This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fe5a61e5-39e6-39dc-9766-cc813482bc11.roa
File:                     fe5a61e5-39e6-39dc-9766-cc813482bc11.roa (raw, json)
Hash identifier:          GfSgTC79Cd4j6mCLwmR9i5HlkvRUwfGMBKMz7CDSVbM=
Subject key identifier:   A3:E7:EC:55:63:B7:D5:3A:A8:B5:B4:A3:2A:DE:80:5B:03:1D:4F:52
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584061EE774C068AB184A2F6C770
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fe5a61e5-39e6-39dc-9766-cc813482bc11.roa
Signing time:             Tue 27 Dec 2022 12:00:00 +0000
ROA not before:           Tue 27 Dec 2022 12:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        128.125.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:61:ee:77:4c:06:8a:b1:84:a2:f6:c7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 27 12:00:00 2022 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=776db46d-278f-44c3-9728-ec0f2f4d8282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:65:ce:9a:b2:e2:e9:10:29:cb:6c:ee:c2:
                    71:c4:37:34:54:4e:16:61:94:df:90:fa:0c:f4:52:
                    71:96:4a:0e:aa:26:8a:15:8e:59:b6:44:ab:7f:50:
                    9d:ae:7d:b4:4d:e0:60:a6:70:90:be:ce:86:c7:cf:
                    61:b4:01:5b:21:78:e9:f8:41:20:61:e0:d5:2d:e2:
                    26:31:4e:6e:04:29:51:ae:a3:d8:ea:a2:bb:b1:54:
                    40:3a:42:e3:31:57:18:4c:56:cc:16:4d:0d:c6:95:
                    47:6e:c5:66:d7:54:df:e3:f4:ab:3b:14:1e:46:fb:
                    9a:72:d2:89:e6:ba:2a:2f:7b:05:32:3f:1f:b3:17:
                    87:df:ae:9a:e8:22:b6:9f:28:a5:b5:d0:52:f9:eb:
                    bd:c3:0b:dc:6b:46:df:be:8f:5e:72:21:53:7c:a0:
                    55:f7:35:31:61:6b:88:27:98:5b:64:b3:24:5d:e1:
                    aa:84:7f:63:f7:33:1d:46:c4:aa:4b:4a:80:6e:ad:
                    e6:90:ac:6d:dc:a4:be:62:6c:0b:e9:ec:ca:05:66:
                    e7:a9:1f:3e:b4:4c:5b:18:29:d3:29:1a:d7:85:7d:
                    63:66:19:82:d1:7b:68:39:b2:26:43:35:07:38:d6:
                    3a:1c:7d:95:ed:4f:14:bc:29:c4:52:4f:09:0e:7c:
                    51:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E7:EC:55:63:B7:D5:3A:A8:B5:B4:A3:2A:DE:80:5B:03:1D:4F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fe5a61e5-39e6-39dc-9766-cc813482bc11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.125.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7a:bc:a7:b5:6a:e9:f8:13:44:6f:50:ad:47:e5:4f:38:75:
         1d:1e:52:dd:9e:6b:87:a1:e4:4d:fc:7a:80:3f:56:56:80:5d:
         e6:c5:3b:3d:36:1c:cb:ea:52:ce:78:f6:eb:fa:6c:f6:83:15:
         56:64:84:fc:8c:a8:64:51:9b:8a:ec:9b:a6:95:0a:1f:70:8c:
         c4:bf:f9:57:ae:02:a7:cd:2e:70:88:4a:00:42:70:91:86:57:
         b0:b3:d7:80:98:9e:41:35:77:44:bf:b2:05:9c:8b:d1:4d:33:
         1d:6b:c1:69:1e:9b:25:47:3b:4f:86:92:d8:1b:42:d4:32:81:
         3c:ff:6b:c1:c3:ca:87:8d:c9:83:44:75:8b:bb:b3:4f:6c:b8:
         8a:5c:35:42:73:8d:13:10:bc:0c:cf:0e:9c:cb:83:c1:fd:e3:
         6a:cc:51:96:d1:78:98:58:94:32:6f:cb:65:42:d3:29:6e:36:
         87:f9:5f:b5:59:cb:c8:64:b9:47:8e:e4:45:32:5a:99:90:f1:
         c1:3d:54:6f:86:bb:42:65:38:2f:19:0b:cc:32:4b:fc:19:d5:
         a3:23:fd:ba:ed:cc:db:e5:b1:0c:e7:c2:c5:43:0b:64:17:eb:
         a0:e3:08:e3:78:dc:c1:fd:27:cc:f7:40:24:e7:a5:6a:10:d5:
         05:93:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----