This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/04bcb534-109e-3dec-a653-5e03796d1436.roa
File:                     04bcb534-109e-3dec-a653-5e03796d1436.roa (raw, json)
Hash identifier:          HMXGf1vapq/hKJ5oFWW7iFpxr28tv+MDxdnUZZYnKug=
Subject key identifier:   24:4D:7A:7B:C6:32:93:04:E3:9B:CD:53:E1:D2:9C:2B:23:CF:FC:FF
Certificate issuer:       /CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8
Certificate serial:       010D0C9F4328584BE555CB3F81C230E2FAAC0500
Authority key identifier: 0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/04bcb534-109e-3dec-a653-5e03796d1436.roa
Signing time:             Tue 18 Nov 2025 02:00:30 +0000
ROA not before:           Tue 18 Nov 2025 02:00:30 +0000
ROA not after:            Mon 16 Feb 2026 02:00:30 +0000
asID:                     400764
IP address blocks:        206.223.152.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e5:55:cb:3f:81:c2:30:e2:fa:ac:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8
        Validity
            Not Before: Nov 18 02:00:30 2025 GMT
            Not After : Feb 16 02:00:30 2026 GMT
        Subject: CN=b576de7b-b7cc-4503-991e-697941cd741d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:87:b8:3d:d2:6d:c4:ac:be:2d:93:a5:70:
                    c7:12:9f:50:fc:3a:6b:8f:de:ad:47:2b:1d:89:4f:
                    89:b5:e5:29:a7:68:80:14:13:20:c5:1d:b6:86:6c:
                    8a:c5:53:19:b7:89:70:b1:00:09:16:bc:7d:96:89:
                    9e:7c:fe:ad:92:77:13:8f:a7:02:0c:61:ea:e6:ed:
                    8a:58:98:53:f9:15:52:76:17:30:df:d6:df:c1:8f:
                    a3:d0:61:3c:f8:34:78:b4:15:64:bf:b7:25:0b:ce:
                    85:4f:bf:9a:08:0d:cb:c6:7d:df:ef:2d:56:b8:a1:
                    34:5c:e0:fc:cd:75:c8:d9:b5:92:4d:55:7a:23:5b:
                    27:80:ab:c2:ba:e5:91:de:a4:71:e5:b7:b9:ac:62:
                    25:87:55:9e:eb:13:69:ee:66:38:38:00:50:e7:4b:
                    99:9c:4b:81:8b:57:54:b9:cf:80:42:22:0d:cc:6f:
                    c7:5a:83:0e:08:7a:4a:c0:79:2e:19:d1:47:32:d8:
                    dd:cb:64:7b:2b:ce:fb:56:fd:eb:1e:0e:78:8a:c1:
                    4a:9f:87:01:0c:b6:52:03:14:43:c8:05:07:98:d4:
                    6f:aa:56:26:ff:ae:69:0d:e1:b9:cc:92:9f:de:e7:
                    4d:68:6e:de:f9:d0:82:68:d6:0f:42:cb:2d:ba:01:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4D:7A:7B:C6:32:93:04:E3:9B:CD:53:E1:D2:9C:2B:23:CF:FC:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/04bcb534-109e-3dec-a653-5e03796d1436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl

            X509v3 Authority Key Identifier:
                keyid:0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:65:bb:b8:52:de:da:9c:0d:f3:bb:37:38:95:f1:38:8f:e3:
         b0:7e:f1:dc:a2:7b:3d:57:35:cc:31:7b:93:14:9b:76:08:61:
         d5:8c:94:d8:5f:5b:18:5c:e1:81:4e:0b:58:13:9c:1d:a2:70:
         16:31:c6:62:9b:eb:50:1e:69:d8:d9:be:f5:65:ba:14:cd:e9:
         2c:37:9f:81:7c:10:dc:a8:18:a7:65:d6:c3:66:d4:d3:04:8a:
         f1:35:7e:1e:09:c0:b1:67:c3:a0:81:c3:26:38:c6:cf:ed:b0:
         ef:b7:5a:26:55:92:62:7f:bd:ea:e1:ae:1b:9e:8d:49:7b:f7:
         d0:df:59:9b:fa:14:cd:d6:c5:2c:40:ce:a8:04:8b:d2:89:57:
         fa:71:de:ee:0a:80:ad:e9:71:2b:bc:96:b2:bb:fb:13:ea:c8:
         26:18:cb:4c:03:0e:bf:62:ad:ed:7e:73:6c:bf:a4:4b:33:c6:
         85:f3:fd:71:61:f7:5a:1e:b3:2b:cb:f5:83:db:3c:a7:ca:a4:
         a1:bb:8c:38:24:85:5c:e3:ab:c0:43:ca:25:b3:68:ad:93:9e:
         a5:39:da:38:46:29:af:d7:43:79:50:60:8a:19:dc:26:7f:79:
         c6:5e:7a:b9:9b:40:74:cc:21:54:6f:f5:96:04:d5:72:11:02:
         d4:be:b1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----