In theory every AS, ISP provider or whatever, holds a certificate proving that it owns the range of addresses assigned to him. This is the Resource Public Key Infrastructure (RPKI) and it seems well implemented. If I understand correctly, the ISP is expected to use it to sign claims of routing and stuff related to BGP.
Now, if I need say a HTTPS or other kind of SSL-based certificate for a given machine, and the machine is going to be accessed using the IP address, can the AS use its certificate to sign my csr, in order to assert the claim that my machine is associated to this IP?
The question is at least three-fold: I do not know if such RPKI certificate is technically allowed to do this kind of signature, I do not know if it is allowed by the policies, and I do not know if browsers would accept the CA chain of the infrastructure.