This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2bb70a6-a745-3f6d-a333-1acbdd709bf0.roa
File:                     d2bb70a6-a745-3f6d-a333-1acbdd709bf0.roa (raw, json)
Hash identifier:          gajSBPC+zlzgW7AvyvcSXx7MOr7viWjyn30ujHkAou8=
Subject key identifier:   AC:65:DB:04:E3:1D:4E:9C:5A:D9:29:5A:AB:EC:C5:77:0D:01:10:2F
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D32A124A569612768D8E9CEF8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2bb70a6-a745-3f6d-a333-1acbdd709bf0.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.244.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:a1:24:a5:69:61:27:68:d8:e9:ce:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=1e431d81-aef9-4528-a7c3-8198e155a4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4e:65:04:b6:fb:2e:0a:69:c0:e9:df:53:30:
                    cc:64:b5:31:0b:4d:ed:ab:7c:4d:05:1e:27:4a:cf:
                    90:d4:c7:c8:35:be:20:e2:01:3c:b8:2e:97:c5:ef:
                    5b:33:f3:f6:25:57:34:b7:7a:98:18:3d:51:ce:a5:
                    51:02:31:df:0a:bb:2c:7a:5f:cc:c3:0b:09:56:48:
                    1e:2a:23:f3:ad:c6:e4:65:fb:97:c4:8a:21:23:51:
                    bd:e7:f4:17:c6:f1:22:71:b0:3d:76:47:6c:58:c2:
                    9f:98:76:c4:e2:02:3d:f4:35:9d:b3:89:e4:5f:ca:
                    7e:e9:eb:23:2b:5b:0c:fd:2a:3f:58:04:60:0b:f7:
                    66:ec:f9:e5:07:c6:3d:56:44:fc:79:64:2f:85:65:
                    d6:ed:6d:40:9f:6d:9b:21:1f:dc:76:71:af:e9:d6:
                    70:79:b9:f5:e4:f1:29:55:33:16:11:e9:c3:f7:31:
                    6e:d5:0e:48:2e:12:e6:f2:a3:89:f6:3e:83:bf:fe:
                    7d:38:4d:0f:e5:a8:b0:d2:26:03:7a:28:ed:22:66:
                    d5:be:93:08:87:ba:5e:dc:4f:5e:d8:8b:c4:6f:aa:
                    2d:0b:56:0e:2d:01:6f:44:37:8d:85:99:1f:f1:e6:
                    2c:38:94:a4:62:e7:fd:f3:49:eb:59:11:eb:f4:ac:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:65:DB:04:E3:1D:4E:9C:5A:D9:29:5A:AB:EC:C5:77:0D:01:10:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2bb70a6-a745-3f6d-a333-1acbdd709bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.244.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f8:83:41:77:84:07:d8:84:e1:ba:b9:af:89:27:6f:a5:31:
         96:75:f6:a9:be:8c:6f:90:f9:92:a1:f2:e2:98:b7:4b:6e:0a:
         8f:32:83:5d:ef:13:94:b9:37:89:ba:cd:7b:e6:70:a1:19:a3:
         7e:1d:a1:7a:f9:ca:7b:b9:50:de:de:3b:71:7c:cd:61:51:8e:
         40:42:9a:2a:70:c8:c9:68:4d:1f:bd:a9:31:ad:34:7a:e5:da:
         b0:20:82:06:84:69:57:00:90:0c:4d:98:b3:80:56:ce:00:49:
         36:0e:ec:b7:fc:30:a9:c7:c8:2e:e1:9c:ff:bd:b6:b0:af:98:
         cc:cc:32:b1:24:c7:3d:37:49:fe:fc:1b:73:7a:a4:5d:56:8a:
         8d:df:a4:82:d2:a8:6c:49:e7:4b:2a:e1:2c:83:ca:06:b2:fa:
         bc:7f:f1:6e:86:9a:7b:f8:98:20:0c:bf:9c:31:19:f0:bc:25:
         ae:ef:31:14:8f:3d:66:c4:76:03:1a:6e:50:80:42:ac:05:ad:
         9f:4f:3d:73:e0:e5:8b:df:3b:01:91:cd:b3:47:65:65:b4:93:
         6e:df:84:ee:a6:a0:3c:8b:49:a5:dc:23:b7:dc:02:79:90:f4:
         1d:68:ec:50:88:14:b4:b3:24:5a:4e:bc:7a:a3:7f:df:49:08:
         47:c9:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----