This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d46081fb-f3d9-3ee1-a3ba-bbd8d836b028.roa
File:                     d46081fb-f3d9-3ee1-a3ba-bbd8d836b028.roa (raw, json)
Hash identifier:          2oIsEydn/xCcwf67j54twCAwzgVONT9XnJVKpqBhWOM=
Subject key identifier:   2A:24:B7:9C:E8:A6:F4:46:94:76:E8:5C:A6:96:19:D0:2E:91:F3:5D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FD0BB81081C6E9F92A5EE75A8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d46081fb-f3d9-3ee1-a3ba-bbd8d836b028.roa
Signing time:             Sat 05 Nov 2022 12:00:00 +0000
ROA not before:           Sat 05 Nov 2022 12:00:00 +0000
ROA not after:            Sun 11 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        18.130.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d0:bb:81:08:1c:6e:9f:92:a5:ee:75:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  5 12:00:00 2022 GMT
            Not After : Dec 11 05:00:00 2022 GMT
        Subject: CN=ee4c5b8b-a61a-4762-bb97-3066af0a9a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:0e:cb:15:05:38:96:60:31:a2:35:db:6e:
                    a3:ea:a4:1a:34:ac:ea:5d:6a:98:08:26:cf:2c:a2:
                    d4:e0:df:c8:b4:a0:a7:69:9d:91:2b:69:de:78:4a:
                    bd:68:fd:4d:0c:a4:b0:39:d7:ec:90:53:a8:55:f2:
                    c9:f6:f7:88:63:bf:ac:f0:c9:41:81:96:4a:dc:83:
                    53:e0:10:58:9b:c6:a3:77:9e:00:b4:4e:38:8e:9d:
                    24:05:bb:88:12:de:c4:0a:2d:13:97:7a:01:13:b7:
                    d7:0c:33:6d:1e:d3:dd:3f:0b:a0:12:18:9f:4a:cc:
                    75:c3:64:c6:f5:31:66:bf:e8:1f:29:81:11:88:2f:
                    4d:27:66:d6:e9:25:20:2b:99:dc:50:81:04:aa:77:
                    9a:fb:d4:25:b0:b3:93:cd:3a:bc:d8:54:51:a3:1c:
                    e0:93:a8:f1:2a:34:fb:e9:92:53:87:81:c5:d7:9a:
                    6a:45:cb:26:9d:49:dd:ed:04:15:f8:2e:63:6d:2e:
                    20:08:76:ac:37:ce:64:40:87:d2:f2:ad:d3:4c:25:
                    13:31:a2:0a:85:73:54:05:39:ce:0f:13:f5:13:91:
                    89:57:4e:bf:da:81:8c:7a:e1:93:ca:98:da:c5:f4:
                    ef:42:bc:cc:4f:04:8c:91:cf:de:8c:d5:83:c3:f6:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:24:B7:9C:E8:A6:F4:46:94:76:E8:5C:A6:96:19:D0:2E:91:F3:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d46081fb-f3d9-3ee1-a3ba-bbd8d836b028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:a4:52:8a:ed:d8:70:ba:6f:e5:b3:a8:96:5c:94:c8:86:e0:
         f6:c0:cb:8b:3a:10:87:2d:8a:6d:7f:af:d9:24:ee:c5:90:03:
         fe:aa:d2:d3:98:f8:83:f7:96:36:24:6d:b2:fa:9f:77:3e:57:
         4a:e3:bf:f4:0a:0f:6c:1d:7b:a3:47:39:1d:5f:ad:6b:d9:07:
         22:0d:65:a2:82:77:a0:3f:5e:1f:be:40:7b:39:0c:a3:16:7e:
         b9:2b:b0:fa:e7:59:f3:eb:6b:47:6c:fd:62:78:95:16:af:c4:
         96:ad:1b:24:cd:07:37:24:6b:02:e8:42:f7:80:df:15:a3:78:
         9b:b2:ce:45:fb:3e:0c:e7:2a:9a:79:58:bf:2e:6f:a8:8d:ac:
         cb:eb:60:59:a6:b8:06:80:9b:40:27:2f:db:29:a9:e8:8e:16:
         88:84:c5:12:6b:89:a5:9a:55:2f:5f:52:8f:24:4a:0a:d6:03:
         d5:2b:11:4d:51:75:4e:a8:c6:57:d0:8c:b8:ce:c3:6e:c7:d4:
         61:df:32:2b:ef:d1:99:b5:07:56:c3:63:4d:57:ab:25:62:e1:
         d0:35:de:dc:dc:21:10:e7:c7:d2:fd:45:28:95:70:94:e1:f8:
         48:1a:cf:a1:91:73:5e:8a:da:4b:d5:e1:f5:d3:5f:8d:8f:e9:
         c9:82:e7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:49:03 2025 by rpki-client