This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a948aeb4-6472-356e-bbfc-db1ee8f10ced.roa
File:                     a948aeb4-6472-356e-bbfc-db1ee8f10ced.roa (raw, json)
Hash identifier:          GOL+0nCQyxVMsUrk+ZnGCL2hfOXyghtB1QjZlW7Xb80=
Subject key identifier:   69:77:73:02:86:6F:0A:8E:33:CB:BD:9A:0B:F3:36:8F:36:4A:2E:CD
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FCC40C6130E03747C2BB0DE60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a948aeb4-6472-356e-bbfc-db1ee8f10ced.roa
Signing time:             Thu 03 Nov 2022 12:00:00 +0000
ROA not before:           Thu 03 Nov 2022 12:00:00 +0000
ROA not after:            Fri 09 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        153.49.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:40:c6:13:0e:03:74:7c:2b:b0:de:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  3 12:00:00 2022 GMT
            Not After : Dec  9 05:00:00 2022 GMT
        Subject: CN=1fd00ee1-d098-4ad7-b093-b3fa334b096f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:4a:bd:13:33:a5:6a:f0:47:68:d4:6f:9b:
                    75:27:7f:2d:31:8f:5d:83:ab:88:70:76:b0:cc:33:
                    f2:9d:1c:e6:a6:ef:51:26:e3:ec:aa:35:c7:e8:75:
                    3a:95:1b:e2:a4:e9:c9:3f:ca:4e:a5:aa:24:65:15:
                    f6:14:22:7f:4a:4a:fe:d3:20:5f:45:2f:7b:80:49:
                    77:8c:d1:49:95:e5:59:30:61:7b:87:2e:7f:ff:3f:
                    f3:d0:19:2e:b1:1a:27:16:c3:10:67:4c:fa:1b:2b:
                    f3:48:77:03:8d:fc:ab:f7:a9:65:85:6f:11:bb:59:
                    40:4c:f4:c9:77:9a:a8:e8:95:87:c8:34:f4:11:da:
                    06:ac:f0:fa:f2:f8:b9:fe:08:18:fc:c2:bd:ca:f5:
                    bf:c8:68:70:80:fe:7c:1e:03:d3:93:ce:15:17:84:
                    dc:68:04:09:b3:c1:a3:ac:02:ce:2d:1a:64:53:ff:
                    9a:a2:5e:59:ed:0f:4d:3b:4c:95:42:b8:63:94:f9:
                    43:d9:9c:5a:2d:8b:f4:18:62:eb:08:2b:94:b0:cb:
                    0a:29:25:b4:0f:60:40:16:0e:06:f7:d0:86:50:73:
                    ce:4c:5c:e5:42:d5:22:99:d8:d8:6b:f5:36:9e:be:
                    5d:65:3f:47:9e:ea:b6:44:fc:74:a3:8b:ad:09:b0:
                    c4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:77:73:02:86:6F:0A:8E:33:CB:BD:9A:0B:F3:36:8F:36:4A:2E:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a948aeb4-6472-356e-bbfc-db1ee8f10ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c8:0f:b0:37:53:21:9e:ff:99:c6:2c:d0:66:68:56:a4:d5:
         9d:00:ec:b6:2f:58:4f:83:8d:6f:83:d2:d2:e3:27:c3:2c:c0:
         cc:d1:ea:23:02:4d:c8:fd:ec:78:72:ad:8a:b6:36:86:59:36:
         cc:37:68:2f:3f:74:f3:20:a8:3b:36:30:81:d1:37:63:30:2d:
         ae:28:91:1c:e6:a9:94:37:d5:78:03:19:cb:35:af:ae:a9:1c:
         6f:5c:a4:e9:6b:51:fa:2c:74:c7:6f:b1:48:c0:ec:ee:cf:cd:
         01:3e:4f:00:a8:c6:51:06:0a:31:60:13:22:0c:d9:e4:7e:cd:
         48:a8:9a:f7:df:58:03:f8:d9:1b:bb:da:68:59:30:af:bd:4e:
         5f:ad:23:3a:b2:6b:87:a0:e5:5f:3b:d7:d6:53:2f:0d:6f:dd:
         a0:7d:65:71:f0:d4:f6:47:a5:88:ed:22:4f:df:7c:de:e9:42:
         5d:6e:f4:63:7f:c5:6f:bd:6c:e7:d5:50:97:ee:5b:f2:c9:de:
         b5:7c:25:3c:a8:6d:1b:81:36:39:75:46:ab:68:3b:e0:8c:5b:
         e8:6e:f9:09:d1:80:bd:03:11:ed:15:88:e9:80:f3:ee:04:80:
         08:85:8d:03:f1:eb:d9:ee:ae:9e:a3:8d:44:56:72:8c:60:07:
         29:c9:f4:fa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/MQMYTDgN0fCuw3mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
MWZkMDBlZTEtZDA5OC00YWQ3LWIwOTMtYjNmYTMzNGIwOTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn9KvRMzpWrwR2jUb5t1J38tMY9dg6uIcHaw
zDPynRzmpu9RJuPsqjXH6HU6lRvipOnJP8pOpaokZRX2FCJ/Skr+0yBfRS97gEl3
jNFJleVZMGF7hy5//z/z0BkusRonFsMQZ0z6GyvzSHcDjfyr96llhW8Ru1lATPTJ
d5qo6JWHyDT0EdoGrPD68vi5/ggY/MK9yvW/yGhwgP58HgPTk84VF4TcaAQJs8Gj
rALOLRpkU/+aol5Z7Q9NO0yVQrhjlPlD2ZxaLYv0GGLrCCuUsMsKKSW0D2BAFg4G
99CGUHPOTFzlQtUimdjYa/U2nr5dZT9Hnuq2RPx0o4utCbDErwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGl3cwKGbwqOM8u9mgvzNo82Si7NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTk0OGFlYjQtNjQ3Mi0z
NTZlLWJiZmMtZGIxZWU4ZjEwY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmTEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALcgPsDdTIZ7/mcYs0GZoVqTVnQDsti9YT4ONb4PS0uMnwyzAzNHqIwJN
yP3seHKtirY2hlk2zDdoLz908yCoOzYwgdE3YzAtriiRHOaplDfVeAMZyzWvrqkc
b1yk6WtR+ix0x2+xSMDs7s/NAT5PAKjGUQYKMWATIgzZ5H7NSKia999YA/jZG7va
aFkwr71OX60jOrJrh6DlXzvX1lMvDW/doH1lcfDU9keliO0iT9983ulCXW70Y3/F
b71s59VQl+5b8snetXwlPKhtG4E2OXVGq2g74Ixb6G75CdGAvQMR7RWI6YDz7gSA
CIWNA/Hr2e6unqONRFZyjGAHKcn0+g==
-----END CERTIFICATE-----
Generated at Mon Dec 15 04:55:55 2025 by rpki-client