This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c1e7e7e-4cad-3f35-a593-bca236b1dd96.roa
File:                     1c1e7e7e-4cad-3f35-a593-bca236b1dd96.roa (raw, json)
Hash identifier:          Iv8rYlYkjKZxf4+sbGgZywuY6LpvaMCvCXBDyLgQmsc=
Subject key identifier:   11:4A:87:56:76:5D:45:D8:1E:91:C2:15:80:5E:EF:08:D7:03:B4:7B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583EFF43B9E3167078CC24A38C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c1e7e7e-4cad-3f35-a593-bca236b1dd96.roa
Signing time:             Mon 22 Aug 2022 12:00:00 +0000
ROA not before:           Mon 22 Aug 2022 12:00:00 +0000
ROA not after:            Tue 27 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        3.0.0.0/10 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ff:43:b9:e3:16:70:78:cc:24:a3:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Aug 22 12:00:00 2022 GMT
            Not After : Sep 27 04:00:00 2022 GMT
        Subject: CN=b6e18878-4c94-4e2c-9b50-98d365890321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:60:3b:c0:25:87:de:82:97:af:0a:8a:e4:
                    48:94:12:e1:15:c3:e4:60:35:92:51:1f:d6:29:ef:
                    f2:c3:7a:aa:2b:8f:59:e2:f3:b6:0a:67:18:10:48:
                    b6:f7:73:3f:a4:17:64:f8:36:81:fd:5d:c7:a8:1e:
                    6d:b7:84:2b:ab:f7:b7:fd:c5:3b:58:fb:1f:2f:77:
                    3c:89:fb:2d:aa:df:3b:48:cf:73:a0:c8:4f:41:7e:
                    04:40:4b:f5:da:b2:35:44:af:91:37:5a:0b:2a:82:
                    3d:7d:5f:6f:db:b6:2a:48:ed:89:56:1b:f8:37:85:
                    9e:1d:d6:2c:cc:a4:c1:60:52:89:d4:a4:1a:76:39:
                    aa:71:c3:b3:b0:ae:91:75:e0:63:b2:83:99:03:c1:
                    46:33:83:3b:8f:a5:0c:e9:97:5c:0c:27:d0:b2:2e:
                    12:11:5b:98:ec:1e:61:63:4c:66:d8:5b:bf:d7:20:
                    86:98:0d:07:50:f3:de:58:61:43:08:7b:18:7c:26:
                    cb:1c:0b:8d:d3:a1:f9:86:68:a0:22:30:22:44:8e:
                    45:80:23:97:61:64:ff:c0:77:5c:73:86:d5:5f:4d:
                    48:31:01:44:8f:f6:88:d3:05:ee:2c:56:d0:f7:4c:
                    ca:44:87:e8:e6:a1:b2:57:ad:a0:c8:0c:eb:0f:b2:
                    27:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4A:87:56:76:5D:45:D8:1E:91:C2:15:80:5E:EF:08:D7:03:B4:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1c1e7e7e-4cad-3f35-a593-bca236b1dd96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.0.0.0/10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:78:7b:78:b1:b9:ae:95:54:f7:92:cc:c7:f5:7e:e6:ad:32:
         84:4b:ee:e9:ed:a6:58:9f:dc:48:49:18:7d:53:2e:2b:27:9c:
         4d:11:41:85:14:ca:94:78:4d:e0:4a:03:5e:ef:69:b1:20:a5:
         02:d4:c1:7e:78:e0:e6:5d:93:65:da:fc:f1:c2:18:11:c5:8b:
         4e:6d:c3:0d:78:65:b5:3a:8a:2a:45:97:18:6f:38:44:62:84:
         48:f7:67:5f:53:77:97:6d:50:23:3e:75:6b:6e:23:ba:a3:93:
         8f:cc:5a:3d:10:86:f7:7c:02:48:5d:91:ae:6c:f0:ab:2e:c0:
         62:b0:99:eb:74:eb:58:43:1a:81:20:b8:c1:f1:76:b3:7c:bd:
         b4:cd:84:7d:1c:b2:35:ef:b8:d6:44:9e:34:75:e9:f3:06:4b:
         47:2c:5e:de:a4:2d:01:db:ec:6c:0e:16:bb:a4:71:a6:41:14:
         70:40:8e:19:3e:76:e5:6c:a4:ac:a0:2f:ae:ab:e5:cd:d6:9e:
         ae:58:0d:ff:3a:87:58:d0:b4:3e:db:de:ae:db:78:b2:7f:dd:
         be:f6:1c:1b:47:be:c2:72:42:12:86:7d:b7:34:cf:35:cf:cb:
         be:62:d6:0d:51:9f:3d:a1:5c:bd:b8:3a:47:cf:5e:08:f8:d0:
         73:80:08:6f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7/Q7njFnB4zCSjjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyMjEyMDAwMFoXDTIyMDkyNzA0MDAwMFowLzEtMCsGA1UEAxMk
YjZlMTg4NzgtNGM5NC00ZTJjLTliNTAtOThkMzY1ODkwMzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtVgO8Alh96Cl68KiuRIlBLhFcPkYDWSUR/W
Ke/yw3qqK49Z4vO2CmcYEEi293M/pBdk+DaB/V3HqB5tt4Qrq/e3/cU7WPsfL3c8
ifstqt87SM9zoMhPQX4EQEv12rI1RK+RN1oLKoI9fV9v27YqSO2JVhv4N4WeHdYs
zKTBYFKJ1KQadjmqccOzsK6RdeBjsoOZA8FGM4M7j6UM6ZdcDCfQsi4SEVuY7B5h
Y0xm2Fu/1yCGmA0HUPPeWGFDCHsYfCbLHAuN06H5hmigIjAiRI5FgCOXYWT/wHdc
c4bVX01IMQFEj/aI0wXuLFbQ90zKRIfo5qGyV62gyAzrD7In4QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBFKh1Z2XUXYHpHCFYBe7wjXA7R7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMWMxZTdlN2UtNGNhZC0z
ZjM1LWE1OTMtYmNhMjM2YjFkZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMGAwAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAinh7eLG5rpVU95LMx/V+5q0yhEvu6e2mWJ/cSEkYfVMuKyecTRFBhRTK
lHhN4EoDXu9psSClAtTBfnjg5l2TZdr88cIYEcWLTm3DDXhltTqKKkWXGG84RGKE
SPdnX1N3l21QIz51a24juqOTj8xaPRCG93wCSF2Rrmzwqy7AYrCZ63TrWEMagSC4
wfF2s3y9tM2EfRyyNe+41kSeNHXp8wZLRyxe3qQtAdvsbA4Wu6RxpkEUcECOGT52
5WykrKAvrqvlzdaerlgN/zqHWNC0Ptvertt4sn/dvvYcG0e+wnJCEoZ9tzTPNc/L
vmLWDVGfPaFcvbg6R89eCPjQc4AIbw==
-----END CERTIFICATE-----
Generated at Mon Dec 15 12:02:24 2025 by rpki-client