This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ba31a330-7937-3d4f-b23b-74c74d9c03dc.roa
File:                     ba31a330-7937-3d4f-b23b-74c74d9c03dc.roa (raw, json)
Hash identifier:          D7renaKbwv43Cf/OSREQUiTObnxRqbtsf0ia93B1bBU=
Subject key identifier:   90:BF:FD:37:40:8B:02:D0:C9:A1:EE:7A:39:3D:23:42:E1:9E:EC:29
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583D3248B7DE5C7C3B8DBABF5A40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ba31a330-7937-3d4f-b23b-74c74d9c03dc.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        18.53.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:32:48:b7:de:5c:7c:3b:8d:ba:bf:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=343e2832-7a70-4dea-b4e2-cf2512f00f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:15:44:49:1f:05:16:43:b2:f8:7e:bd:9c:1d:
                    43:02:e8:9d:e9:33:e5:67:44:99:23:1a:a8:d4:bd:
                    86:b7:c3:80:8a:69:e8:ea:96:01:ff:6e:c3:bc:d4:
                    47:05:60:f4:ca:f5:8a:9c:2d:cf:21:4b:90:12:15:
                    c6:3b:81:4b:e8:7c:59:7b:44:d4:ce:47:65:7c:27:
                    74:44:fd:f6:80:d9:96:08:ab:28:c6:13:cd:e8:92:
                    2a:c9:8c:c5:76:e6:73:f5:59:25:53:46:ae:69:fe:
                    d1:02:87:9a:6c:db:42:32:81:2f:d4:8b:2c:4e:03:
                    42:d0:11:a8:46:05:32:9a:dd:d3:eb:cc:04:ff:5d:
                    d2:6a:38:f7:cf:86:ba:b4:eb:89:a1:2c:9a:ec:e4:
                    c7:35:e3:fa:c2:8b:1b:bd:0d:b4:6c:9d:06:8a:6b:
                    1c:27:45:82:85:9e:c6:66:3b:97:0a:95:56:57:ba:
                    f8:a2:a3:bb:d3:30:c5:65:d3:92:c9:cf:14:a8:8c:
                    96:b9:27:44:a8:36:87:63:4c:e2:12:8c:08:fd:06:
                    e3:f7:65:17:e0:e5:db:0c:0c:ca:ad:d8:b9:bd:87:
                    db:a6:6e:8a:07:6a:41:84:c7:1d:c5:3d:0c:fb:d8:
                    ff:f6:13:a3:2b:12:84:cd:5b:28:4a:4d:9d:f6:b3:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BF:FD:37:40:8B:02:D0:C9:A1:EE:7A:39:3D:23:42:E1:9E:EC:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ba31a330-7937-3d4f-b23b-74c74d9c03dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d9:c9:63:8f:1c:38:05:d2:0f:23:b2:16:54:1c:9c:e0:b8:
         2f:9d:08:13:43:b7:75:f0:40:be:9e:fa:c8:27:57:eb:9c:d3:
         67:1b:e5:fc:6c:f3:d1:a0:fb:1f:cb:12:ea:49:be:2c:3f:02:
         64:78:4a:93:3f:e2:eb:29:53:80:fc:2c:2a:d6:e8:47:c4:00:
         31:17:1f:5e:09:a4:5f:64:d6:1b:20:57:75:a0:80:4e:d1:8a:
         27:01:e0:1e:ee:ed:5b:62:80:14:2e:09:2b:58:50:57:04:e8:
         e3:0c:3f:63:d9:dd:bd:9a:49:8e:09:8e:5e:6e:2c:1c:a9:42:
         5e:bf:43:47:34:a6:72:af:61:54:bd:91:66:07:d6:b1:74:b1:
         a6:05:92:a0:c9:1e:52:94:0e:f1:39:c5:54:82:6a:d5:52:de:
         1b:7c:92:35:19:7e:32:58:f5:31:65:05:a3:ed:97:fb:f1:69:
         20:0d:4d:06:79:37:b6:f7:17:39:88:d9:66:d0:76:87:2a:3f:
         65:b6:3f:e4:42:51:b1:3f:38:e7:db:0e:9f:9f:f9:b8:86:1d:
         1b:59:ae:07:9f:4a:b5:ba:4f:12:1d:5c:c9:4e:44:ef:d7:e8:
         f9:2b:e9:8b:d6:d9:77:ad:64:ad:58:3b:49:c9:8e:42:b5:50:
         95:26:6f:b6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0ySLfeXHw7jbq/WkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
MzQzZTI4MzItN2E3MC00ZGVhLWI0ZTItY2YyNTEyZjAwZjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhVESR8FFkOy+H69nB1DAuid6TPlZ0SZIxqo
1L2Gt8OAimno6pYB/27DvNRHBWD0yvWKnC3PIUuQEhXGO4FL6HxZe0TUzkdlfCd0
RP32gNmWCKsoxhPN6JIqyYzFduZz9VklU0auaf7RAoeabNtCMoEv1IssTgNC0BGo
RgUymt3T68wE/13Sajj3z4a6tOuJoSya7OTHNeP6wosbvQ20bJ0GimscJ0WChZ7G
ZjuXCpVWV7r4oqO70zDFZdOSyc8UqIyWuSdEqDaHY0ziEowI/Qbj92UX4OXbDAzK
rdi5vYfbpm6KB2pBhMcdxT0M+9j/9hOjKxKEzVsoSk2d9rPQIQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJC//TdAiwLQyaHuejk9I0LhnuwpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmEzMWEzMzAtNzkzNy0z
ZDRmLWIyM2ItNzRjNzRkOWMwM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEjUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAh9nJY48cOAXSDyOyFlQcnOC4L50IE0O3dfBAvp76yCdX65zTZxvl/Gzz
0aD7H8sS6km+LD8CZHhKkz/i6ylTgPwsKtboR8QAMRcfXgmkX2TWGyBXdaCATtGK
JwHgHu7tW2KAFC4JK1hQVwTo4ww/Y9ndvZpJjgmOXm4sHKlCXr9DRzSmcq9hVL2R
ZgfWsXSxpgWSoMkeUpQO8TnFVIJq1VLeG3ySNRl+Mlj1MWUFo+2X+/FpIA1NBnk3
tvcXOYjZZtB2hyo/ZbY/5EJRsT8459sOn5/5uIYdG1muB59KtbpPEh1cyU5E79fo
+Svpi9bZd61krVg7ScmOQrVQlSZvtg==
-----END CERTIFICATE-----