Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/93b9a979-3e4d-3540-98fb-10997995334f.roa
File: 93b9a979-3e4d-3540-98fb-10997995334f.roa (raw, json)
Hash identifier: BxMDKJV3zUkRVRjR45k03B65zhwBM8/IEM9LGKot3Q4=
Subject key identifier: C9:DF:B2:69:29:B6:1B:31:F5:2A:1C:54:25:E7:16:90:46:18:53:BC
Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial: 010D0C9F4328584CEA5CD7F5802AF6286E559300
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/93b9a979-3e4d-3540-98fb-10997995334f.roa
Signing time: Thu 19 Feb 2026 14:00:40 +0000
ROA not before: Thu 19 Feb 2026 14:00:40 +0000
ROA not after: Wed 20 May 2026 13:00:40 +0000
asID: 21777
IP address blocks: 2602:ffc6::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ea:5c:d7:f5:80:2a:f6:28:6e:55:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Validity
Not Before: Feb 19 14:00:40 2026 GMT
Not After : May 20 13:00:40 2026 GMT
Subject: CN=74926fef-8790-41ed-99af-f1b9524abdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d1:d0:fa:76:c7:90:ad:bd:a8:98:69:7b:7a:
53:cc:2c:c5:cf:78:45:fd:53:2e:31:7f:4b:f2:ae:
64:7e:c6:c1:e3:8d:98:35:9c:75:2c:ef:58:70:19:
ac:60:91:94:44:11:98:5a:ad:52:64:de:84:4e:1b:
80:db:32:4d:a9:c2:38:a1:1b:2a:8d:26:a1:25:87:
1f:6c:31:18:5d:94:f0:a7:03:e2:8d:e2:f5:25:6b:
e5:87:dd:d7:b3:8d:55:ba:4e:a4:77:69:27:39:85:
2f:7b:fe:bf:db:9e:4c:c3:1a:ad:25:d1:b9:2e:bd:
44:e4:29:91:64:f6:5a:c7:c4:77:5f:84:dd:c2:e2:
39:37:20:ca:5a:87:61:9c:06:a0:71:78:89:cc:42:
9c:07:88:fd:5d:d5:e3:29:e6:a7:d9:3a:55:28:dc:
18:de:cf:0b:65:8d:79:bf:49:cb:3f:e3:17:75:ce:
4a:51:cd:9d:3c:bb:84:de:eb:b1:88:61:c7:b2:07:
80:1e:b9:1a:72:b7:8b:3a:06:a4:49:54:7b:81:84:
22:b8:bd:ef:45:54:b5:ff:54:c7:43:1a:cc:50:99:
b8:57:43:8d:ea:ab:11:56:cb:a5:18:a7:45:1e:aa:
b9:6d:64:5c:83:b5:30:2e:c7:61:50:b9:03:37:b9:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DF:B2:69:29:B6:1B:31:F5:2A:1C:54:25:E7:16:90:46:18:53:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/93b9a979-3e4d-3540-98fb-10997995334f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
X509v3 Authority Key Identifier:
keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:ffc6::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:b7:ca:71:8d:68:7f:67:be:d7:31:4f:25:b8:2c:2c:fa:40:
dc:25:4f:b9:a1:86:e1:e9:1c:8a:b3:c3:1f:4a:fd:d4:57:cf:
d8:04:72:68:3d:a0:d1:2f:ef:88:77:1b:ac:b8:93:c1:76:ab:
05:a0:d2:7f:ae:bc:c2:76:4a:f9:27:cf:24:c3:e6:2e:a8:12:
86:41:d9:81:26:a9:21:ba:4e:f6:c8:67:bb:0c:f5:43:b1:64:
8a:25:e5:b5:51:26:98:01:44:11:cb:e1:3e:62:8d:81:22:8b:
aa:ce:70:05:43:f9:43:b5:ce:c4:57:00:8f:42:42:e5:e8:64:
6a:60:70:9e:c8:60:59:08:22:24:4a:78:16:ae:3c:01:0f:78:
89:69:4e:32:4f:11:fa:af:b4:49:ad:2a:b3:75:30:e1:38:b6:
14:b3:66:7b:49:57:f0:83:36:6f:88:3b:d0:80:e7:5f:49:77:
df:ee:ed:d6:85:59:fc:48:bc:ec:bc:2a:71:1c:ee:65:2a:fa:
f7:ff:a3:12:71:fa:5d:4a:b5:91:31:3d:92:83:c3:b5:dd:2b:
3d:d3:02:9e:dc:21:a4:ca:9b:73:9d:5f:c3:ee:d1:2e:7d:37:
40:d1:33:1f:15:0e:df:21:63:97:3f:3a:13:22:dc:47:37:23:
3f:05:62:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 03:35:03 2026 by rpki-client