This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bfd67101-1555-3ae2-8b28-6fe6c53d1238.roa
File:                     bfd67101-1555-3ae2-8b28-6fe6c53d1238.roa (raw, json)
Hash identifier:          nMCVZw9GquOnb33lvCsZu54KApvTRBy7D50yOrEKBMQ=
Subject key identifier:   B4:46:4D:28:47:87:C3:0A:4D:EE:E1:61:71:61:0B:A6:F7:FE:C2:FF
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583FC55532772AC2015AD27C58B0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bfd67101-1555-3ae2-8b28-6fe6c53d1238.roa
Signing time:             Tue 01 Nov 2022 12:00:00 +0000
ROA not before:           Tue 01 Nov 2022 12:00:00 +0000
ROA not after:            Wed 07 Dec 2022 05:00:00 +0000
asID:                     8987
IP address blocks:        13.248.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c5:55:32:77:2a:c2:01:5a:d2:7c:58:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Nov  1 12:00:00 2022 GMT
            Not After : Dec  7 05:00:00 2022 GMT
        Subject: CN=1a11ab32-53f2-47d4-94ee-5cb12244e521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0e:c9:d4:4a:93:90:db:c7:52:e1:44:14:c7:
                    e3:9b:92:af:50:08:14:78:a7:20:39:4d:89:ae:0a:
                    07:3b:e8:fc:89:68:97:80:85:77:10:ae:14:7f:39:
                    6e:e2:7a:14:6a:20:51:47:ca:8d:3e:fe:79:0e:fe:
                    00:a1:ca:1c:0a:33:30:11:cd:31:af:73:95:cf:fb:
                    10:c4:69:e9:36:f0:1c:6d:a0:a8:34:ab:dd:23:7c:
                    f2:f2:b5:82:b3:10:2a:ed:10:24:2f:66:6f:09:d0:
                    1f:21:81:65:7f:7d:2b:b4:00:f4:43:58:f8:45:a8:
                    fa:b3:99:d6:40:9a:82:4e:74:13:ea:08:31:8d:a4:
                    30:aa:5d:08:87:77:13:de:9a:32:43:5c:60:5e:dd:
                    69:98:e5:9c:56:f2:c8:27:8a:f6:39:c9:cd:16:09:
                    1c:88:47:51:3c:e7:55:45:12:62:5f:d3:e9:f9:3d:
                    40:0e:4f:1d:31:ca:e2:44:d5:76:50:71:de:57:1f:
                    d5:fd:01:77:7c:28:9b:b0:20:ab:32:71:45:b1:f9:
                    46:72:55:33:8b:5d:27:cd:f3:8a:fa:ec:cf:89:ef:
                    6e:78:f3:d1:c9:48:35:d4:81:7c:3f:03:30:9c:d9:
                    e7:f5:7b:48:4e:f6:81:2f:2c:ec:d7:0a:59:25:47:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:46:4D:28:47:87:C3:0A:4D:EE:E1:61:71:61:0B:A6:F7:FE:C2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bfd67101-1555-3ae2-8b28-6fe6c53d1238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.248.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:17:8a:db:d3:35:ff:d9:2c:77:66:d2:68:ed:50:86:92:55:
         ec:b9:e3:c5:df:f0:29:88:58:75:3b:7f:6a:68:aa:2b:4b:22:
         4a:a5:01:71:a0:de:40:85:f9:54:98:91:fb:d5:df:39:ab:f4:
         53:5f:b3:af:33:59:30:15:ea:e2:9f:99:1f:35:6b:97:98:fb:
         5f:3a:5c:91:f5:4a:3e:aa:20:0d:8b:2a:33:bf:53:ad:f1:ab:
         01:9d:59:13:80:bc:ed:81:fe:97:13:e9:d4:80:c8:26:e7:0f:
         ff:ab:2f:83:ff:48:2a:08:97:00:bb:14:b8:46:8c:9a:45:a4:
         fd:25:f4:1d:d3:7e:9b:30:4a:10:5e:af:b1:ba:09:0b:25:2d:
         2b:6d:d6:c6:b9:71:81:12:2b:50:32:78:8f:6a:00:2a:69:14:
         9f:4f:61:59:e0:51:ea:12:16:19:ba:63:71:9b:72:e6:6a:43:
         5a:88:55:44:f7:be:aa:50:cf:a8:2c:b0:07:db:dc:10:52:52:
         e4:2a:b1:12:56:6c:db:e7:8e:39:86:f6:00:ab:73:c3:67:44:
         92:4a:c8:0f:b3:89:52:ac:c6:ef:35:61:23:c8:44:dd:fa:27:
         b9:bd:9d:9d:3e:e0:eb:f0:7b:dc:d3:2d:42:10:68:ad:62:1a:
         2b:b1:5a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:21:11 2025 by rpki-client