This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa7014c5-2524-34fe-96b4-3712321517d5.roa
File:                     aa7014c5-2524-34fe-96b4-3712321517d5.roa (raw, json)
Hash identifier:          7xxFcTK7MAHOJLF9gg2fEzZWhxFznA129C1YIAWfnPo=
Subject key identifier:   F6:C9:0A:AE:4D:E0:95:C2:B0:14:F1:F3:78:67:6F:B2:C0:85:CD:AF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F432858401FAF504E0C6307032B8FD580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa7014c5-2524-34fe-96b4-3712321517d5.roa
Signing time:             Sat 03 Dec 2022 12:00:00 +0000
ROA not before:           Sat 03 Dec 2022 12:00:00 +0000
ROA not after:            Sun 08 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        18.198.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1f:af:50:4e:0c:63:07:03:2b:8f:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec  3 12:00:00 2022 GMT
            Not After : Jan  8 05:00:00 2023 GMT
        Subject: CN=33292763-68bc-47c9-bc7c-c38c4142a67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:b0:7b:64:49:91:62:d3:06:4c:c3:31:b9:
                    25:aa:52:9a:ce:dc:5f:22:41:c3:08:79:fb:28:ae:
                    85:9e:76:12:98:46:c2:ed:54:c2:8e:28:04:df:cd:
                    25:e0:98:08:be:c5:07:78:0e:b8:6f:e8:10:fc:45:
                    f0:96:37:45:f4:11:1c:ea:93:af:08:39:6b:71:70:
                    13:0b:61:46:f7:80:69:79:a2:80:68:ad:97:11:04:
                    0c:85:19:eb:c7:48:12:2b:be:47:f4:0b:43:e4:d4:
                    ab:49:2d:0f:50:d7:87:37:cd:87:7f:28:cd:6f:96:
                    00:d0:ce:a5:c0:86:c4:b3:0f:73:30:a3:f2:f4:df:
                    e9:d9:23:bf:74:50:b9:df:8e:d8:93:1b:5e:ac:89:
                    f9:fc:a8:7e:89:ba:48:9c:4d:82:8b:9d:9a:62:3a:
                    17:bb:84:42:13:5b:ec:49:d6:64:23:33:f8:3a:93:
                    d6:0e:41:e2:cc:55:9f:25:62:b4:7c:2b:f6:e2:8c:
                    af:4a:70:d5:1d:5d:6a:7d:6d:32:6a:db:a0:f0:9e:
                    f8:fa:e8:d3:00:7e:55:3e:de:99:a8:ee:bd:56:d6:
                    8a:77:39:8a:ab:91:9a:90:87:9e:9a:96:09:4b:68:
                    aa:a8:4f:ca:78:0a:b4:b5:66:fd:4b:85:21:09:46:
                    60:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C9:0A:AE:4D:E0:95:C2:B0:14:F1:F3:78:67:6F:B2:C0:85:CD:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa7014c5-2524-34fe-96b4-3712321517d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.198.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4f:7a:84:c5:27:ee:10:05:91:04:4a:8b:32:71:33:9b:ca:
         ee:70:3e:91:0d:c5:2f:f9:b7:6c:b0:a6:48:22:32:ba:70:c7:
         87:50:37:e0:ff:60:0c:3c:e6:65:bb:1b:bf:28:45:e2:2b:01:
         02:52:8a:7a:75:1c:80:c1:8e:fa:9d:bd:df:a8:6d:f5:e7:9e:
         04:0a:08:68:b8:1a:ba:9b:b8:e8:49:bc:7d:02:ef:dc:6d:61:
         8c:00:e3:9d:b4:82:25:c1:dd:0b:76:d7:37:0b:6c:d8:db:12:
         70:1e:3e:94:17:f5:09:a3:22:33:c0:87:67:96:12:71:1a:fc:
         c1:5e:fc:48:c4:a3:9a:d7:af:74:b4:93:67:e3:cf:ac:df:19:
         61:c0:a9:0e:99:a0:ec:cf:37:e8:76:6f:7b:78:e8:c4:7a:ef:
         f7:d8:00:5c:25:60:82:b4:f2:d6:8b:0f:0d:fb:54:4f:f8:d5:
         fd:2f:2f:5e:81:2a:33:6a:28:48:83:f0:8c:52:57:65:db:df:
         7a:7a:bc:34:b6:3a:e4:c6:ec:b7:61:5d:a2:24:ec:7e:8f:65:
         97:cb:c1:d2:a3:71:a3:1f:51:cc:13:24:88:e5:c1:a2:cf:7d:
         48:0f:58:54:e4:7d:4b:9b:18:2e:4b:e8:aa:92:c7:dd:d6:f0:
         8e:0e:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----