This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0a17aa6-6d56-33b7-9f23-29c9e76a72fd.roa
File:                     e0a17aa6-6d56-33b7-9f23-29c9e76a72fd.roa (raw, json)
Hash identifier:          NvU9tQJXkTpjmJU5rqqeiU6dXJI0IGBsxa2LNW2jjpM=
Subject key identifier:   EB:0D:DB:0D:1A:A3:10:ED:68:A7:6E:86:C9:9B:FE:ED:16:6E:E1:8B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858406D8FFE28054E56F7268910C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0a17aa6-6d56-33b7-9f23-29c9e76a72fd.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Sun 05 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.110.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:6d:8f:fe:28:05:4e:56:f7:26:89:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Feb  5 05:00:00 2023 GMT
        Subject: CN=d5b48f64-c69e-4e7c-b47c-1c0bfb2ca4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:eb:58:ec:19:4f:d3:04:30:ac:8f:34:ce:
                    af:73:9c:9f:31:d0:66:80:86:dd:a6:98:ca:80:84:
                    d3:4c:ee:aa:f7:a8:2c:01:5e:33:aa:c9:7b:33:a9:
                    19:44:e1:19:98:d2:ca:3d:80:db:db:42:4d:0f:5f:
                    74:7b:ce:a8:ff:89:8f:a5:c5:57:9b:36:98:ac:fa:
                    4a:35:53:99:c2:f6:a5:53:b0:23:0a:53:57:c7:45:
                    42:7e:b0:3c:62:37:04:38:ac:dd:e1:66:c8:55:c3:
                    21:f7:5f:42:05:3a:74:d1:d4:0a:00:0d:25:ad:6d:
                    0a:c8:fc:30:d1:6e:6a:0f:9f:ea:e4:75:51:c1:d4:
                    c9:fd:6c:65:25:9e:87:0c:06:71:64:83:f1:18:0d:
                    be:b3:db:13:b6:c2:3b:1c:c2:29:33:41:58:2e:a3:
                    44:29:e3:bb:1f:e9:78:d8:42:b0:c6:f5:72:3f:c5:
                    fc:44:d9:57:71:7c:ea:a4:ee:dd:5f:5e:a6:34:1d:
                    55:16:e2:c7:de:b0:cc:06:36:c5:45:20:da:85:72:
                    5f:47:9d:6a:97:69:b9:e1:f2:ae:5e:d9:11:74:b5:
                    d1:d4:ee:ab:7c:ca:79:4b:40:a7:de:5e:ce:11:b5:
                    b2:03:6a:8e:ef:1a:4d:9c:bd:32:82:61:43:46:b3:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0D:DB:0D:1A:A3:10:ED:68:A7:6E:86:C9:9B:FE:ED:16:6E:E1:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e0a17aa6-6d56-33b7-9f23-29c9e76a72fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:69:e6:c5:34:fa:c7:8f:b6:c8:61:9a:37:b5:66:6a:9c:e8:
         ed:d7:0a:8e:cc:ad:1d:ee:39:9d:b5:75:72:7c:4c:9d:49:57:
         82:13:68:b1:ad:95:de:46:fe:db:ce:0d:36:c5:45:98:a4:28:
         ba:b2:3e:17:8d:ec:48:79:1f:6a:86:18:34:5d:6a:4d:2b:b3:
         36:7d:b6:18:6d:5d:82:0e:11:fe:f6:45:f4:e9:7a:4a:92:bd:
         7f:ad:cc:50:38:77:6a:68:fa:cc:48:84:be:48:5e:6d:43:4f:
         d8:35:1c:a3:1f:67:66:4a:0d:bb:a2:11:9b:b7:50:61:f8:34:
         49:1d:96:13:60:1d:11:87:a7:89:e7:01:e2:56:19:20:90:9b:
         35:06:63:18:c3:81:1b:00:99:1b:30:96:bc:84:e2:b5:78:8e:
         28:f8:16:f9:58:5b:22:fd:37:d5:41:ec:c7:8c:86:fa:91:7e:
         0c:6f:4b:3f:c7:fb:c2:20:38:b8:2f:1f:c1:fa:9f:18:2a:84:
         c8:04:a2:69:3b:9c:48:31:77:bc:1d:ae:5a:a2:0d:5a:77:6e:
         0e:05:72:64:39:89:cc:94:92:3d:4e:7f:49:1b:ab:72:80:80:
         dc:3e:c9:9f:fe:79:cd:29:c4:ca:1a:34:3d:23:89:17:61:d6:
         5f:b3:99:1a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBtj/4oBU5W9yaJEMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIzMTEyMDAwMFoXDTIzMDIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZDViNDhmNjQtYzY5ZS00ZTdjLWI0N2MtMWMwYmZiMmNhNGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovvrWOwZT9MEMKyPNM6vc5yfMdBmgIbdppjK
gITTTO6q96gsAV4zqsl7M6kZROEZmNLKPYDb20JND190e86o/4mPpcVXmzaYrPpK
NVOZwvalU7AjClNXx0VCfrA8YjcEOKzd4WbIVcMh919CBTp00dQKAA0lrW0KyPww
0W5qD5/q5HVRwdTJ/WxlJZ6HDAZxZIPxGA2+s9sTtsI7HMIpM0FYLqNEKeO7H+l4
2EKwxvVyP8X8RNlXcXzqpO7dX16mNB1VFuLH3rDMBjbFRSDahXJfR51ql2m54fKu
XtkRdLXR1O6rfMp5S0Cn3l7OEbWyA2qO7xpNnL0ygmFDRrOCFwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOsN2w0aoxDtaKduhsmb/u0WbuGLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTBhMTdhYTYtNmQ1Ni0z
M2I3LTlmMjMtMjljOWU3NmE3MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEm4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjmnmxTT6x4+2yGGaN7Vmapzo7dcKjsytHe45nbV1cnxMnUlXghNosa2V
3kb+284NNsVFmKQourI+F43sSHkfaoYYNF1qTSuzNn22GG1dgg4R/vZF9Ol6SpK9
f63MUDh3amj6zEiEvkhebUNP2DUcox9nZkoNu6IRm7dQYfg0SR2WE2AdEYeniecB
4lYZIJCbNQZjGMOBGwCZGzCWvITitXiOKPgW+VhbIv031UHsx4yG+pF+DG9LP8f7
wiA4uC8fwfqfGCqEyASiaTucSDF3vB2uWqINWnduDgVyZDmJzJSSPU5/SRurcoCA
3D7Jn/55zSnEyho0PSOJF2HWX7OZGg==
-----END CERTIFICATE-----