This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef2b8375-238c-39ba-b977-2dffc3fabfbf.roa
File:                     ef2b8375-238c-39ba-b977-2dffc3fabfbf.roa (raw, json)
Hash identifier:          K0iY7mgT9jF5Hr0dHbmVWf04b0n8aUItJvXtUfThOPI=
Subject key identifier:   36:C1:F7:31:75:2A:E7:AD:2A:A4:DD:FB:AA:BE:B9:AF:53:01:F4:4D
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FD6241799FA1DEB5762EC6E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef2b8375-238c-39ba-b977-2dffc3fabfbf.roa
Signing time:             Mon 07 Nov 2022 12:00:00 +0000
ROA not before:           Mon 07 Nov 2022 12:00:00 +0000
ROA not after:            Tue 13 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        136.13.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d6:24:17:99:fa:1d:eb:57:62:ec:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  7 12:00:00 2022 GMT
            Not After : Dec 13 05:00:00 2022 GMT
        Subject: CN=06624041-9a57-456b-b634-c9864346dc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:53:06:a6:7d:fa:32:9e:23:79:bb:7a:da:1c:
                    65:0d:85:b1:b7:a5:8b:9c:5d:9f:7c:3d:13:a3:0c:
                    09:1d:18:57:8e:d4:22:0f:2f:56:b0:40:a8:0a:92:
                    5e:0e:d1:30:55:8c:eb:3c:61:e1:82:bb:39:73:9e:
                    3c:c0:8f:27:26:5c:b6:31:58:c8:eb:39:2b:29:cc:
                    10:0c:58:20:9a:a8:2d:0f:dd:ca:82:8a:01:99:12:
                    16:89:de:fb:43:cf:46:04:72:8d:86:c0:0f:00:98:
                    9d:d8:44:69:b6:74:d3:64:17:9e:03:05:ff:7a:c1:
                    9b:c9:46:c8:1a:15:e3:93:66:02:ef:d1:f4:28:eb:
                    c4:c2:a2:74:93:4f:fa:52:dc:bd:b9:56:fd:28:75:
                    f5:51:12:5a:8c:eb:0f:ef:12:4f:5e:22:f8:25:14:
                    ac:8b:e5:03:e2:01:b7:9e:d3:2a:67:2e:8d:61:5a:
                    98:d2:25:5e:32:b4:b8:da:1e:6c:b5:b0:a7:b8:dc:
                    c5:3c:11:e1:02:77:5e:a1:30:41:46:ce:6d:38:60:
                    ed:37:04:82:32:a6:59:cd:35:f6:50:3b:65:b8:6b:
                    ba:11:b7:da:55:69:01:a8:3d:78:c3:c0:45:1c:f9:
                    dd:e9:98:c4:57:8e:d5:30:d9:54:b9:aa:86:e9:3b:
                    52:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C1:F7:31:75:2A:E7:AD:2A:A4:DD:FB:AA:BE:B9:AF:53:01:F4:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef2b8375-238c-39ba-b977-2dffc3fabfbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.13.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:50:09:3c:0b:13:21:df:e3:74:da:63:3c:81:6e:4b:63:f9:
         02:1e:62:4e:ea:f3:87:62:18:82:ec:ab:e7:a1:c1:f3:aa:0a:
         d1:5f:f6:b9:42:de:97:ec:64:7d:18:6a:bd:12:2a:2b:0f:88:
         63:77:a1:fe:48:d6:1a:e1:f0:79:a5:22:18:96:1c:05:c2:30:
         7f:4b:bd:68:fc:6f:60:77:60:99:fa:48:3f:70:cf:bf:18:e1:
         1d:4e:47:26:89:aa:c9:9c:a5:6b:53:62:1b:3e:b4:dd:da:b6:
         1a:12:ba:37:be:f4:95:2c:6c:65:3e:3e:bd:aa:3f:3c:f4:a7:
         ab:ba:ea:4b:5d:06:e2:d5:cd:5c:a3:e5:d3:b6:6b:b8:57:7c:
         50:23:77:e7:74:1e:05:63:e0:fb:ba:a0:34:97:8c:26:35:7b:
         24:fa:25:d5:73:34:dd:81:60:c4:c1:8f:ae:16:4f:38:49:40:
         cc:12:7b:f9:6a:09:5b:0e:30:3d:36:f7:04:d1:d1:90:8f:55:
         79:80:a4:f7:b3:34:a6:e5:47:85:c9:67:2e:ee:c3:ad:6e:61:
         ea:d1:f4:57:be:7c:8e:a1:60:fb:e8:44:5f:8f:f1:84:1e:af:
         a5:c4:36:02:c3:54:55:3f:1e:50:e1:ee:83:b0:4e:b3:c7:09:
         9d:86:ad:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----