This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5762498f-6ed7-3a47-b541-e30822b51123.roa
File:                     5762498f-6ed7-3a47-b541-e30822b51123.roa (raw, json)
Hash identifier:          pXSPkucjtyojPS8Sl2TbAeKGMv4sLlOqAvyJuWfa1ng=
Subject key identifier:   38:22:78:9C:9E:67:BE:8A:FC:DC:27:FA:29:64:B4:C3:19:7D:B4:53
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840057BACAB528A25C3F649AD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5762498f-6ed7-3a47-b541-e30822b51123.roa
Signing time:             Thu 24 Nov 2022 12:00:00 +0000
ROA not before:           Thu 24 Nov 2022 12:00:00 +0000
ROA not after:            Fri 30 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        136.12.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:05:7b:ac:ab:52:8a:25:c3:f6:49:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov 24 12:00:00 2022 GMT
            Not After : Dec 30 05:00:00 2022 GMT
        Subject: CN=d0423b62-077a-444b-9093-b637f5007e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:f1:7e:04:92:b3:31:e4:cb:85:26:a4:86:
                    61:c9:fa:ce:c4:eb:2f:58:9f:aa:e7:37:17:16:ac:
                    56:62:88:77:5a:4d:6c:e1:a6:80:e2:cb:bf:be:4c:
                    ad:54:eb:5c:54:ba:33:24:d7:99:f8:63:2e:cf:6e:
                    af:2f:81:0b:9a:55:1a:06:3a:e9:88:b6:df:ee:63:
                    8d:93:08:d9:b8:d9:1d:cf:47:33:8b:3c:dc:89:5f:
                    81:75:34:66:0c:8e:dd:00:43:8b:ce:ee:0f:7c:cd:
                    42:04:23:67:56:0e:fb:04:59:97:21:e7:88:ed:6e:
                    76:5f:5b:3a:ab:c7:d3:af:01:44:b2:4d:5a:eb:9c:
                    d0:ab:29:a4:35:15:9f:71:f4:c0:dc:4b:7c:98:ea:
                    41:85:57:db:a1:4c:30:c6:16:99:4e:86:b6:eb:18:
                    63:06:2b:3a:19:87:da:10:12:d2:5c:fe:b7:dd:16:
                    bf:00:c1:5e:46:ce:7f:74:39:44:43:79:98:5e:49:
                    7b:31:43:5e:74:f1:ae:83:56:b7:eb:1f:b8:60:a0:
                    ff:ca:bf:16:d0:cf:aa:c4:a8:26:d5:a5:30:27:f3:
                    7b:85:c4:40:f0:24:af:b6:5b:19:a9:c7:49:9e:ba:
                    92:28:b2:dd:3e:9b:36:84:fe:48:3f:37:ed:b2:08:
                    aa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:22:78:9C:9E:67:BE:8A:FC:DC:27:FA:29:64:B4:C3:19:7D:B4:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5762498f-6ed7-3a47-b541-e30822b51123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:51:d9:bc:80:0a:5d:32:8e:28:11:12:ba:a6:75:f3:7d:a8:
         15:8b:b7:fb:41:77:16:a4:91:52:36:ed:3d:41:6e:9a:a8:54:
         4b:88:38:cf:b9:16:be:1c:3e:5a:84:82:54:d2:8c:b0:a5:cb:
         ac:c7:23:13:93:41:77:92:bb:85:5d:24:87:63:f7:16:e1:73:
         46:57:9a:5c:34:d0:3a:8b:8f:e9:5a:10:ea:14:94:2f:a8:72:
         66:49:a7:25:06:88:6e:b8:3f:b9:1d:ed:17:c9:e4:ba:0f:8c:
         73:c7:b3:2b:6b:2d:7c:a1:47:2b:f3:ba:2c:d1:5f:58:d6:8f:
         3f:b2:78:71:3e:0e:44:e5:76:cc:4d:da:18:23:4c:72:0b:d5:
         ab:4d:08:00:bb:d2:34:84:06:cf:2a:7f:c3:b2:31:0c:27:72:
         a1:33:a4:6f:52:23:f7:22:60:a7:b6:99:86:fe:ae:25:a7:8b:
         5e:06:94:dd:08:da:43:fe:91:35:08:19:d6:52:2b:f2:ed:97:
         b7:e0:d9:53:da:59:6a:53:4b:04:dc:89:dc:11:93:00:bb:c7:
         e8:f3:d4:c5:7f:b4:94:16:3e:1a:6e:57:5f:a9:4e:64:16:8b:
         f9:bc:10:63:a5:3e:59:f3:f9:4f:95:8c:80:70:d6:7d:7e:48:
         35:08:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----