This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7de72953-aac8-3cd8-b71d-70dd50a4ee6b.roa
File:                     7de72953-aac8-3cd8-b71d-70dd50a4ee6b.roa (raw, json)
Hash identifier:          XLXZQ0nXTvX+D5QQwOUlF/nUmdpeJySiN4M3sXNT4vw=
Subject key identifier:   48:11:03:33:D8:9F:C5:A5:11:DD:0A:53:54:F2:7F:87:00:10:97:A7
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583F1AB734F75A3D1AAF14205380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7de72953-aac8-3cd8-b71d-70dd50a4ee6b.roa
Signing time:             Thu 01 Sep 2022 12:00:00 +0000
ROA not before:           Thu 01 Sep 2022 12:00:00 +0000
ROA not after:            Fri 07 Oct 2022 04:00:00 +0000
asID:                     203
IP address blocks:        161.188.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:1a:b7:34:f7:5a:3d:1a:af:14:20:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Sep  1 12:00:00 2022 GMT
            Not After : Oct  7 04:00:00 2022 GMT
        Subject: CN=97d11d93-855d-4c0d-b65c-1b29c43a3bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:7c:0e:8d:bc:2e:23:9a:99:57:6b:ae:45:
                    02:a2:31:a7:40:78:20:24:cf:ad:30:16:32:d3:57:
                    95:11:10:35:41:1f:62:d6:60:f8:a2:aa:a9:18:4b:
                    0b:dd:08:16:6e:48:56:1e:b1:6f:03:e5:ea:b1:c3:
                    28:84:85:aa:df:1b:25:6e:14:a6:8c:1d:ec:be:84:
                    aa:3b:81:4c:23:7e:24:ad:9b:e7:de:31:c1:26:b9:
                    fc:8b:df:89:7c:3a:8b:c8:ea:cb:a5:f7:fd:a9:3c:
                    55:10:5b:d2:5e:87:d7:34:73:59:02:d4:fb:f6:f9:
                    db:7d:45:20:58:5c:15:49:91:31:fc:69:aa:88:da:
                    e4:b0:a3:b8:20:bd:a3:72:fa:68:d3:3d:33:10:dc:
                    47:47:67:1e:a8:83:54:ea:d9:40:ab:b1:12:3f:18:
                    e5:68:04:c4:19:e4:db:c8:c3:9f:5b:5f:ab:37:4a:
                    9d:c7:c5:89:c3:81:a7:62:28:8e:a4:e7:39:17:71:
                    44:e4:5a:7e:aa:35:36:0f:8c:36:91:fb:f8:05:15:
                    2f:3c:d9:7d:77:01:02:b0:b7:f8:29:76:7f:e1:0a:
                    c9:31:9b:db:c5:a3:7d:d1:b5:31:8b:c9:7d:85:0e:
                    e9:18:e6:07:a5:25:ae:52:ee:3d:9c:89:48:5c:78:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:11:03:33:D8:9F:C5:A5:11:DD:0A:53:54:F2:7F:87:00:10:97:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7de72953-aac8-3cd8-b71d-70dd50a4ee6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:16:36:d3:95:6d:33:25:c3:d5:27:4f:35:b9:79:5a:c1:38:
         e6:bf:d8:68:cc:b6:06:dd:e7:4c:c8:4d:cb:74:76:c9:8b:65:
         22:d5:a9:a5:35:c1:ca:de:61:e0:bb:d1:da:7e:6b:56:4c:35:
         5b:73:a4:64:d3:c1:6f:93:35:2b:e8:39:90:8f:73:d3:e0:b0:
         8e:8a:60:8a:af:f2:cc:c8:c1:3a:7a:a3:b2:40:9a:80:2f:a5:
         79:fb:9c:34:96:17:81:0e:38:65:f7:99:08:cc:61:69:75:3a:
         ae:73:7b:ed:72:e3:4b:c1:0a:8b:dc:0c:5b:6a:c2:08:25:d4:
         44:df:0c:7a:36:ef:69:56:9e:a2:80:56:0a:51:22:5e:a1:69:
         de:60:c1:4e:de:09:fa:70:bb:c6:c8:af:d6:68:9a:b6:ab:dc:
         b0:77:05:19:01:da:7a:e2:28:59:f0:cd:4f:70:51:fb:db:2f:
         fc:ca:e5:1e:c4:42:0e:92:df:0a:f1:90:00:fe:01:af:14:98:
         ef:ff:cf:11:5a:4a:04:78:09:a6:90:8e:8d:40:17:2a:c7:b8:
         a7:a1:d6:73:46:b7:57:f8:08:56:17:67:e7:02:a5:8a:17:26:
         d4:ce:4c:09:e8:c1:f2:2c:fc:67:41:2d:08:c1:f7:fb:2b:50:
         68:4a:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----