This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f159ddf5-a6ae-3fa6-9ead-5a79fa803633.roa
File:                     f159ddf5-a6ae-3fa6-9ead-5a79fa803633.roa (raw, json)
Hash identifier:          1hrrSt1Skd6HdUmXwGz9IqLbyjE104ajS+YxQ0gJxNQ=
Subject key identifier:   8D:2B:82:D1:56:83:7A:4B:67:25:4A:5B:65:D7:61:98:9C:CA:E5:0E
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C6BB0A96CA403114FFE185F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f159ddf5-a6ae-3fa6-9ead-5a79fa803633.roa
Signing time:             Thu 30 Dec 2021 05:00:00 +0000
ROA not before:           Thu 30 Dec 2021 05:00:00 +0000
ROA not after:            Thu 03 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        15.188.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6b:b0:a9:6c:a4:03:11:4f:fe:18:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 30 05:00:00 2021 GMT
            Not After : Feb  3 05:00:00 2022 GMT
        Subject: CN=ad893cd9-6f81-4eae-a512-fdf5c0767f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:6c:d1:8f:fa:f6:ca:7b:a3:f2:f9:20:ed:
                    ad:03:b8:48:60:44:40:d2:88:5b:88:2a:86:36:77:
                    2d:b7:86:0b:39:c1:7e:b8:28:0f:7f:ca:22:d5:f0:
                    fe:25:35:2b:1d:79:50:73:35:d9:5f:b0:88:cc:d6:
                    1f:d4:15:27:1d:fe:79:ce:c2:38:fb:06:32:a3:0f:
                    1f:7d:22:81:79:3e:d1:59:d8:6e:0b:ba:3a:31:dc:
                    00:dd:8e:c1:17:de:57:f2:bd:83:ba:82:68:69:d5:
                    3b:ed:40:09:ca:fa:55:58:5f:22:15:56:41:36:3d:
                    5d:67:ed:31:b1:3f:e5:41:30:54:09:cf:09:11:6a:
                    84:b4:31:7e:e2:03:ae:cb:47:14:ce:51:76:52:0a:
                    f8:57:c3:69:2a:ff:3c:c3:f7:4c:55:f9:f4:21:b2:
                    d4:86:d3:1f:a9:50:09:40:3a:ac:9f:a6:59:83:d2:
                    e2:f1:2d:16:be:45:f3:66:8a:89:33:79:db:9f:ce:
                    52:17:10:5a:55:4c:ab:ec:6a:5b:21:c6:8e:d3:be:
                    fc:b1:c8:27:8d:ad:79:11:3a:97:47:27:20:ad:20:
                    23:89:c4:1c:99:ca:06:b7:de:dd:f8:b4:93:cf:d1:
                    8c:ee:53:26:0f:05:28:4a:9e:07:78:b1:c8:40:91:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2B:82:D1:56:83:7A:4B:67:25:4A:5B:65:D7:61:98:9C:CA:E5:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f159ddf5-a6ae-3fa6-9ead-5a79fa803633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ad:c3:c0:5d:ff:c0:4e:ec:b3:9d:55:10:02:65:0f:55:34:
         f3:c5:05:c4:11:ad:dd:b9:24:d0:9f:3a:5f:f4:51:15:0b:aa:
         6a:12:9a:cf:5d:5c:83:71:6b:2b:45:98:cc:3b:42:22:a2:ca:
         54:17:1f:90:9a:b3:29:72:56:05:02:77:d4:4f:93:9e:d0:72:
         8a:44:b5:bb:56:10:43:6e:1b:1a:17:8b:d5:d9:56:37:d6:47:
         78:f0:b1:bd:cd:aa:2e:85:d5:c8:44:61:8b:48:b1:78:7c:56:
         4c:85:03:d0:1f:3e:56:04:34:98:d8:cb:ef:e6:d3:b6:bf:b7:
         82:42:4c:2e:2e:a0:94:3d:66:cc:55:fc:8c:6b:d2:76:fb:08:
         0e:f5:d9:71:6c:a2:cd:d8:a0:a5:90:db:b3:28:89:cc:ff:49:
         96:86:42:0e:66:05:b7:75:42:d5:e8:cc:ac:89:be:46:6f:6d:
         68:84:77:23:45:50:31:30:fd:db:ed:0c:35:67:6d:a4:00:00:
         fe:ec:3a:d8:4d:18:68:76:43:ad:37:cd:60:4a:8e:fc:d2:29:
         bf:48:e1:4f:94:77:f0:48:f2:49:f4:5c:1b:84:64:2c:35:9e:
         51:39:8a:1f:ec:3f:60:48:72:08:21:ab:da:bc:e5:21:15:24:
         dc:94:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----