This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd790f5b-2db3-3b3b-82aa-630aa8feffa1.roa
File:                     dd790f5b-2db3-3b3b-82aa-630aa8feffa1.roa (raw, json)
Hash identifier:          YF5v4ckJL2SGoK/OdstYuiehzP81Wd7GbwLnGzfsumc=
Subject key identifier:   17:8B:D8:69:9D:41:6F:2F:1A:54:55:95:14:BC:16:2D:32:43:75:78
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E70A75489ADE77DE68D0340A0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd790f5b-2db3-3b3b-82aa-630aa8feffa1.roa
Signing time:             Sat 02 Jul 2022 12:00:00 +0000
ROA not before:           Sat 02 Jul 2022 12:00:00 +0000
ROA not after:            Sun 07 Aug 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.59.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:70:a7:54:89:ad:e7:7d:e6:8d:03:40:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul  2 12:00:00 2022 GMT
            Not After : Aug  7 04:00:00 2022 GMT
        Subject: CN=10e9d32c-2180-40d8-9c3a-0035c8b4d627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:42:29:4d:9c:a9:90:6b:e2:04:08:8d:1e:
                    8d:6e:cd:68:09:8c:13:a8:4a:0f:81:d2:7d:15:9e:
                    99:8f:07:40:d6:e1:ad:2e:99:c1:22:2e:69:13:f9:
                    5f:7a:6f:ac:98:e6:d3:8f:07:1e:42:c6:39:a0:e0:
                    c4:51:af:6c:f1:45:87:41:c3:fb:6f:6e:22:be:b9:
                    a8:10:d1:9f:55:0e:87:7d:36:c2:38:ef:74:86:19:
                    f7:6b:6e:2d:15:15:df:5d:7a:7b:aa:8f:55:2e:52:
                    b1:ef:64:83:64:71:94:13:d9:66:f4:24:60:7a:fd:
                    d7:e4:7b:96:9e:78:be:2c:17:30:8c:a9:15:7e:db:
                    5e:2a:1b:01:e4:1d:45:16:2f:0e:dc:70:23:21:6e:
                    09:9e:6f:b8:85:a0:91:ce:10:99:38:38:1c:f0:fb:
                    7d:9c:3f:e8:62:6d:90:00:b9:0b:ae:a8:64:85:12:
                    fc:34:73:bd:ea:8a:95:ba:34:d7:3d:cf:1b:49:ac:
                    0d:5d:06:c1:e9:3a:44:f6:8a:fa:85:b2:d5:f0:c5:
                    14:d2:e3:49:64:f5:f0:7a:30:80:83:2e:34:cd:1c:
                    26:31:d2:bb:d1:37:44:09:15:0b:a8:df:e7:32:fe:
                    94:ab:b1:68:b5:a5:f3:67:04:d2:9c:d6:e5:9d:57:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8B:D8:69:9D:41:6F:2F:1A:54:55:95:14:BC:16:2D:32:43:75:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dd790f5b-2db3-3b3b-82aa-630aa8feffa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.59.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:de:7f:88:a3:7b:4b:ab:19:cf:16:4c:bf:10:94:e4:08:4f:
         36:ed:09:df:08:44:ee:91:ac:4a:f1:f5:c9:c8:44:da:c2:92:
         f5:03:df:61:c1:1e:94:8d:b1:d9:71:b2:f8:40:01:55:8a:34:
         76:19:75:0a:28:53:f2:fa:25:38:0b:fc:96:65:0f:37:e8:1e:
         a5:70:a7:24:bc:10:5f:d6:e6:ee:15:1a:e0:13:49:56:76:00:
         8a:7e:bc:57:09:64:c2:ca:16:88:00:28:71:a3:a8:97:2a:99:
         94:d6:c8:4f:08:03:76:a2:44:a6:9f:e0:82:5f:f0:2e:12:ed:
         e5:38:80:94:b6:1b:76:b5:ca:ab:2d:8b:a3:53:9e:80:4c:a2:
         bd:d0:2c:30:61:95:ec:c3:d4:75:4d:14:ee:af:62:01:5a:e6:
         17:5a:0a:be:d3:61:d4:2e:bb:6a:81:58:a3:6d:59:39:b5:04:
         5c:cf:8f:96:36:ef:9a:ec:ad:a2:22:3f:17:31:96:55:2a:fc:
         d5:3d:f9:45:8b:ad:2a:54:98:86:f9:c2:d6:29:d3:64:6d:23:
         59:f7:15:53:98:c1:f3:2f:3b:34:b3:5f:02:99:41:4e:c3:4a:
         ab:81:07:42:3c:ab:60:6e:3e:f1:7c:eb:d6:aa:ff:90:c6:2c:
         ec:69:67:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----