This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa
File:                     323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier:          3HiFS5Xt0bcKZXhcB75S08zWsOSwCowEyHYXu8xTiZE=
Subject key identifier:   C8:F6:A8:16:6A:D6:0F:E1:30:D6:66:3C:42:B3:C0:9C:F7:FA:AE:B1
Certificate issuer:       /CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
Certificate serial:       1028A0628935325EA558C5E6864749235DCB4D91
Authority key identifier: CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa
Signing time:             Tue 27 May 2025 02:16:47 +0000
ROA not before:           Tue 27 May 2025 02:11:47 +0000
ROA not after:            Tue 26 May 2026 02:16:47 +0000
asID:                     401682
IP address blocks:        2604:ca0:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:28:a0:62:89:35:32:5e:a5:58:c5:e6:86:47:49:23:5d:cb:4d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee
        Validity
            Not Before: May 27 02:11:47 2025 GMT
            Not After : May 26 02:16:47 2026 GMT
        Subject: CN=C8F6A8166AD60FE130D6663C42B3C09CF7FAAEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:a6:d6:15:e5:d7:8f:3a:c7:40:cc:aa:fe:
                    65:bc:6c:a4:75:27:ec:c2:c0:cc:c5:d6:4b:54:a7:
                    74:9e:d3:2f:85:77:4e:13:60:66:fa:f9:ee:79:3b:
                    e1:b6:fd:ad:e2:76:f4:2c:72:f1:59:ca:91:50:66:
                    58:1b:89:89:b3:52:ab:fd:de:f7:78:df:87:e5:d1:
                    82:60:25:2c:49:00:4f:ef:d5:0c:08:c3:99:e4:e2:
                    db:15:0e:da:f1:10:10:45:32:f4:fc:26:69:89:e7:
                    e7:a4:b3:ff:2b:8f:53:cb:a2:f5:7c:9c:41:a0:2e:
                    53:c1:7e:f6:09:e9:74:99:28:a3:62:20:e4:84:e6:
                    6c:b1:b2:53:b5:09:ce:7d:10:39:b1:d3:b8:3c:18:
                    94:62:7c:9d:9e:06:0b:63:aa:db:80:db:f4:87:05:
                    2d:2b:b9:b9:11:e5:a4:14:70:f7:4d:38:77:2c:af:
                    c9:a7:58:a7:eb:02:ce:45:50:ad:e6:21:a3:bf:8f:
                    ac:15:80:02:bb:15:29:6e:ae:4c:0d:cf:17:e4:f7:
                    47:3b:e1:93:02:08:ab:5f:20:8c:46:d0:32:e5:17:
                    77:dc:1c:a1:fc:e4:3b:1d:1e:f1:ac:91:60:83:0a:
                    b9:0f:ef:e2:17:50:5f:1d:53:c3:47:7e:45:87:1b:
                    0d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F6:A8:16:6A:D6:0F:E1:30:D6:66:3C:42:B3:C0:9C:F7:FA:AE:B1
            X509v3 Authority Key Identifier:
                keyid:CC:40:B6:E9:0D:C2:C4:75:BC:11:2A:29:36:B7:F1:7E:5A:31:0D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/CC40B6E90DC2C475BC112A2936B7F17E5A310D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f146728b91fe091c49847f816f209b05ca913ee4ee.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a3130303a3a2f34302d3430203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c9:d5:7b:7f:93:a9:6b:b7:50:36:dc:83:fd:27:96:46:8c:96:
         a1:a4:df:c8:a8:fc:20:22:dc:7f:bf:96:7e:b8:79:2b:71:dc:
         20:51:f5:cc:75:39:09:5a:b5:7d:aa:e4:63:0e:3a:26:ca:31:
         81:ff:13:ee:f3:cd:f6:21:14:26:e4:d6:ca:5f:1e:da:d0:90:
         e5:a4:60:ec:8c:2d:4c:09:f4:4d:84:b9:cd:5c:b3:92:23:5d:
         0a:4f:d4:7f:c9:c2:56:2d:df:c3:4b:31:f6:48:5c:09:86:d9:
         32:08:da:7a:b2:f6:22:fb:84:7d:db:e2:36:0d:23:1e:b2:bb:
         db:d8:c7:47:b7:ad:ad:da:1c:2e:d1:e0:74:f3:55:a9:23:b3:
         ca:9a:09:91:ce:ae:51:93:13:8c:20:de:9c:9f:91:da:c7:37:
         df:a2:66:9b:55:83:35:7e:98:f9:a2:14:9d:b9:8a:83:48:b8:
         08:6a:8c:6f:4e:9a:7b:cd:0b:54:7f:33:51:78:4c:bc:d5:85:
         67:8d:ac:af:6e:6f:1e:b2:c7:88:36:99:a1:09:99:ef:ff:19:
         d2:17:45:3d:59:1d:dc:f4:98:6e:e6:54:e0:7f:e1:69:19:e9:
         41:e9:da:43:86:24:f8:4a:df:f7:8a:05:5c:7d:b8:8a:a1:70:
         eb:8e:80:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----