This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b14e71b-39e0-36f7-b734-ce026b197b89.roa
File:                     8b14e71b-39e0-36f7-b734-ce026b197b89.roa (raw, json)
Hash identifier:          bCyU/BKoX2Vg4lGGgl1wJ+p+KyOqa66RLMaByMWpTbE=
Subject key identifier:   6F:A9:6C:ED:7E:A3:56:0F:A8:98:55:52:D4:A3:06:C1:B1:CC:E1:AE
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D324EC09222F8B99768DFF680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b14e71b-39e0-36f7-b734-ce026b197b89.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.87.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:4e:c0:92:22:f8:b9:97:68:df:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=3b6fad18-bea4-4807-a0b6-11cd9e64e521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:a3:b6:0b:d7:ac:6c:74:00:00:96:0d:41:
                    6a:ed:5b:fe:36:da:30:01:bf:c2:59:86:b3:a8:0e:
                    53:6f:be:a4:74:75:24:1f:13:a8:97:7d:9b:12:30:
                    b4:20:9d:03:06:24:56:6a:81:d9:38:54:4c:b8:ca:
                    c0:8a:00:07:9e:69:cf:35:92:53:1c:c3:29:9f:82:
                    04:1e:8b:d4:d6:b1:7c:38:f0:e9:68:72:d4:f0:f2:
                    a2:3d:16:5f:b3:93:c0:24:82:96:00:82:7d:30:f7:
                    fd:71:ee:b6:03:36:81:6f:c5:b6:e6:83:d9:56:24:
                    8f:19:86:c8:2d:04:70:4d:71:5f:56:bd:ca:48:55:
                    05:ed:f5:91:f2:3e:37:61:2f:72:f2:21:13:33:3b:
                    7a:7b:c2:66:7f:2f:c9:94:de:79:df:f7:0c:fd:8b:
                    76:b2:4f:42:f1:5e:54:a3:a6:84:b2:65:22:9b:9f:
                    6f:3e:68:14:8e:38:48:8e:a9:62:af:1e:27:08:b9:
                    40:7a:73:73:a4:6e:c5:08:7e:2a:99:95:03:48:78:
                    32:ea:5b:cb:09:cc:f5:b8:7c:81:83:cf:5c:be:8b:
                    bd:75:62:1a:67:3b:c9:ef:df:d6:55:9f:3b:7e:f4:
                    3d:82:7c:cb:4b:d0:25:cc:ad:29:d4:7a:2f:10:67:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A9:6C:ED:7E:A3:56:0F:A8:98:55:52:D4:A3:06:C1:B1:CC:E1:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b14e71b-39e0-36f7-b734-ce026b197b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.87.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:3b:52:14:6f:9d:84:d2:c2:a3:77:11:b7:09:01:bb:31:
         3a:a2:05:11:b4:ec:e2:a0:13:23:5f:b2:5f:a0:1d:7e:44:ab:
         5f:e7:a0:be:e3:0e:d2:27:17:0b:a5:b5:bc:d4:05:4c:6a:12:
         16:49:c1:0d:58:c4:25:54:94:80:55:fd:91:de:62:34:aa:e2:
         72:c9:6d:95:c1:cb:4a:bf:3a:4e:f5:df:4d:97:28:df:1b:71:
         53:e1:36:80:07:3a:e8:ba:86:b3:aa:20:00:3a:f5:c9:e3:50:
         0c:8b:ec:5f:ae:bd:ec:71:f7:d9:24:7b:fa:19:f5:a9:44:81:
         6b:9a:b9:0d:81:ee:e7:87:08:ba:dd:d4:fd:d0:e5:89:f1:21:
         4a:d1:3e:b5:d6:83:72:b7:6d:48:f4:da:a5:87:7f:ce:aa:bc:
         e3:5a:7c:be:5d:5d:20:42:c1:89:f1:ce:35:db:d4:af:bc:e0:
         e8:4b:46:8e:4b:f0:f9:b3:ca:dd:80:d8:71:dc:35:d8:0c:34:
         22:92:ee:0b:e3:98:c3:75:b6:f8:45:d8:20:63:4c:6e:89:0c:
         de:11:d7:60:00:a2:eb:99:7d:9f:ca:7a:36:14:6c:be:be:e5:
         29:63:f3:e2:ab:51:0b:90:f4:11:7f:77:55:d2:89:09:51:45:
         01:71:b5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----