Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4adffaad-094f-3c5c-be44-b28e8e85a3cb.roa
File: 4adffaad-094f-3c5c-be44-b28e8e85a3cb.roa (raw, json)
Hash identifier: 3pJ2SnrEbFV3x3TsWF8NzO1tyzvpVd+iYH4fnsDvxMg=
Subject key identifier: 93:06:3E:CA:25:EE:57:08:B9:C5:26:63:41:C1:17:99:0B:8A:57:29
Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial: 010D0C9F4328584CEA5CDA609915627A644CC280
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4adffaad-094f-3c5c-be44-b28e8e85a3cb.roa
Signing time: Thu 19 Feb 2026 14:00:40 +0000
ROA not before: Thu 19 Feb 2026 14:00:40 +0000
ROA not after: Wed 20 May 2026 13:00:40 +0000
asID: 21777
IP address blocks: 199.189.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ea:5c:da:60:99:15:62:7a:64:4c:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Validity
Not Before: Feb 19 14:00:40 2026 GMT
Not After : May 20 13:00:40 2026 GMT
Subject: CN=10811dfa-1040-4b5b-b028-3138193acb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:c8:b0:30:d8:c9:b8:92:d1:35:83:3c:27:
9a:67:de:66:f0:49:2b:23:32:b1:b5:3c:99:53:97:
46:ef:30:2f:16:e5:f9:6e:8d:0a:45:41:0e:4e:a9:
d9:52:6f:d2:3a:b2:0a:71:cf:52:ec:bd:f5:dd:7a:
95:45:07:dd:9e:d0:d4:1c:4e:e0:87:48:d7:c9:20:
88:fd:ef:fc:5b:2e:b2:50:e1:4c:c7:17:08:ea:69:
87:1b:1a:3b:47:5f:22:21:e6:63:12:f4:b9:02:04:
1f:b0:73:43:eb:c6:13:44:b2:a8:5b:c5:c3:9d:cd:
0c:80:3c:4d:ef:4e:aa:ff:f1:32:4f:54:52:a9:b7:
29:8a:0f:af:de:57:26:93:6a:75:3e:84:a3:85:6d:
7d:a2:be:1a:e2:f4:27:d6:cf:a8:62:c5:b2:e0:5f:
36:a4:a5:27:0b:fd:06:2e:6f:39:a8:0a:cf:85:10:
be:85:03:51:65:e5:a3:e2:e6:f5:80:e2:80:ee:29:
ed:07:fb:43:ce:12:4c:05:77:2f:57:75:13:c3:a2:
ee:ec:ae:f6:0b:95:9c:48:1e:2d:00:6d:92:01:37:
a4:46:7f:10:16:2e:4c:a2:6c:12:2b:a3:b8:dd:6d:
dc:80:2a:31:1d:00:2a:8e:a5:92:b7:dd:97:44:46:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:06:3E:CA:25:EE:57:08:B9:C5:26:63:41:C1:17:99:0B:8A:57:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/4adffaad-094f-3c5c-be44-b28e8e85a3cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
X509v3 Authority Key Identifier:
keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.189.30.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:e9:c2:3d:89:53:1b:28:2b:da:d4:81:12:43:d1:28:3f:4f:
a0:1c:59:33:0f:72:e3:b0:f4:69:4e:3c:dc:59:53:ad:3d:cf:
d6:75:26:97:0d:02:aa:90:89:a0:ca:eb:ee:01:6a:ad:52:0f:
82:8c:79:35:43:bd:73:76:0f:fe:82:50:60:74:0f:cd:b0:ef:
7f:ed:c0:aa:cf:af:c2:d4:92:1a:bf:c8:66:04:69:67:d1:d9:
b3:0a:cb:30:f1:38:a4:b6:c4:98:22:55:c3:25:bf:5c:dd:33:
a2:d1:ea:de:cd:47:59:5d:a8:a9:17:35:b1:33:20:53:2f:a5:
a8:76:eb:7f:0e:80:81:d9:12:18:19:5c:0c:f4:7e:ff:af:70:
f5:a8:42:22:87:49:b9:a8:76:3c:8c:37:40:47:60:1d:2a:59:
0d:6a:8f:fb:f9:0e:7c:2f:64:93:30:d6:30:d6:aa:9c:fb:45:
8b:4c:7e:60:82:5a:2e:5e:95:52:9a:df:23:54:f8:b0:6b:ce:
8f:c2:d8:9d:9f:96:16:f0:bd:69:e1:02:dc:4b:a5:a9:a1:0d:
36:e1:0d:74:d2:a8:d7:fb:c9:48:d8:9a:2f:71:d7:a0:cb:1b:
9f:c3:86:d2:7e:c8:df:55:64:cd:16:eb:8a:22:da:b0:2c:38:
44:6c:1f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 03:33:45 2026 by rpki-client