This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7e2278c-1b2b-3e68-aa2f-b0d8bc8c4e3e.roa
File:                     f7e2278c-1b2b-3e68-aa2f-b0d8bc8c4e3e.roa (raw, json)
Hash identifier:          LNmZ9IKUYm3SkO4w+OJ3nwcFEhqQE3Q3faHStoEcTWE=
Subject key identifier:   A4:BA:2C:D0:DA:FA:11:45:FB:E3:5A:F4:61:9F:B3:40:36:3A:DA:46
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DBC9D64BAF152F7D974FC4500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7e2278c-1b2b-3e68-aa2f-b0d8bc8c4e3e.roa
Signing time:             Thu 28 Apr 2022 12:00:00 +0000
ROA not before:           Thu 28 Apr 2022 12:00:00 +0000
ROA not after:            Fri 03 Jun 2022 04:00:00 +0000
asID:                     6167
IP address blocks:        161.188.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:bc:9d:64:ba:f1:52:f7:d9:74:fc:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Apr 28 12:00:00 2022 GMT
            Not After : Jun  3 04:00:00 2022 GMT
        Subject: CN=17ffeb8b-2116-497e-b8c0-16cd9f1fefd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:f1:9b:f9:d2:73:db:e8:5a:00:15:92:98:
                    92:88:3a:40:1b:53:39:0e:c8:0a:18:ac:1c:5e:d0:
                    75:0f:53:4d:b3:f8:7a:df:25:10:1d:fb:50:7d:07:
                    f4:5a:db:18:01:7c:eb:e3:2f:2b:15:38:02:81:d9:
                    b5:1e:d1:f0:ec:c9:15:db:98:08:19:b7:11:20:2f:
                    fd:37:0f:9b:de:79:6a:3d:64:96:3b:8e:db:69:b7:
                    4c:7d:e2:ba:09:d3:f3:17:9d:72:9c:87:29:46:7e:
                    2f:50:ee:5d:46:a1:d6:02:43:de:05:7c:a9:7d:e9:
                    c5:07:9c:94:6e:a8:49:9b:98:06:02:bf:66:5c:f8:
                    e1:77:a9:e5:7f:44:2c:2a:fb:ef:b5:0c:77:04:a0:
                    56:db:5e:a0:58:d0:b0:6b:80:b2:8e:18:3f:6b:34:
                    82:5a:ca:79:8a:ec:42:bb:4e:b5:c2:82:47:9b:16:
                    3b:e8:5a:73:8c:fb:6d:dd:92:45:2f:13:25:77:d5:
                    2f:20:00:24:36:de:cc:6d:ba:49:2d:69:a4:e7:35:
                    66:8d:99:0d:c8:16:f0:79:2e:cd:1a:ad:33:86:5f:
                    9d:7c:de:14:63:f8:ff:1e:17:49:01:32:33:ff:f3:
                    5a:cf:01:48:b8:6e:e7:72:42:c8:d4:c9:49:a2:b5:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BA:2C:D0:DA:FA:11:45:FB:E3:5A:F4:61:9F:B3:40:36:3A:DA:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7e2278c-1b2b-3e68-aa2f-b0d8bc8c4e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.188.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c7:68:01:43:8f:30:bb:b5:8b:cb:26:69:a0:a8:fb:37:04:
         c5:c4:84:3e:4b:ed:6b:66:24:1c:44:87:de:e4:7b:1d:90:7e:
         12:ea:92:83:ec:ed:54:4e:61:1e:4e:c5:b1:04:ad:a7:51:87:
         83:9f:42:f3:02:c8:25:67:68:4a:6d:10:4a:b4:82:b2:f1:0d:
         db:17:b8:c6:8c:4b:04:8b:88:39:6f:ab:81:09:7b:c1:a8:39:
         e0:5a:ea:e6:60:9e:29:11:6f:c7:6b:61:56:63:10:95:5a:0b:
         45:e4:6a:99:d8:02:fe:86:41:04:3e:2e:aa:e0:47:0c:38:24:
         a5:a2:90:50:8d:76:c9:f9:8a:26:be:3f:a3:8e:c4:ef:0c:be:
         18:62:e9:06:de:05:f1:8f:92:7e:65:b4:51:a6:43:35:56:06:
         f6:2e:34:b9:70:08:34:3a:04:c4:74:90:80:7b:89:07:85:a2:
         39:52:b5:e5:8d:82:f2:16:78:b0:b0:4c:d4:63:c8:60:e3:68:
         fd:f2:18:7a:af:0f:49:66:b4:bd:0e:fd:59:51:26:18:05:62:
         55:37:35:67:27:32:12:8d:12:0c:63:1c:e6:78:cf:d8:d7:d6:
         87:d2:6a:ad:33:db:da:b6:06:da:fd:54:59:01:91:94:7f:78:
         a9:e5:13:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----