYmM3OWM1ZDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbMKGgOpdKYbz9iSyqheaVSpVpWDcuweeuGm
bngH2PQgFOoADOxG9c6PXH/LT/sDp8QPHUkXykziB6+eWHnvDZrZUHLfa6xBkeA6
u5q4orSxAdXBtX0jrqgLZcEI6nXXG/FED3Fc26EDPh0kzFANR/1e+P5TchwyzwD/
YAwyypcJsreHz7xAEecpsaXKV7zoXd13/FY3/M55YdzE1KGhNN+6Im2VbNMdqllY
NjAmTuexN2gT0mUQLTo/8E7w7LoQUHjFETcHshiNhA8DuBcccaPhaC7Sr1cvWEWi
tGvnaHKCmh0eONrvyjFPfKlmrlQ5xI6aV1TWP+UCmZj19gmtbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlu/vbk/XQDq6U6Ss5cslYrSp6kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDE5NGRiOTUtZGRkMi0z
ZjE4LWJjYjQtOWQ4MmI4MDljZmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI0eAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2GJMtrwPYSXx0DkyiYI6u51wk2UaqWixiVKF9jsIklTc43TMZFJaIK
idOFjVn1IAQ7rMmkyUr+/oH7LqBMHyDKUKOn22Um/Nk8oCa0g1nY35BNKsEjXKeY
scUAXShRpp1wsadcE2NZw/DUm/yDzV1e0CniBlBKmvFFmExKnHrVmUPICmzed2EC
DhJ6x/Zwhl3fk8yqdz4qdBCI/ISOyDXnUpLhvvyVCsZGHhQPM5oMuHi3P8sb+VLJ
RIEzN9Z3/eJobsPz4sFpJJbtGVYU1cJ7xabIq1eTX45sjNT6rjHPio4TEGfYmvu6
7OVQc5sdHZ6o0CQp9+pLb3zhxurnd4g=
-----END CERTIFICATE-----