This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/faaffd4a-17d7-322b-a614-af96204992e4.roa
File:                     faaffd4a-17d7-322b-a614-af96204992e4.roa (raw, json)
Hash identifier:          tmw5drUw2F18116a09T7ixS1KnLWePpdNASciLBcaw4=
Subject key identifier:   50:C3:2E:2C:66:97:0A:4D:66:8F:BB:77:18:5B:53:B6:F1:A1:87:27
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F50395245AA1C8A966277E480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/faaffd4a-17d7-322b-a614-af96204992e4.roa
Signing time:             Tue 20 Sep 2022 12:00:00 +0000
ROA not before:           Tue 20 Sep 2022 12:00:00 +0000
ROA not after:            Wed 26 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        13.232.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:50:39:52:45:aa:1c:8a:96:62:77:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep 20 12:00:00 2022 GMT
            Not After : Oct 26 04:00:00 2022 GMT
        Subject: CN=f2320783-a03a-4ea2-b2b0-e41c1f7749ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d7:1d:6f:d6:6f:c9:72:d1:f0:56:85:2a:0b:
                    94:db:37:4d:92:31:0e:f4:de:4f:e0:97:47:14:3b:
                    a9:4d:95:ee:28:f8:4b:7e:dd:ec:63:e0:72:6f:7c:
                    da:bd:e9:39:83:29:fe:a9:06:27:4d:10:97:7c:51:
                    3a:9f:05:8e:f7:0f:b1:18:af:6c:e8:7e:3b:5c:46:
                    54:d3:46:8d:92:e5:9c:9b:f3:f2:29:bd:16:32:e2:
                    6c:85:b2:31:ec:80:ed:0f:d2:c1:33:16:8b:be:47:
                    76:ea:4e:7a:fc:31:a5:3f:f3:b2:52:5a:ad:ca:9a:
                    8f:35:b0:44:97:e7:35:64:4a:6f:f9:65:fb:57:51:
                    80:e4:c4:74:0c:66:7b:d7:d6:c9:9c:80:33:37:9f:
                    a5:6d:c0:3c:54:c0:be:71:09:4a:d6:66:85:3e:d9:
                    33:77:ec:e5:dc:c2:c6:e4:cc:33:bd:f4:72:6f:4f:
                    52:81:69:d5:6c:10:89:f5:d4:0e:26:62:a4:b8:3e:
                    3c:ad:0b:ea:73:f6:95:a6:3b:04:42:e4:ec:f3:b2:
                    df:e8:2f:8c:c6:bb:4c:dc:99:50:93:26:a6:49:06:
                    8a:62:7e:64:42:f3:6d:80:18:bc:89:54:17:1a:74:
                    94:e8:ac:89:17:a0:05:ed:9c:33:6a:f2:fa:7e:41:
                    fe:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C3:2E:2C:66:97:0A:4D:66:8F:BB:77:18:5B:53:B6:F1:A1:87:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/faaffd4a-17d7-322b-a614-af96204992e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.232.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:23:dd:5e:3a:28:ba:2e:a0:65:d5:a0:82:0b:cc:03:69:05:
         1a:c6:c4:52:04:62:c2:2e:4f:a4:b6:da:08:74:a9:16:c1:53:
         a7:11:07:37:77:38:0a:c5:48:fd:24:d1:aa:92:57:0a:10:84:
         a7:84:dc:d1:94:05:b8:a6:f1:d6:17:6f:36:f9:ad:e0:79:fc:
         cd:31:97:77:80:fb:05:e7:9e:ee:c8:bd:1c:e6:c9:f6:76:be:
         d5:6f:3a:95:ae:97:a0:e6:99:94:07:20:45:67:f8:65:a7:ea:
         fa:dc:55:c5:59:32:c2:cc:b7:4c:df:b4:df:39:00:87:df:ce:
         db:a1:38:e7:20:48:f7:4b:c8:c9:64:ca:3b:e7:51:49:81:1d:
         6c:00:d9:05:73:7b:8b:88:89:92:4f:6c:f7:ab:6d:03:9e:38:
         a4:ed:13:03:96:71:9e:a2:94:a7:2b:a6:be:2d:a7:92:a3:59:
         91:1f:6f:37:5f:93:5a:6a:e4:b8:dc:5d:19:6e:5d:2b:2e:2b:
         56:c4:f4:fc:60:34:a2:41:6f:f3:7c:05:42:23:a6:00:50:1b:
         ec:32:af:2d:63:49:dc:1c:51:c4:f7:f3:5b:2b:ee:51:ca:b6:
         8e:77:15:a7:35:f2:32:31:ba:cc:87:c2:ff:16:b3:9b:79:55:
         89:61:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----