This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf934556-d493-3333-a71c-f6900b3ddf38.roa
File:                     bf934556-d493-3333-a71c-f6900b3ddf38.roa (raw, json)
Hash identifier:          tRqB7Q2URklf7R9nnhqIbHyG0EM4cqPPo6+Pp/VV/vU=
Subject key identifier:   5E:E1:1F:F7:DD:D2:39:AB:07:68:10:8D:97:84:4E:34:24:C3:88:45
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583C79CBC725E3437A3640B1CB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf934556-d493-3333-a71c-f6900b3ddf38.roa
Signing time:             Tue 04 Jan 2022 05:00:00 +0000
ROA not before:           Tue 04 Jan 2022 05:00:00 +0000
ROA not after:            Tue 08 Feb 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        136.128.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:79:cb:c7:25:e3:43:7a:36:40:b1:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan  4 05:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2022 GMT
        Subject: CN=516ea9f1-6d16-4973-a2df-77781da1cc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e3:52:86:15:81:f1:ad:95:8a:a8:6b:c0:bd:
                    2a:4a:6c:64:c3:06:7a:df:0b:f2:bf:49:d9:59:5b:
                    a0:93:b5:31:22:5e:4c:2b:73:8e:be:0e:91:3d:08:
                    be:7d:c9:b0:58:01:2c:13:60:9b:5e:cb:7d:cf:8f:
                    02:99:53:89:99:2c:93:02:ed:8c:a9:03:89:14:bf:
                    e1:4a:5c:66:43:a1:f0:ed:3d:1a:2f:fc:fe:bf:49:
                    80:e3:27:92:a6:bc:d3:9d:ae:da:1f:b6:24:1a:2c:
                    57:8f:93:f0:90:71:fb:af:fd:01:42:1f:1b:60:16:
                    69:96:7c:10:22:ae:bd:c4:42:95:9a:a9:ec:9e:99:
                    81:fd:32:b8:b9:f3:1b:0b:80:5e:82:19:bc:4a:29:
                    83:f9:b1:2c:b7:30:6e:b2:7a:a3:2b:4a:a1:e7:03:
                    7d:64:81:64:ae:d0:15:85:d0:f1:da:91:2b:f3:e5:
                    28:9f:f7:b5:ee:3a:76:90:e1:ac:8c:1b:e6:5e:9e:
                    cf:0d:42:c4:b9:48:98:d4:d8:a4:f8:88:05:61:d2:
                    74:56:94:39:09:51:66:f7:d9:7c:67:37:fb:57:00:
                    6d:53:35:77:f8:ca:e3:43:67:43:b8:50:d8:19:ce:
                    64:e1:75:e8:a8:c9:ee:7d:2e:6c:43:e1:69:b7:f2:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E1:1F:F7:DD:D2:39:AB:07:68:10:8D:97:84:4E:34:24:C3:88:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bf934556-d493-3333-a71c-f6900b3ddf38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.128.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:48:76:51:6c:f8:f7:65:8a:ef:13:66:e0:7c:24:51:ad:ea:
         94:88:07:22:68:bd:f6:b1:92:3e:d0:da:80:a1:47:3c:b9:f9:
         f2:7a:76:bf:10:3c:d7:31:65:1e:9c:aa:3f:3d:27:93:fa:91:
         d1:60:f8:0a:66:4d:69:55:16:52:33:ab:c0:01:21:fc:a3:21:
         e2:a5:b2:39:9b:88:8c:bf:bb:99:73:40:48:bc:7c:61:5b:5a:
         ca:24:3c:fd:d3:f8:ab:dd:4f:17:f0:59:b9:ba:21:d2:7b:09:
         e6:ee:79:1a:d8:54:d9:1a:42:1c:72:0b:0e:ab:b6:2c:7e:49:
         ff:db:7c:39:35:3e:03:eb:6e:3a:de:f1:4d:76:77:a7:53:7e:
         8d:4f:e9:49:eb:77:1a:2f:d9:41:d3:78:65:97:12:b4:37:b5:
         08:18:ad:13:07:34:1a:7b:86:b0:a8:20:2c:e8:02:d1:a5:4e:
         1c:ca:88:e6:97:42:66:93:f6:41:ea:e1:17:32:f7:39:ed:33:
         c0:94:f1:1c:8b:ab:f9:67:99:ed:d5:96:79:41:53:17:ca:c4:
         0a:76:06:c8:d5:49:45:66:ad:f5:32:01:60:d3:1c:68:f8:3a:
         c9:01:70:31:fb:d5:d5:d0:1d:39:44:04:14:82:1e:2c:02:51:
         07:38:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:57:33 2025 by rpki-client