This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d891a4e7-0e21-3478-822f-cf1cb66c5c6c.roa
File:                     d891a4e7-0e21-3478-822f-cf1cb66c5c6c.roa (raw, json)
Hash identifier:          RTZqmRtvXBIJ9HjH7p7fgTpvEXU6bzjqlxxrAUxQ/yA=
Subject key identifier:   4F:0B:19:ED:36:9D:FC:C7:FE:1E:4A:26:9F:A4:B0:E7:BD:DE:9D:19
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858402A9EADF50EFDED49F31CC140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d891a4e7-0e21-3478-822f-cf1cb66c5c6c.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Thu 12 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        15.150.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2a:9e:ad:f5:0e:fd:ed:49:f3:1c:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Jan 12 05:00:00 2023 GMT
        Subject: CN=4437decf-efae-4fe4-8def-877811ba8fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:90:24:bd:c4:c1:a2:58:6c:be:72:1e:d4:28:
                    dc:e3:bb:37:d4:96:43:c2:e7:bb:6d:9e:2b:e5:02:
                    60:4d:90:8e:d8:d1:dc:46:7c:8f:26:2f:e3:35:7a:
                    c9:67:09:ae:79:27:b0:c8:73:f7:18:83:d5:8e:1a:
                    79:de:d2:79:68:a6:8e:7b:9e:a7:29:b6:66:5d:f5:
                    a0:62:ad:91:ee:8a:49:db:54:de:3d:a0:80:f9:65:
                    7e:c0:3e:8e:40:a5:f5:bd:0f:54:5c:d0:01:52:b2:
                    99:a1:ad:11:34:f9:b8:54:02:7f:3f:07:be:29:19:
                    10:73:19:69:4b:66:fb:5f:57:a0:17:15:32:07:ad:
                    e2:c9:48:5b:4a:78:90:c3:f5:90:26:8b:66:8f:c9:
                    16:c7:0e:bc:e0:e0:c4:65:fc:05:fd:9b:5f:70:5a:
                    03:36:10:53:ff:ea:31:38:54:8f:12:c5:f2:ba:fa:
                    c5:c4:d4:b7:98:16:b5:6e:4e:a3:03:b6:51:4b:40:
                    12:1b:28:a0:e6:0f:8c:1b:30:a4:27:22:52:24:b2:
                    c3:c4:d0:cd:30:c1:b6:69:9c:fb:7c:0f:3a:7b:2e:
                    9f:49:33:5d:c5:3f:fa:46:9b:81:a2:d4:03:97:93:
                    70:e5:68:b0:2b:79:ec:33:77:78:6a:97:c2:b6:17:
                    16:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0B:19:ED:36:9D:FC:C7:FE:1E:4A:26:9F:A4:B0:E7:BD:DE:9D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d891a4e7-0e21-3478-822f-cf1cb66c5c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:29:ba:1f:c3:ac:12:f9:b5:f8:c7:28:5a:42:66:7c:ff:3c:
         f8:2b:08:77:2d:ad:93:43:05:6e:3f:31:52:92:b8:57:14:1b:
         01:57:a5:36:e6:b5:16:2c:97:1f:8f:3e:bb:95:fe:99:83:ce:
         10:43:ed:47:9c:96:0e:60:9d:24:b7:ae:dc:43:1f:87:c5:5f:
         46:f5:03:49:b0:55:92:85:b0:0e:79:80:b9:e8:28:d8:f5:f9:
         d6:7c:e4:7e:1e:c9:c1:47:ad:ff:0b:30:77:69:ef:67:f3:7f:
         53:ef:66:d5:52:25:87:28:36:8d:b0:6f:33:dc:e9:52:28:9a:
         0f:29:57:a2:df:c0:93:6d:48:1b:6a:95:cb:ea:41:f3:e6:e0:
         e3:d9:ed:4c:8e:48:15:cb:76:28:c6:d9:52:f4:1a:9f:16:8f:
         48:69:e5:e3:da:a1:ca:58:7f:4a:b7:0f:3b:4c:b1:de:78:c0:
         24:00:da:71:82:06:1a:af:5d:04:db:5e:fc:1f:9a:43:d6:7f:
         3f:c9:14:85:8e:78:39:ef:1d:f8:99:d2:c7:61:12:bc:84:66:
         b2:71:6b:98:05:a3:61:7b:00:eb:8e:ac:16:7d:d0:32:6c:6d:
         93:fa:49:b2:92:6f:8e:22:77:27:76:31:ae:4f:95:80:b9:97:
         db:7c:6b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----