This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a6130303a3a2f34302d3430203d3e20343031363832.roa
File:                     323630343a6361303a6130303a3a2f34302d3430203d3e20343031363832.roa (raw, json)
Hash identifier:          aourP0tdjUOUUh/G0F/zxUg8IG66cFDTxfX1T0l03LE=
Subject key identifier:   0F:46:36:B7:F5:7D:85:BC:9F:84:94:6B:56:01:02:CD:6E:B7:FA:AB
Certificate issuer:       /CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
Certificate serial:       3DF7A42ABE971C49E4BF0C3CFA1D742F9E92B447
Authority key identifier: 3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a6130303a3a2f34302d3430203d3e20343031363832.roa
Signing time:             Mon 28 Apr 2025 01:48:59 +0000
ROA not before:           Mon 28 Apr 2025 01:43:59 +0000
ROA not after:            Mon 27 Apr 2026 01:48:59 +0000
asID:                     401682
IP address blocks:        2604:ca0:a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f7:a4:2a:be:97:1c:49:e4:bf:0c:3c:fa:1d:74:2f:9e:92:b4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959
        Validity
            Not Before: Apr 28 01:43:59 2025 GMT
            Not After : Apr 27 01:48:59 2026 GMT
        Subject: CN=0F4636B7F57D85BC9F84946B560102CD6EB7FAAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:82:5a:47:07:9b:07:f9:1c:37:1c:2d:0e:d9:
                    54:80:25:d1:17:61:74:b5:93:c8:35:80:1a:e3:86:
                    9a:e6:b5:68:ab:c0:b7:3b:c3:ec:0e:57:a3:a1:0d:
                    dd:54:e8:c2:da:e2:67:4e:c7:f2:30:78:86:b3:ed:
                    6f:e6:30:6c:50:14:f3:40:7c:d5:40:6e:b4:8d:31:
                    40:88:3c:c4:9b:a7:12:bc:dc:ae:49:a3:3c:6f:83:
                    08:e3:af:24:b8:96:bf:ea:19:f7:24:d4:d6:68:3f:
                    6d:a7:9d:a8:3e:a5:da:c1:ba:c1:9b:f8:4d:e3:40:
                    5b:81:96:a1:e4:d1:97:34:e3:32:cc:13:1c:d2:7b:
                    fe:75:b9:ec:1e:c7:16:72:d5:4e:38:ba:87:15:f2:
                    f9:5a:bb:1b:c8:27:6e:22:53:c3:4c:b8:e8:57:bb:
                    8f:ab:ad:a8:5b:06:e4:30:3a:1d:fc:06:c6:0c:0d:
                    eb:4d:82:23:bf:2b:21:ae:79:d7:a1:67:2b:4f:38:
                    0c:2e:c7:51:ee:a3:3a:f0:ab:53:01:ec:15:29:83:
                    1b:65:28:b8:99:ca:6f:e5:e8:cb:35:f2:a4:d8:47:
                    3a:58:27:d5:62:6a:c4:ba:24:1a:ee:bf:2c:48:fb:
                    0e:57:09:2e:48:cf:a5:dc:6e:84:86:39:f4:c7:24:
                    24:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:46:36:B7:F5:7D:85:BC:9F:84:94:6B:56:01:02:CD:6E:B7:FA:AB
            X509v3 Authority Key Identifier:
                keyid:3B:A3:FB:89:3D:83:8A:15:71:8A:5B:C7:15:75:0C:ED:89:9E:FD:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3BA3FB893D838A15718A5BC715750CED899EFD1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4e962717-1138-4d2b-9442-0332e9060132/e8741ac4f1ff9a0688f1b5bf1355e57883742534612356d959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/323630343a6361303a6130303a3a2f34302d3430203d3e20343031363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ca0:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:da:23:84:5f:d1:fd:4d:69:4f:14:43:d1:d5:b0:34:90:ff:
         65:94:bd:e6:a2:6d:ea:5a:5b:23:8c:19:0f:a7:77:c3:30:57:
         67:0e:55:50:c1:ec:63:ad:29:9d:2d:29:b4:ea:85:7a:eb:af:
         48:af:83:a2:29:b8:b6:92:41:2b:be:ab:18:38:32:7c:89:3e:
         01:55:19:20:79:41:22:3c:0f:3b:6a:54:5f:b9:0f:52:88:f8:
         32:d8:9a:41:79:17:a9:29:19:6d:c3:85:69:26:68:77:c9:22:
         f6:c2:d4:15:d3:43:2d:b8:7f:7b:02:7e:e5:d9:9f:f0:d2:2a:
         90:7a:5f:b3:fc:17:9f:2e:ad:1a:22:94:93:e1:58:49:96:b4:
         31:65:88:46:f9:98:6a:f7:4a:af:c7:91:71:5b:95:ce:d7:41:
         9f:a5:24:cb:a0:44:03:2f:a5:46:1f:ab:87:4a:dd:f7:08:56:
         fd:47:29:52:ea:30:46:94:4c:d7:a6:0b:53:bd:d5:2d:ad:6f:
         23:8e:37:ee:02:61:a3:b1:ed:cb:6d:c7:ab:c3:8a:19:14:2b:
         91:3b:40:a6:04:10:ba:23:8c:34:01:1e:22:d4:d4:7a:db:66:
         6c:0b:64:aa:fc:84:2d:0e:a2:21:5a:ac:ef:03:c9:a8:f2:3e:
         57:d5:b6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----