This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d809f80e-83b9-3b67-8bc2-7ab473c5a699.roa
File:                     d809f80e-83b9-3b67-8bc2-7ab473c5a699.roa (raw, json)
Hash identifier:          VWyq4t4jGJ0DbF5JYWEJdXYUeVuV3PdYBlr75GSUuYI=
Subject key identifier:   57:68:0F:55:2D:5D:5D:7E:3B:A5:E7:E4:20:45:88:62:7B:B8:7E:FC
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D0B847ECC6A635267D6671800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d809f80e-83b9-3b67-8bc2-7ab473c5a699.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Fri 01 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.228.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0b:84:7e:cc:6a:63:52:67:d6:67:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Apr  1 04:00:00 2022 GMT
        Subject: CN=e70c7bb2-9366-4e47-a785-847c23a7419d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:25:1b:3d:50:20:d9:f0:d7:d6:ee:a8:22:ce:
                    63:5b:ad:47:98:a8:28:94:ad:42:2b:4c:04:11:c8:
                    ca:17:8a:13:23:e5:75:9c:25:5e:8e:09:3a:b2:cd:
                    ca:0f:5b:ae:61:1a:34:52:f2:0b:35:6e:88:aa:cd:
                    54:9f:0c:88:e8:76:c9:1d:c0:09:22:93:42:7a:e6:
                    7d:66:7b:a6:b4:d5:5e:99:8b:e5:32:c6:e5:bb:26:
                    13:db:4c:08:9e:a2:e4:7a:9e:78:72:f2:72:b3:a1:
                    37:14:bb:94:ce:e4:5c:83:2c:3f:0e:5a:15:40:43:
                    b9:29:36:58:8b:8e:64:9e:00:db:9d:3d:49:52:c3:
                    0e:3a:cc:ea:02:f1:27:87:cf:6e:91:bb:ee:76:e9:
                    1c:7f:09:8e:3d:fd:3d:fa:92:62:a1:10:7a:be:b8:
                    33:c8:e4:6c:e4:9f:ef:18:f9:8b:10:52:c9:b8:bc:
                    f9:35:2d:ba:9c:3c:e4:71:2f:b4:76:f2:bf:33:f8:
                    71:79:aa:30:3c:e5:60:00:de:15:60:fa:05:a5:f8:
                    c6:5c:60:e7:98:5c:2f:e0:8e:74:88:08:f7:30:1f:
                    b6:80:43:ae:73:f4:9e:5a:f9:6f:0e:5e:1e:99:d6:
                    4c:ff:47:fd:e1:7a:08:19:ea:5f:aa:3e:48:da:f5:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:68:0F:55:2D:5D:5D:7E:3B:A5:E7:E4:20:45:88:62:7B:B8:7E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d809f80e-83b9-3b67-8bc2-7ab473c5a699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.228.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:49:e7:eb:a4:d9:59:27:71:de:8d:fc:f7:66:2c:07:dd:cb:
         fd:6a:cf:b4:46:00:9b:94:fc:d3:46:91:f2:39:73:4a:8b:2a:
         a3:e7:8b:33:f2:91:75:d9:c8:aa:dc:0b:bf:89:29:9d:0b:72:
         57:0c:d1:d2:0f:65:30:e6:5a:02:63:a3:8e:78:11:f2:9c:f3:
         b8:60:99:99:cf:d7:6b:9e:9b:e1:5b:c7:46:bc:5c:9a:28:76:
         88:18:37:99:17:00:9b:97:f4:ec:b3:94:3d:77:78:90:ca:a6:
         2c:76:12:46:51:bc:1b:3e:26:8e:0e:09:7c:19:12:f4:c2:6b:
         8d:16:db:4a:8d:67:bc:9e:11:2f:6c:be:c7:be:7c:7f:e7:ff:
         e9:10:dd:07:f3:29:e6:c1:cf:4a:ab:75:ee:18:b8:db:59:81:
         bc:dd:f4:fd:d2:0f:2c:92:60:76:2e:93:16:94:60:31:2c:85:
         94:a5:12:b0:83:04:e9:22:69:01:05:7b:dc:b5:95:4b:4d:65:
         5c:b5:c8:d7:a0:7e:71:15:07:87:ff:32:5c:38:c7:46:22:69:
         3a:74:97:de:28:ca:a4:b6:13:86:0e:d5:a2:2f:67:d0:d3:77:
         21:3e:1b:69:20:8f:09:c0:ef:41:5f:c3:ad:f9:d7:8f:f7:7e:
         bf:9e:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----