This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ec1bc268-2e76-3051-8756-1153e2517f39.roa
File:                     ec1bc268-2e76-3051-8756-1153e2517f39.roa (raw, json)
Hash identifier:          h26ljlzVKYAJzk16oRMbH6nyebYq2/uw3AeFJdlFPMk=
Subject key identifier:   2A:36:89:A2:C2:E1:BE:08:89:2A:5B:6D:A8:45:78:AF:0A:C8:6E:DB
Certificate issuer:       /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial:       010D0C9F4328584B609C8E9AFA71D2663BC11100
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ec1bc268-2e76-3051-8756-1153e2517f39.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     153371
IP address blocks:        23.175.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:8e:9a:fa:71:d2:66:3b:c1:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=8b483578-19e2-423e-8d14-4b4308e264b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:8a:37:99:85:20:fc:00:ca:0f:99:f5:15:
                    8b:40:b8:41:d1:79:e8:5c:e5:ce:a7:6d:2c:b1:51:
                    5a:e8:44:55:47:c1:12:66:5c:94:4a:b7:e0:67:4e:
                    f9:9b:44:f2:aa:d2:f0:0a:72:c8:3c:d8:3f:fd:eb:
                    54:11:22:45:74:c3:e6:24:74:71:70:8d:67:57:8c:
                    78:8e:19:66:09:3c:d6:fa:a1:31:11:b9:66:98:15:
                    26:90:89:6e:f0:6b:82:ac:dc:32:6b:72:f3:47:68:
                    af:38:03:41:a3:2c:c8:f2:ac:8e:bc:dc:f9:cf:94:
                    ee:d5:44:c2:dc:a8:d6:fe:94:77:d5:a3:ae:42:b5:
                    7e:ef:2d:e2:57:fe:0a:5a:30:9d:7b:95:82:58:46:
                    49:f9:8c:29:e6:fb:9a:84:af:46:da:c5:ea:68:92:
                    4e:71:5d:43:77:d1:c8:9f:df:3b:b5:9e:ba:bf:06:
                    de:a1:95:cf:ec:23:c7:01:ff:61:09:5b:ac:f9:4e:
                    84:cf:58:86:88:9a:0d:8d:34:23:5f:84:f4:bc:56:
                    33:af:ba:63:3b:a9:81:3f:5d:a8:c9:84:82:7b:75:
                    1f:11:77:bc:25:6b:07:2b:1b:46:67:57:58:b5:7d:
                    1c:45:dd:65:36:f2:81:38:81:f3:7e:2f:6b:87:a8:
                    44:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:36:89:A2:C2:E1:BE:08:89:2A:5B:6D:A8:45:78:AF:0A:C8:6E:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ec1bc268-2e76-3051-8756-1153e2517f39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl

            X509v3 Authority Key Identifier:
                keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:d5:17:e6:20:87:88:00:3c:27:38:e6:52:7a:70:40:89:
         fb:8d:d5:84:1e:a6:1b:4b:72:95:14:7e:cf:b3:a1:9c:96:75:
         ae:e6:ce:7d:be:b9:9f:10:01:46:6c:69:e1:9e:6d:f7:f3:94:
         5d:d4:6f:1f:5e:0c:d6:ad:b3:df:7c:98:80:bc:ed:f6:70:22:
         6f:78:16:e5:ee:f5:74:cf:1b:77:e1:51:c3:23:b9:a7:bf:1a:
         dd:9f:15:d9:14:53:22:0f:6b:29:60:12:f0:ec:05:e2:51:bb:
         ba:47:a9:69:83:3c:1c:3b:59:da:20:7f:1b:4a:de:ee:25:0e:
         ec:12:28:7a:ee:89:d6:2c:33:d0:7b:22:91:5c:d2:7f:f0:00:
         be:c3:72:ff:1a:90:80:e8:b3:6a:f9:38:65:3d:00:cf:eb:8a:
         58:8b:eb:10:53:1c:a7:5b:fa:c9:18:63:c9:b0:f4:1d:ea:db:
         f8:14:c1:1d:bf:83:c0:df:61:c9:3a:56:d7:7c:4f:26:87:13:
         64:b8:5a:cd:d4:b1:13:4f:8d:19:f9:03:3a:27:45:c7:c8:2d:
         9a:5e:84:00:5d:4d:44:fe:37:4d:64:53:95:f0:6d:fd:f3:51:
         e3:bd:99:88:08:60:e2:16:9e:93:98:eb:34:ef:41:c0:9d:4f:
         d4:2b:fe:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----