This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2bef0f8-3b36-3d30-b649-16fbcfa3d959.roa
File:                     f2bef0f8-3b36-3d30-b649-16fbcfa3d959.roa (raw, json)
Hash identifier:          9U5dtbF0TEFHZKSDOllSN/BLYRcbPOfYXnUSXF5eNr8=
Subject key identifier:   96:3E:93:95:14:A2:F3:ED:30:4C:23:3E:AA:A0:A1:DC:41:30:D4:62
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DCF507E513E9D341341628F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2bef0f8-3b36-3d30-b649-16fbcfa3d959.roa
Signing time:             Thu 05 May 2022 12:00:00 +0000
ROA not before:           Thu 05 May 2022 12:00:00 +0000
ROA not after:            Fri 10 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        52.192.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cf:50:7e:51:3e:9d:34:13:41:62:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May  5 12:00:00 2022 GMT
            Not After : Jun 10 04:00:00 2022 GMT
        Subject: CN=2fa35687-4902-40f4-8df0-2f05f7c95f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:54:b9:13:7f:c7:d0:0b:14:a6:97:c7:33:65:
                    23:eb:da:38:0f:fb:0b:38:bb:30:17:92:7e:f1:fa:
                    9f:39:f6:d1:97:1d:58:85:b3:f8:49:a8:ac:30:d1:
                    21:d3:0e:9d:45:b5:00:df:da:49:00:41:6c:3d:76:
                    20:55:78:f4:22:2f:9f:d8:c5:2f:d0:11:71:e8:9b:
                    ba:fd:fa:75:fe:ea:ef:22:50:43:01:2f:4c:90:8c:
                    c3:e9:3d:61:9c:f6:72:6d:92:f4:73:41:6f:91:0d:
                    38:15:79:e5:a5:6d:b9:3f:70:b1:80:91:5c:7e:60:
                    e4:d4:78:33:aa:d6:a2:4a:a3:9a:c2:c0:69:91:bb:
                    38:14:3d:3e:b0:82:ce:34:f1:f9:d8:80:3f:8e:d5:
                    98:a4:6e:80:8f:3a:86:7a:f3:62:16:38:e6:52:75:
                    af:15:da:67:ff:00:fc:de:80:73:2c:98:ee:24:90:
                    f4:17:35:09:d1:46:4b:46:f7:97:31:ce:47:e4:70:
                    39:71:a9:f7:38:5d:b2:07:6d:18:e7:ef:8c:13:d3:
                    1e:8e:a9:45:40:37:16:8e:92:f2:4f:c4:1f:93:9a:
                    87:71:b0:9a:8c:f4:c7:1e:f8:ac:0e:fb:22:5a:3e:
                    d3:21:08:68:ac:c0:fc:87:0f:60:07:a6:fb:3f:d5:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3E:93:95:14:A2:F3:ED:30:4C:23:3E:AA:A0:A1:DC:41:30:D4:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2bef0f8-3b36-3d30-b649-16fbcfa3d959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.192.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:73:87:f7:b6:c2:7f:7d:a9:97:2b:b3:73:58:11:35:7c:31:
         f3:2c:a8:c8:65:e1:e4:97:51:31:7b:bf:21:4e:4e:2d:b4:ad:
         cb:73:ae:9b:cb:56:55:b7:d6:80:03:c6:13:71:2a:ae:0b:ed:
         5f:fc:d0:88:0c:33:d8:e9:4e:4f:4a:52:10:12:1e:e3:f6:91:
         be:bf:78:21:08:6f:85:5b:94:b7:cf:51:b4:2c:c9:8f:b8:49:
         c4:72:85:ff:fa:bc:37:bc:b9:8b:53:51:10:ae:3c:ac:19:7d:
         6b:2c:7f:0b:b1:75:01:d3:d5:55:4b:ac:ef:a6:89:a0:52:62:
         4d:eb:05:e7:3d:3d:c4:54:a3:31:c9:11:f0:51:41:35:8d:6b:
         ae:34:2f:8b:b1:8a:95:98:91:88:47:9b:84:d2:64:a6:03:b1:
         f9:a5:7b:24:c5:13:66:4a:94:5f:26:e6:3b:84:26:23:ca:47:
         e9:8e:d3:17:71:0c:50:0f:14:c1:01:95:07:c5:22:d0:3b:3a:
         a1:ff:7c:68:94:1e:e7:f2:87:82:98:32:6f:2f:68:25:8c:26:
         b6:67:73:c4:38:c8:5f:07:41:87:b2:09:9b:14:ee:14:78:72:
         a2:3c:46:50:f7:19:3c:d9:99:37:5f:bb:80:79:95:b9:27:e8:
         70:b6:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----