This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa7870f9-0fad-3a75-92a4-b382fc59ccb7.roa File: fa7870f9-0fad-3a75-92a4-b382fc59ccb7.roa (raw, json) Hash identifier: K10enJyJO7Yv2fsU+Z5bGYXJmEt4UOsOEgkNCQuL2F8= Subject key identifier: AD:3F:D7:4A:3D:3A:0A:BF:12:5A:88:21:C6:12:DB:57:6E:21:82:B6 Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc Certificate serial: 010D0C9F4328583FBA1B3B790A4D5E4CFF791E00 Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa7870f9-0fad-3a75-92a4-b382fc59ccb7.roa Signing time: Fri 28 Oct 2022 12:00:00 +0000 ROA not before: Fri 28 Oct 2022 12:00:00 +0000 ROA not after: Sat 03 Dec 2022 05:00:00 +0000 asID: 16509 IP address blocks: 170.120.0.0/16 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3f:ba:1b:3b:79:0a:4d:5e:4c:ff:79:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc Validity Not Before: Oct 28 12:00:00 2022 GMT Not After : Dec 3 05:00:00 2022 GMT Subject: CN=1b14d96a-f8ce-45e8-a1ad-7272cbd92881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:84:d6:85:ed:70:a4:24:e7:c4:0e:8c:8f:2d: ce:44:e4:ae:55:d5:8a:f8:a4:46:2f:f6:1e:06:6d: fd:bb:cc:9e:2b:7b:a1:52:42:36:a3:43:e9:44:61: ac:82:ac:25:4d:35:dd:94:fc:a8:1f:b5:7e:48:12: fb:58:b8:5f:26:99:a0:38:dd:20:06:c8:7f:68:52: 0d:ea:40:52:65:6f:1c:ea:c3:df:0e:7c:67:52:f9: d8:9e:eb:cd:56:d9:a0:97:24:c7:5b:e4:17:a3:d1: 3c:ff:7e:a7:3e:39:66:bf:f3:b0:65:87:ae:7f:89: 3d:c6:57:c3:9c:74:de:eb:b7:86:7b:8e:64:c6:d8: bf:3a:b2:b0:a2:da:7d:54:9c:10:ae:c7:78:1f:e6: d3:8c:14:30:9a:f7:f9:b4:49:f0:b0:84:84:da:98: 46:eb:46:a2:86:80:23:59:23:ad:ec:ad:be:e8:52: 50:d3:eb:ac:af:ac:e7:50:62:e6:3c:9e:74:1d:eb: 5f:a8:35:9e:af:a7:40:f7:69:50:c2:4d:bc:fb:43: 95:fb:5c:9e:bc:3a:0d:e5:f4:12:c5:e2:1d:65:ff: f3:db:70:9b:2e:5d:00:89:96:02:f8:6f:d3:0b:45: dd:bf:bf:1e:54:3d:b2:d2:40:8a:e9:89:ff:67:c0: 69:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3F:D7:4A:3D:3A:0A:BF:12:5A:88:21:C6:12:DB:57:6E:21:82:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fa7870f9-0fad-3a75-92a4-b382fc59ccb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl X509v3 Authority Key Identifier: keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer sbgp-ipAddrBlock: critical IPv4: 170.120.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8a:56:08:73:bb:0b:6f:c3:45:57:b8:a4:3c:ec:eb:18:3f: c7:ad:7e:9d:fc:f7:3c:1b:70:e4:71:8b:57:11:b8:03:f4:ca: 8e:3b:70:14:75:a0:ca:30:40:92:35:0b:63:51:51:fa:4d:f6: 95:cb:75:87:76:52:ec:4f:f9:54:c8:05:1b:90:24:54:ea:55: 9d:17:ee:4d:0e:e7:47:e0:47:ab:ec:9e:04:56:cc:8b:f8:73: 30:35:51:44:12:a2:5d:b7:ab:7f:23:0c:5c:8d:59:9b:1c:98: f6:7d:7d:09:f9:5a:00:a4:e5:5c:24:d5:31:70:da:64:d9:4f: 2e:3b:f1:85:d3:84:20:f2:9e:a9:c1:de:48:19:ad:b7:97:a5: f2:9f:da:f4:93:30:96:b5:56:15:d8:fd:c7:32:9b:18:18:f2: da:42:32:75:81:85:cc:37:f1:e9:75:00:8c:7f:89:d7:fd:8b: 32:01:14:96:3c:c3:9f:6b:ff:fa:64:99:09:f0:2e:d8:8f:85: 44:f7:be:73:de:51:3b:dd:78:0c:3b:5f:83:7b:a0:0b:99:fa: 8f:04:7a:e0:42:cc:c2:58:04:cc:8b:b2:d7:0f:be:3e:2e:fd: 0a:ed:6c:64:38:fa:36:62:dd:ef:ae:db:5f:34:af:2b:35:83: ce:89:b3:e4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+6Gzt5Ck1eTP95HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0 NWZjMB4XDTIyMTAyODEyMDAwMFoXDTIyMTIwMzA1MDAwMFowLzEtMCsGA1UEAxMk MWIxNGQ5NmEtZjhjZS00NWU4LWExYWQtNzI3MmNiZDkyODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YTWhe1wpCTnxA6Mjy3OROSuVdWK+KRGL/Ye Bm39u8yeK3uhUkI2o0PpRGGsgqwlTTXdlPyoH7V+SBL7WLhfJpmgON0gBsh/aFIN 6kBSZW8c6sPfDnxnUvnYnuvNVtmglyTHW+QXo9E8/36nPjlmv/OwZYeuf4k9xlfD nHTe67eGe45kxti/OrKwotp9VJwQrsd4H+bTjBQwmvf5tEnwsISE2phG60aihoAj WSOt7K2+6FJQ0+usr6znUGLmPJ50HetfqDWer6dA92lQwk28+0OV+1yevDoN5fQS xeIdZf/z23CbLl0AiZYC+G/TC0Xdv78eVD2y0kCK6Yn/Z8BpbQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFK0/10o9Ogq/ElqIIcYS21duIYK2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZmE3ODcwZjktMGZhZC0z YTc1LTkyYTQtYjM4MmZjNTljY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqngwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEopWCHO7C2/DRVe4pDzs6xg/x61+nfz3PBtw5HGLVxG4A/TKjjtwFHWg yjBAkjULY1FR+k32lct1h3ZS7E/5VMgFG5AkVOpVnRfuTQ7nR+BHq+yeBFbMi/hz MDVRRBKiXberfyMMXI1ZmxyY9n19CflaAKTlXCTVMXDaZNlPLjvxhdOEIPKeqcHe SBmtt5el8p/a9JMwlrVWFdj9xzKbGBjy2kIydYGFzDfx6XUAjH+J1/2LMgEUljzD n2v/+mSZCfAu2I+FRPe+c95RO914DDtfg3ugC5n6jwR64ELMwlgEzIuy1w++Pi79 Cu1sZDj6NmLd767bXzSvKzWDzomz5A== -----END CERTIFICATE-----Generated at Mon Dec 22 06:29:54 2025 by rpki-client