This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e901ea8a-9eec-389b-99b6-b5dd67ed31c7.roa
File:                     e901ea8a-9eec-389b-99b6-b5dd67ed31c7.roa (raw, json)
Hash identifier:          RALIN5PDktTd3ejOxjB086B7bRYkU9/c6twQj0QmaqQ=
Subject key identifier:   3C:63:C1:66:E0:84:6B:EF:AE:27:BF:08:CF:72:DA:DB:BF:7D:C5:0B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C961DE54D41F771F01598E140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e901ea8a-9eec-389b-99b6-b5dd67ed31c7.roa
Signing time:             Fri 14 Jan 2022 05:00:00 +0000
ROA not before:           Fri 14 Jan 2022 05:00:00 +0000
ROA not after:            Fri 18 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.188.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:96:1d:e5:4d:41:f7:71:f0:15:98:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 14 05:00:00 2022 GMT
            Not After : Feb 18 05:00:00 2022 GMT
        Subject: CN=3a711cd1-e58c-4c39-812c-828cbcae62c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bb:9c:84:69:90:f7:ee:2c:38:f3:6a:21:97:
                    09:4d:d6:d1:da:89:57:20:88:46:8a:65:3d:2e:98:
                    82:f7:b5:66:c8:3b:4b:77:ff:3c:ab:12:53:a2:5e:
                    81:fa:b9:e7:56:34:f6:d4:5c:c7:51:da:00:e2:ec:
                    94:64:43:01:5c:35:45:ea:d0:99:f5:3f:15:c6:57:
                    df:e3:e3:10:ec:97:82:a6:a5:05:ae:e2:f5:d4:67:
                    e8:13:51:ed:8c:98:39:67:83:75:a4:d7:67:af:9c:
                    0b:25:9c:90:18:55:be:3c:ae:1f:a2:d3:75:8a:5b:
                    79:10:c6:4d:70:0b:6b:c7:a8:2e:a3:5d:b0:70:14:
                    08:e1:73:5c:a8:77:01:39:44:72:d8:c9:bc:fb:60:
                    b7:59:90:30:32:62:fe:e3:cb:6e:91:44:07:b3:8b:
                    7b:74:28:f7:3c:20:54:ee:88:3a:0a:d5:2a:b7:27:
                    fb:39:d5:f3:56:ed:55:54:e8:0c:ee:d7:d6:cb:e1:
                    ff:7a:8e:3d:d8:33:28:9e:9a:c5:ad:e9:6e:52:4d:
                    d2:ca:e8:1c:ea:b6:f5:f7:80:59:3d:19:10:de:94:
                    3f:54:c3:59:d7:a3:6b:94:7d:13:c3:71:e0:e7:c5:
                    24:c3:06:9c:ba:a6:2f:cb:fc:54:a8:c2:d7:87:7f:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:63:C1:66:E0:84:6B:EF:AE:27:BF:08:CF:72:DA:DB:BF:7D:C5:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e901ea8a-9eec-389b-99b6-b5dd67ed31c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:2c:73:1d:a9:b7:d5:ff:9d:37:a4:73:07:f2:b0:04:68:ac:
         bf:49:b5:49:a2:4a:82:a4:15:7a:83:fa:8a:76:04:a0:bc:bf:
         ef:21:a5:53:03:ac:6b:12:ad:62:d4:bc:3f:45:d7:db:65:63:
         23:db:55:16:06:55:ce:a9:db:3f:df:5a:8d:88:6e:57:90:63:
         9a:d3:b3:8b:d3:ba:90:0a:6b:d2:24:7a:24:54:4f:1a:b5:4f:
         22:d1:01:ac:be:6c:67:6d:2e:e8:f1:a2:a8:a1:ea:36:6a:59:
         3b:95:ac:3a:cc:4f:41:be:ee:24:82:56:75:1e:1b:38:84:3c:
         cf:52:73:67:e7:61:45:12:e6:2c:c0:47:38:49:1a:cb:41:12:
         15:2d:62:e0:c9:cb:b4:b5:ee:41:62:7b:71:91:46:d1:ab:2f:
         a7:3e:d1:03:ad:9b:58:55:a3:d4:50:50:53:93:2e:44:e6:3f:
         10:02:87:19:5d:ae:20:14:46:a5:c3:11:fe:80:d1:7d:fa:26:
         06:f6:e2:22:5e:7b:bb:41:00:39:64:09:da:a8:ea:75:b9:02:
         d6:4d:2b:8d:66:c6:24:f0:e2:b3:c4:e3:a5:1e:c0:61:f2:dd:
         43:c5:28:53:5d:52:ee:83:6c:18:91:f3:86:c8:f8:89:e5:83:
         d7:89:ea:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----