This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/facaee4c-d84c-3656-849a-207c2d3ca527.roa
File:                     facaee4c-d84c-3656-849a-207c2d3ca527.roa (raw, json)
Hash identifier:          yt44+1CdYbQmpDRsRkcr1+iw+WCiyDssmctleVQ0nTU=
Subject key identifier:   2E:8E:E8:89:F6:79:18:A3:7E:C9:66:93:4D:08:D1:C2:C5:B6:9C:82
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583E6FA9EB2BF2D4C3F3A0B2C600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/facaee4c-d84c-3656-849a-207c2d3ca527.roa
Signing time:             Fri 01 Jul 2022 12:00:00 +0000
ROA not before:           Fri 01 Jul 2022 12:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.191.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6f:a9:eb:2b:f2:d4:c3:f3:a0:b2:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jul  1 12:00:00 2022 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=63c451ed-f8dc-43df-b484-17a4b62963f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:aa:1e:e2:4b:e8:c0:65:f3:66:9a:8b:77:
                    7d:a9:f1:4c:9f:2a:99:8c:41:82:0c:5f:38:79:e7:
                    57:cf:c0:bc:12:1f:45:1a:d1:d3:d3:7e:41:11:7c:
                    dc:76:30:f7:25:5a:ed:54:7e:e0:03:3a:8d:26:10:
                    cc:57:f7:3c:04:c3:02:87:44:79:72:65:67:e7:28:
                    30:6c:3e:81:55:0c:e0:b7:28:3a:44:7b:0f:66:9b:
                    c0:be:cd:e4:af:84:88:47:d7:a0:aa:5a:b1:a3:9f:
                    9f:2b:e1:88:df:ae:86:9e:cc:86:a7:41:cd:22:ac:
                    27:4b:ad:22:a2:36:2c:01:d7:19:b2:73:8e:21:0d:
                    b6:f8:84:43:0c:ef:ca:ec:d5:f5:cd:96:29:f7:aa:
                    c6:ec:45:0e:2e:45:70:84:53:7a:70:c3:62:d0:f0:
                    36:ca:54:8d:4a:79:b7:92:a4:de:de:81:89:e9:1c:
                    d5:8e:a1:31:af:4e:d9:55:42:54:27:9f:a9:e0:be:
                    8c:47:1f:87:36:a5:1b:30:26:25:67:60:7d:92:6f:
                    35:15:f4:0c:aa:62:2e:27:3d:6b:9d:df:5d:1d:5d:
                    e4:89:b3:a6:a3:0a:93:1f:ce:d9:ad:16:a4:c8:be:
                    dc:2f:6c:50:ef:1a:d7:2c:4d:f3:4e:2f:90:05:c8:
                    63:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8E:E8:89:F6:79:18:A3:7E:C9:66:93:4D:08:D1:C2:C5:B6:9C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/facaee4c-d84c-3656-849a-207c2d3ca527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.191.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f2:a2:f0:79:07:a9:7f:c2:0d:da:b6:32:ee:4b:90:7e:ed:
         c0:5c:52:97:95:ba:a6:9a:f5:47:74:06:36:19:fc:ca:7b:1f:
         32:f5:79:5b:02:8c:4e:bc:f4:db:8a:6e:5d:42:b0:e9:a1:d5:
         bf:f5:ec:2a:22:70:bf:f1:f0:5e:0a:a4:6c:f8:88:ff:7c:f2:
         03:ec:cc:07:c3:df:59:e5:fb:db:96:22:ab:d4:42:fc:a0:0e:
         60:9b:db:8a:61:35:ad:0a:b5:6d:5b:16:ca:da:b8:d0:ff:24:
         8f:27:86:9d:be:a2:db:fc:8b:da:0d:d7:48:8c:48:c9:d8:4d:
         73:33:23:dd:4b:b4:b7:f0:cb:ad:9f:95:ec:f6:94:f8:59:fc:
         b5:ea:1f:c3:75:0c:81:db:3b:55:10:94:30:cf:d7:3c:85:56:
         3b:db:b6:11:7f:e4:df:77:6e:6d:9f:87:b6:1c:67:e7:d7:14:
         1e:7c:4a:fa:00:07:54:61:f4:43:f2:34:d0:5a:95:fd:a6:03:
         f5:3a:e4:2b:77:26:63:ed:f4:20:59:e5:1d:86:05:c3:14:41:
         80:1d:a2:3b:51:3f:de:d7:2d:2c:6a:c3:e8:b8:dd:cf:76:84:
         c3:fe:81:9b:c3:7d:ec:3c:95:ed:05:cd:da:6a:9b:dc:ff:c1:
         ea:fe:aa:40
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5vqesr8tTD86CyxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcwMTEyMDAwMFoXDTIyMDgwNjA0MDAwMFowLzEtMCsGA1UEAxMk
NjNjNDUxZWQtZjhkYy00M2RmLWI0ODQtMTdhNGI2Mjk2M2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUiqHuJL6MBl82aai3d9qfFMnyqZjEGCDF84
eedXz8C8Eh9FGtHT035BEXzcdjD3JVrtVH7gAzqNJhDMV/c8BMMCh0R5cmVn5ygw
bD6BVQzgtyg6RHsPZpvAvs3kr4SIR9egqlqxo5+fK+GI366GnsyGp0HNIqwnS60i
ojYsAdcZsnOOIQ22+IRDDO/K7NX1zZYp96rG7EUOLkVwhFN6cMNi0PA2ylSNSnm3
kqTe3oGJ6RzVjqExr07ZVUJUJ5+p4L6MRx+HNqUbMCYlZ2B9km81FfQMqmIuJz1r
nd9dHV3kibOmowqTH87ZrRakyL7cL2xQ7xrXLE3zTi+QBchjrwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFC6O6In2eRijfslmk00I0cLFtpyCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZmFjYWVlNGMtZDg0Yy0z
NjU2LTg0OWEtMjA3YzJkM2NhNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEr8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAU/Ki8HkHqX/CDdq2Mu5LkH7twFxSl5W6ppr1R3QGNhn8ynsfMvV5WwKM
Trz024puXUKw6aHVv/XsKiJwv/HwXgqkbPiI/3zyA+zMB8PfWeX725Yiq9RC/KAO
YJvbimE1rQq1bVsWytq40P8kjyeGnb6i2/yL2g3XSIxIydhNczMj3Uu0t/DLrZ+V
7PaU+Fn8teofw3UMgds7VRCUMM/XPIVWO9u2EX/k33dubZ+Hthxn59cUHnxK+gAH
VGH0Q/I00FqV/aYD9TrkK3cmY+30IFnlHYYFwxRBgB2iO1E/3tctLGrD6Ljdz3aE
w/6Bm8N97DyV7QXN2mqb3P/B6v6qQA==
-----END CERTIFICATE-----