This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f14fbe45-3044-31cd-9562-84ebda78af67.roa
File:                     f14fbe45-3044-31cd-9562-84ebda78af67.roa (raw, json)
Hash identifier:          wNSqfkNOIpwBNlGHykbZdH1hecueROBVglgsjv+HDck=
Subject key identifier:   0F:A6:37:B2:C6:18:C2:7A:BC:FF:3F:DA:3A:B4:15:1B:F1:56:B2:64
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F8105BCE140C9E2B7B9A9B900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f14fbe45-3044-31cd-9562-84ebda78af67.roa
Signing time:             Fri 07 Oct 2022 12:00:00 +0000
ROA not before:           Fri 07 Oct 2022 12:00:00 +0000
ROA not after:            Sat 12 Nov 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        52.208.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:81:05:bc:e1:40:c9:e2:b7:b9:a9:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct  7 12:00:00 2022 GMT
            Not After : Nov 12 05:00:00 2022 GMT
        Subject: CN=82128cc1-2fbc-4f31-8efd-ea43885f4a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:d2:18:42:eb:18:da:99:92:47:ce:a7:98:
                    2e:18:37:92:f6:f2:ec:e4:67:50:96:b8:96:30:9d:
                    3f:1d:37:30:4c:7b:89:61:bf:3b:72:18:33:95:40:
                    3b:5a:12:50:ec:3b:67:ed:1e:f8:48:6a:4b:14:b6:
                    d7:5c:8a:1c:45:4c:c2:39:27:81:cb:65:b3:27:e8:
                    b8:a6:e8:c7:53:a1:1d:54:43:7d:de:ec:11:5e:af:
                    64:6f:65:04:66:82:7c:ba:c6:69:f6:e0:4b:50:9e:
                    59:77:a5:f3:1a:5d:14:9d:0d:97:4a:5a:9d:23:a1:
                    97:e8:74:b0:f0:85:98:20:bc:a7:89:e4:00:52:ad:
                    19:0c:33:e9:38:54:2b:59:1b:67:f8:40:5b:36:a8:
                    b6:f4:66:91:9a:b5:63:f0:3b:48:98:9a:b8:24:e5:
                    84:42:13:d4:07:db:df:98:0e:a5:d2:fc:1d:6b:42:
                    9f:15:75:1c:c6:f4:8c:04:b9:62:e3:d8:fd:ac:34:
                    0d:10:fe:d7:0f:50:ef:ee:22:9d:7b:ce:01:48:36:
                    01:f7:ef:22:aa:7c:1d:4a:22:2c:fc:79:80:3b:06:
                    1d:14:ce:56:3d:e6:c7:35:e3:61:6f:6b:e3:aa:84:
                    ed:ca:91:86:b1:0c:92:dd:82:d4:1d:27:ce:a0:96:
                    2f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A6:37:B2:C6:18:C2:7A:BC:FF:3F:DA:3A:B4:15:1B:F1:56:B2:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f14fbe45-3044-31cd-9562-84ebda78af67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.208.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:23:36:e7:fb:09:53:f5:f2:a4:e1:21:57:92:1a:fc:02:f1:
         df:33:ea:93:7e:82:bb:4c:9c:42:41:76:7c:77:69:18:ec:86:
         a1:dd:2c:c0:99:f3:4a:65:fc:1e:6f:fe:46:5c:c4:34:ba:db:
         99:3d:a3:3c:4c:b4:a6:5b:e4:eb:bc:b2:af:0b:ad:9d:ee:4b:
         10:a3:c5:63:06:dc:92:58:41:ab:69:45:9e:c9:2a:13:80:ad:
         56:f9:d2:0e:c2:a4:64:0b:fc:c5:98:79:6f:11:ec:50:ef:00:
         04:d2:f8:e1:37:ff:e7:34:4b:86:1a:f8:a2:d5:92:71:03:06:
         75:bb:e7:ac:8c:8c:24:0e:81:c2:49:65:ee:4d:3d:1c:c0:92:
         17:3d:37:82:a5:d0:30:f9:4b:e1:ab:55:57:28:3c:f0:db:56:
         f4:9a:d8:9d:fd:de:5a:1b:36:84:da:d7:cd:1d:bd:11:3d:65:
         97:fa:db:6e:06:90:61:8a:ac:33:c0:f1:3d:21:cc:60:a5:3a:
         c3:a0:fd:bc:26:1f:50:bb:d5:74:32:9e:f2:e4:33:1a:d8:d2:
         90:2b:73:e7:1d:18:9b:61:5e:2f:61:e6:86:9e:44:52:a5:aa:
         4c:47:2f:88:f3:11:3c:c3:7e:b3:c9:08:de:a5:3e:dd:04:d9:
         5e:a8:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----