This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f228303-e59c-32af-99cc-d18154f24379.roa
File:                     3f228303-e59c-32af-99cc-d18154f24379.roa (raw, json)
Hash identifier:          Kvg4t+dWR0P5e54DMg5uMmwPBki1GVNbeXYFsx/2U/g=
Subject key identifier:   C4:DC:36:70:46:F1:E1:06:9F:4F:9C:7C:EF:0D:88:2C:C4:7C:7A:0B
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CBCF838B56B0582F3BB14833C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f228303-e59c-32af-99cc-d18154f24379.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Fri 04 Mar 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        18.68.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bc:f8:38:b5:6b:05:82:f3:bb:14:83:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2022 GMT
        Subject: CN=3e66d157-36be-44f5-b0ff-647b13f56ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:81:55:0d:a8:54:f5:63:30:f8:e0:54:d1:4d:
                    13:49:d0:f6:b7:1b:59:a0:74:19:28:5e:ec:c3:a2:
                    ac:dd:15:a3:5a:40:21:98:bf:3d:1f:0d:c9:1d:15:
                    f5:1d:d7:d9:8d:22:a5:c7:31:4f:fa:b8:ed:dc:c9:
                    66:38:da:e6:d3:65:b1:2a:54:4a:d4:1f:84:aa:09:
                    65:65:4a:be:78:75:f2:21:91:e4:76:ce:a8:fb:a7:
                    3a:a4:d3:2b:03:84:bc:da:d7:2c:95:b5:ba:df:5a:
                    18:dc:61:41:b1:b2:98:d4:61:56:ea:ff:6c:70:87:
                    38:50:e8:0b:ab:db:a1:f2:03:7f:ac:37:c2:da:b2:
                    8c:61:ff:1e:b0:38:44:6f:d1:b3:f7:51:4f:cb:f6:
                    43:a9:cf:33:25:49:39:4c:88:e2:a9:a4:31:11:e3:
                    5b:1d:b5:4a:a7:b3:ae:d3:ca:9d:16:c1:d9:ef:42:
                    9c:9d:be:ff:d1:8a:e2:f8:f3:21:84:f9:ee:6f:39:
                    50:4d:83:50:95:c0:03:8b:9d:a5:41:3f:3b:74:bb:
                    bf:2f:09:40:96:67:ce:25:1f:7b:2b:1a:e2:9b:b0:
                    92:87:5c:57:37:02:07:4f:88:dc:c5:f4:2c:b8:b9:
                    2e:33:1b:81:0b:10:66:e7:b5:d3:98:cc:49:2d:6c:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DC:36:70:46:F1:E1:06:9F:4F:9C:7C:EF:0D:88:2C:C4:7C:7A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f228303-e59c-32af-99cc-d18154f24379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:84:c9:a0:67:d1:c8:8d:5e:74:1c:b6:33:5e:ac:d0:78:a8:
         e7:1d:65:f3:98:de:ee:aa:f7:23:4e:3d:bd:1b:1f:97:08:2f:
         c3:f2:c2:05:ee:d3:8c:8d:55:c7:44:c7:80:ef:15:83:4b:3d:
         62:1a:96:06:fa:bd:26:5a:bc:be:20:2d:fe:c3:f1:bc:b8:f4:
         b0:0a:df:33:f0:36:7d:39:1f:60:ac:af:68:26:e1:2f:26:4e:
         27:7f:8b:2b:2c:39:5e:21:39:e6:8d:2d:f0:72:2f:ec:d0:56:
         e1:f0:fc:02:38:db:7b:10:92:91:6d:22:d1:01:c3:fe:a5:9d:
         75:92:cb:b8:8a:18:98:26:c1:45:4b:9e:6a:1a:a6:5e:84:a4:
         69:35:e1:41:14:ea:93:6b:7f:39:5d:c8:fe:c8:a4:a3:84:f8:
         94:e3:d3:c8:5b:0c:98:e1:a6:87:c5:52:45:bf:6d:54:af:f5:
         bb:c7:e7:86:57:c9:79:bf:7c:a2:82:a5:41:ab:e9:e3:bd:32:
         87:bc:69:17:66:c0:40:04:e4:52:b1:10:1a:e9:f0:6d:5d:81:
         c2:0a:b3:af:32:ba:98:12:03:be:35:98:31:c3:16:c7:db:60:
         15:55:08:50:66:18:76:c9:d5:06:32:25:b4:b0:29:a1:3c:fd:
         ea:e0:f6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 08:09:05 2025 by rpki-client