This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd324dff-03be-3a9b-b2cd-6d7be9492d2e.roa
File:                     dd324dff-03be-3a9b-b2cd-6d7be9492d2e.roa (raw, json)
Hash identifier:          RY1gWdO4U456WzSM14MWc+evSoYjo6zPcjH1N7fCdbk=
Subject key identifier:   FC:43:9D:4A:07:39:2C:4E:DA:83:4F:65:0C:22:10:87:05:B8:DA:07
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EE64123F377DA2CB9B6D88B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd324dff-03be-3a9b-b2cd-6d7be9492d2e.roa
Signing time:             Sat 13 Aug 2022 12:00:00 +0000
ROA not before:           Sat 13 Aug 2022 12:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        130.71.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e6:41:23:f3:77:da:2c:b9:b6:d8:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 13 12:00:00 2022 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=c2229225-6a78-4d30-917d-0a7584d7ebfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:d6:c9:ae:9c:b9:56:a3:ad:2e:4f:5a:29:
                    36:b1:50:20:a5:e3:5b:57:6a:40:64:ac:ca:46:aa:
                    4a:0b:be:3d:9a:dd:e7:9e:24:ab:ef:cd:64:e0:c5:
                    d7:b1:32:50:71:45:32:f3:69:ab:f2:35:e4:2c:a2:
                    e7:4e:88:f1:41:f6:28:a0:92:12:fa:27:ab:cd:8b:
                    0c:57:67:30:65:59:2d:ea:9c:de:b2:50:f2:2b:ed:
                    b5:31:e2:38:cc:27:ba:df:6a:6b:bd:b8:fe:e3:28:
                    5b:75:0b:cc:d0:c0:bb:75:02:22:2d:9d:b9:e5:95:
                    18:20:98:bb:36:f1:b6:4e:f1:a2:0f:b5:e6:86:25:
                    28:86:e4:a3:82:8c:ae:34:65:1b:47:c1:ad:cc:5b:
                    80:73:07:59:ba:3f:fa:6d:ff:97:50:6a:ba:ed:a4:
                    ac:37:70:c8:2f:6a:91:04:a6:54:21:a3:39:a0:71:
                    09:08:f2:e5:22:bd:12:bc:c5:6a:9a:2e:4f:06:43:
                    47:4b:65:32:b1:14:1b:85:e8:a4:27:ab:6d:64:c2:
                    95:a3:b7:ae:41:6b:00:65:4c:f7:00:0d:6c:7d:a0:
                    16:5e:d1:6c:d5:d2:a7:b8:a3:07:16:21:79:a5:5e:
                    58:a6:35:9a:4f:49:1c:54:db:af:35:0a:2d:d4:e5:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:43:9D:4A:07:39:2C:4E:DA:83:4F:65:0C:22:10:87:05:B8:DA:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd324dff-03be-3a9b-b2cd-6d7be9492d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e4:5f:63:c0:32:e0:f5:c1:c8:7d:f6:c2:d5:57:a8:e3:61:
         2d:92:c4:dc:c5:58:61:b1:a1:e1:e6:9d:73:85:69:e7:2e:29:
         8a:d0:1b:89:37:0d:80:aa:41:5e:f9:87:52:7b:ac:65:18:ae:
         8f:2e:04:e3:59:8d:51:e9:1a:8f:cb:df:61:f1:85:3c:54:62:
         78:25:24:2a:3f:08:39:35:ac:b9:00:1a:21:9e:c6:50:69:24:
         ad:5e:28:92:2c:c2:97:a2:c5:77:83:21:1c:09:85:8c:97:0a:
         cb:61:07:8f:e8:2f:bd:bc:65:30:f2:04:25:f0:7d:e4:cc:1f:
         a4:44:78:68:d6:ca:f5:5e:5c:df:7b:3b:a8:5d:7d:80:62:ff:
         55:c8:24:05:22:93:ea:a7:35:da:74:e3:cc:05:5b:94:d9:fc:
         d4:0c:83:b3:d0:0f:a3:4f:a1:94:21:63:9b:7d:16:d4:c1:b5:
         67:1b:74:7b:f4:f7:2c:37:ae:aa:cf:c0:d6:04:22:b9:b5:83:
         11:e3:58:9b:82:06:d1:ab:d7:cd:25:8f:3f:22:53:96:73:49:
         2c:fc:44:21:3c:50:a4:a9:45:3a:8f:45:17:c7:f1:65:f3:59:
         e5:63:5c:f1:fc:2e:5a:57:03:db:6d:ed:ab:85:82:3e:b0:85:
         70:38:3a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----