This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43042cc5-6943-3e1c-84ba-53cb6364aeb8.roa
File:                     43042cc5-6943-3e1c-84ba-53cb6364aeb8.roa (raw, json)
Hash identifier:          1HL5RAkxmfHH5BNFsRy19KZjQeZoX9au7Wt6zcUA3h0=
Subject key identifier:   86:69:66:B6:11:43:D3:B4:43:F8:4B:BB:1B:CD:CE:F2:09:BC:99:F4
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858404690BF8FEDEE9349456FBD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43042cc5-6943-3e1c-84ba-53cb6364aeb8.roa
Signing time:             Sat 17 Dec 2022 12:00:00 +0000
ROA not before:           Sat 17 Dec 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.53.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:46:90:bf:8f:ed:ee:93:49:45:6f:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 17 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=ec2c916a-2bf4-4ea1-8a40-748ac53dc278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1d:fa:45:07:0b:fb:b5:14:5d:8f:c3:eb:16:
                    a3:68:69:34:14:b6:37:54:a6:be:ac:77:5d:5e:db:
                    1a:3b:53:cc:e9:14:9c:69:a4:11:ff:db:09:11:cc:
                    e1:f1:fe:2d:ff:44:19:3e:b8:ab:33:2c:a4:57:35:
                    80:80:a4:1f:66:2a:ba:c8:73:9a:31:fe:79:a6:3d:
                    89:91:34:94:e9:d9:e0:b6:fa:be:1b:16:ab:f8:c1:
                    01:ff:7a:5c:33:37:cb:ba:14:63:9a:1b:4e:3c:a1:
                    86:74:36:75:27:c9:aa:dd:ba:5b:ef:8c:43:c9:08:
                    69:08:4a:73:64:e6:8c:08:b1:d9:21:80:36:6c:8c:
                    13:92:89:11:7d:2c:cc:80:95:0d:12:fc:ce:8e:83:
                    fc:5b:5c:38:67:94:53:c7:91:c0:ec:8a:f2:0c:f1:
                    be:8f:5e:21:12:4f:09:fd:3f:70:77:1c:c3:23:f4:
                    17:c1:b8:f8:aa:cb:08:14:ac:8e:c5:55:f9:f4:51:
                    19:e3:4a:04:f9:7e:65:7c:f1:35:b1:70:5e:f3:4c:
                    79:af:17:73:9b:53:04:19:cd:62:de:9a:f8:58:b6:
                    5b:58:68:bc:78:13:f3:d1:ac:1d:b6:f1:25:da:a7:
                    59:c6:e6:ff:78:11:7f:90:b9:f5:08:46:ab:05:19:
                    b0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:69:66:B6:11:43:D3:B4:43:F8:4B:BB:1B:CD:CE:F2:09:BC:99:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43042cc5-6943-3e1c-84ba-53cb6364aeb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:55:a5:43:53:5d:fb:79:9c:b4:94:e7:47:5e:79:55:04:ed:
         32:55:74:9a:59:55:bb:9c:ca:a6:5c:e5:40:a0:f9:46:73:bf:
         a4:8c:79:21:6c:fa:5a:13:a9:e5:f7:9f:32:df:aa:83:1a:03:
         8c:06:f2:94:02:53:b8:e0:ac:d4:09:6e:66:93:0e:26:da:58:
         aa:c3:fc:b0:38:a3:4f:56:ff:3d:2e:f3:8b:39:ed:62:1a:49:
         9e:c6:fa:26:0a:59:16:66:a1:d6:c0:d8:e6:ce:44:98:71:0d:
         b5:c1:83:bf:d8:02:bd:8c:74:ef:3a:46:16:3a:61:af:fc:f6:
         b2:5b:73:69:6d:99:a3:e8:70:16:7b:b6:13:d6:c5:a7:df:cb:
         1d:d5:4b:5a:ce:89:39:96:48:52:77:8b:b4:ed:c1:41:70:fd:
         53:ea:64:63:f5:d2:0b:6d:63:e1:45:d4:3c:c7:b2:10:a0:38:
         cd:f4:1b:66:09:04:d8:10:21:7f:0b:49:a2:40:e6:66:8f:66:
         98:6e:38:95:25:c4:93:93:f1:b9:15:2d:5a:4b:b4:22:ef:b7:
         4b:d7:69:9c:25:58:71:2c:43:28:99:28:43:94:04:9b:e5:38:
         86:34:48:94:10:db:1a:a5:28:94:60:8d:6d:27:e0:5a:9e:e1:
         96:c4:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----