This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1005b1e-41e2-3c69-9458-81d38293c8d1.roa
File:                     e1005b1e-41e2-3c69-9458-81d38293c8d1.roa (raw, json)
Hash identifier:          MZ1K/dh7MJNwdfG/c3ynXmFn8I/xX5NvjDByX/Xzi9k=
Subject key identifier:   2A:A0:59:57:55:7F:DB:90:D4:C1:34:BA:C5:B0:3A:2C:80:29:4C:50
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCC1D88E5E205053076EC3A60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1005b1e-41e2-3c69-9458-81d38293c8d1.roa
Signing time:             Wed 04 May 2022 12:00:00 +0000
ROA not before:           Wed 04 May 2022 12:00:00 +0000
ROA not after:            Thu 09 Jun 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.254.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:1d:88:e5:e2:05:05:30:76:ec:3a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  4 12:00:00 2022 GMT
            Not After : Jun  9 04:00:00 2022 GMT
        Subject: CN=66f8c23a-dc67-4836-968d-4af81c815ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:1c:f8:ee:b0:ec:48:d8:4d:fd:fa:1c:a1:
                    f8:b0:f7:34:1e:26:c4:e0:44:15:9e:80:98:61:c0:
                    88:77:0b:cc:e8:3a:ab:ac:b5:90:a8:73:09:c6:f9:
                    f7:12:79:dc:44:ce:20:e7:89:bd:1a:1f:28:0f:05:
                    a8:3e:a6:66:94:33:d2:7c:b1:bf:f4:4f:43:09:52:
                    d3:3d:25:8d:08:80:e4:95:e8:1d:3f:4f:76:51:db:
                    cf:64:a8:99:7c:05:e8:c5:51:7e:c4:56:e8:2a:46:
                    e8:31:8e:06:90:3f:e2:cb:88:f9:37:08:34:11:ea:
                    85:0b:0b:7f:a5:40:01:d7:ec:e1:09:30:86:a5:99:
                    ee:d3:e2:bf:88:b7:31:1e:96:04:de:74:52:a7:42:
                    0b:4c:e1:50:46:3e:67:2e:a1:5f:33:ca:31:cc:a8:
                    2a:54:5f:d5:91:a8:b4:53:3b:7d:0e:f6:61:0d:b0:
                    50:21:6f:a5:b6:ab:5a:5f:8e:70:91:e3:c3:f1:c1:
                    76:50:35:28:38:6c:cb:2a:19:b6:52:55:3c:10:9c:
                    85:69:d5:c7:63:96:04:b0:1b:89:08:7f:59:c0:4b:
                    aa:da:07:04:c7:76:aa:91:4a:5c:ac:dd:85:8a:4b:
                    aa:e7:99:d4:35:f3:d0:74:95:6b:0c:9e:b7:83:85:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A0:59:57:55:7F:DB:90:D4:C1:34:BA:C5:B0:3A:2C:80:29:4C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e1005b1e-41e2-3c69-9458-81d38293c8d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.254.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2f:c9:98:13:20:eb:93:00:15:c8:4c:66:09:ba:c2:52:65:
         41:6d:73:ae:b7:76:38:80:47:e4:98:81:af:7c:65:a9:13:5c:
         27:d7:98:56:c7:75:da:cc:98:c2:96:30:4f:0e:7b:e8:bb:88:
         bf:3f:6c:80:c8:c7:ac:fd:dd:16:0d:42:7b:e5:22:7c:18:83:
         ce:07:b7:e4:ef:37:5b:8c:1b:4c:e5:21:be:b0:4c:dd:51:a4:
         ad:5e:2b:d3:0d:96:8b:dc:46:ca:88:a3:0b:02:24:de:f5:11:
         de:62:bc:a2:d1:51:37:d8:50:e5:ce:ef:1a:d5:e0:06:a9:68:
         bd:d6:50:42:5a:ec:f5:3a:4b:5e:bc:f9:26:a5:b9:22:b6:34:
         34:a3:fe:e9:60:be:a7:f7:5e:47:86:c9:25:98:5a:6f:35:59:
         65:66:1a:32:c1:22:16:58:40:83:03:97:b0:0e:3f:99:8e:f1:
         6d:03:17:ed:8a:2b:60:47:c2:00:f4:10:36:0e:d4:0d:7b:6b:
         26:5a:35:2a:cb:68:24:a3:02:90:fd:21:20:72:5f:a2:bc:20:
         da:99:d3:71:56:a1:6b:21:ee:fd:f7:7f:c4:22:03:57:c9:9c:
         f1:90:bc:00:ca:5a:38:b9:49:11:a2:2a:63:44:12:9e:b3:5f:
         eb:ef:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----