This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9a20f5c-aad2-3ab4-839a-3d5d4d854f43.roa
File:                     f9a20f5c-aad2-3ab4-839a-3d5d4d854f43.roa (raw, json)
Hash identifier:          ypgMyfmWYqWO0+YzPcDiZ81OjfsBXLoGZTjs1QuYCNM=
Subject key identifier:   A5:6A:8D:2B:91:9B:55:7E:BE:8D:0A:7E:87:9F:FC:49:57:15:C2:E1
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D2F754ED9D1E0AB3C217F2E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9a20f5c-aad2-3ab4-839a-3d5d4d854f43.roa
Signing time:             Thu 10 Mar 2022 05:00:00 +0000
ROA not before:           Thu 10 Mar 2022 05:00:00 +0000
ROA not after:            Thu 14 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        15.248.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2f:75:4e:d9:d1:e0:ab:3c:21:7f:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 10 05:00:00 2022 GMT
            Not After : Apr 14 04:00:00 2022 GMT
        Subject: CN=c0123214-d0fe-4d91-9c3f-3c0fe50adcdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:8c:44:07:46:51:6f:b5:91:aa:e3:31:4d:
                    9d:76:d5:95:eb:94:89:28:25:50:aa:09:91:80:94:
                    93:d0:c9:aa:30:80:fc:f2:9c:05:4f:97:67:e7:bb:
                    42:63:c0:ef:4d:2a:30:47:36:2f:bd:f4:86:90:5c:
                    ab:6b:a1:eb:5b:c2:de:8c:7a:dc:46:4f:e6:f8:83:
                    ea:fb:b6:ed:39:83:4b:2c:cf:7b:70:e2:6d:23:ca:
                    67:f4:61:bd:f8:ec:2e:b2:a0:99:44:34:1d:31:e6:
                    81:e1:81:94:e0:32:00:34:fb:ce:49:31:66:18:32:
                    6b:01:87:86:bd:c5:49:66:d9:87:bc:b5:99:b8:e1:
                    cb:07:4d:43:ec:93:21:e6:57:6e:0b:74:e9:21:72:
                    a3:38:92:f5:21:bb:c4:0e:a2:b9:12:74:db:6c:b0:
                    02:0c:96:a1:2b:7d:8e:09:6e:7b:79:9e:ee:08:96:
                    e5:f3:0b:19:d7:27:16:7a:f5:04:e2:e7:2a:f0:77:
                    0f:4b:5e:ff:a8:5a:7a:37:90:63:41:48:e7:ee:ae:
                    6e:75:91:98:9e:7d:50:21:ff:b4:9a:cb:56:32:e0:
                    7c:2e:c8:2f:7b:c9:f5:55:70:13:f6:9c:b2:65:6f:
                    99:b5:55:03:2b:d1:48:70:0c:83:6e:42:75:54:43:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6A:8D:2B:91:9B:55:7E:BE:8D:0A:7E:87:9F:FC:49:57:15:C2:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9a20f5c-aad2-3ab4-839a-3d5d4d854f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.248.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e5:9b:20:82:45:31:52:36:e9:1b:65:da:0d:42:c1:43:b6:
         23:71:1f:3a:51:e8:0c:5d:00:14:55:e0:9f:31:77:52:43:ff:
         a1:d5:ea:2b:50:e7:a7:a8:5e:cc:e1:c2:38:2d:31:c6:4e:20:
         11:c4:55:7d:b6:ab:db:a4:43:0a:f8:88:e1:45:cc:55:47:1b:
         2b:20:5e:23:1e:16:bd:67:3b:32:f9:1b:6c:81:29:29:33:11:
         38:c7:80:28:24:08:65:14:6c:c2:4f:31:77:01:bb:19:4a:98:
         6f:b7:08:6d:fd:ab:3a:75:db:fa:96:6f:ae:62:a5:f8:d8:13:
         9f:dc:1f:e2:2a:66:36:03:93:2e:2f:9f:81:ad:8f:73:cd:24:
         6c:d7:04:8c:03:65:49:e3:49:c7:cb:e6:0e:51:ea:0d:df:72:
         47:5f:e9:1a:f2:0a:b9:a3:0a:30:13:2e:99:90:70:80:a4:0d:
         2b:fc:1e:55:37:78:02:f3:c2:66:d4:14:a8:82:24:88:8e:55:
         6c:9f:27:b9:5a:af:8e:6d:af:8e:e9:7f:3f:6e:ec:6b:cf:ed:
         19:7e:57:31:9c:38:2e:f3:bc:e7:08:3c:cc:33:ca:db:75:ac:
         4e:f6:a4:86:81:59:c4:79:7f:e0:2e:18:d5:f6:5f:d3:09:e4:
         af:31:91:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----