Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa
File: bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa (raw, json)
Hash identifier: sPFGckBGXAd7uGTVkhNlGuSslMd2k8BMkPm82gRHJ6Q=
Subject key identifier: 99:39:97:6B:58:CC:E2:95:84:AA:45:82:A9:28:7B:B2:2F:C8:38:D9
Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Certificate serial: 010D0C9F4328584CEA5CE2FA9D91ABBBE7BDD380
Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa
Signing time: Thu 19 Feb 2026 14:00:40 +0000
ROA not before: Thu 19 Feb 2026 14:00:40 +0000
ROA not after: Wed 20 May 2026 13:00:40 +0000
asID: 25779
IP address blocks: 206.168.9.0/24 maxlen: 24
207.174.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ea:5c:e2:fa:9d:91:ab:bb:e7:bd:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e
Validity
Not Before: Feb 19 14:00:40 2026 GMT
Not After : May 20 13:00:40 2026 GMT
Subject: CN=b602575b-b10d-49d4-a120-f18696f10f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:74:8b:91:b2:c9:1c:6a:96:b9:f8:19:51:
73:8f:d4:0c:09:6d:c2:e2:db:30:a9:81:c2:49:f1:
67:d0:69:61:f5:d8:6b:00:b6:a6:1e:0f:c3:1e:db:
7c:ec:dc:23:58:f5:cc:c7:67:b0:60:99:c7:9e:59:
28:bd:4c:26:1d:67:eb:9d:33:60:e2:0b:02:63:1f:
53:13:89:e8:61:fd:9f:67:de:92:c3:79:55:5b:61:
e0:6f:a0:52:79:15:12:44:9a:06:9f:3f:9b:95:6f:
a3:59:c0:b8:6a:dc:b8:68:82:91:3e:bb:96:d5:8e:
63:50:39:d6:f1:a4:c8:44:99:26:ac:9d:ba:0b:0b:
d4:bd:6a:13:49:68:fb:6f:d3:1d:3e:32:81:6e:48:
f8:15:36:83:6d:5b:68:a0:d0:25:72:53:df:af:7b:
d6:aa:d4:10:ff:fe:51:5e:ae:43:6e:53:30:2e:96:
00:77:92:c0:e8:61:4f:4d:5e:3f:32:6a:ef:3a:19:
d6:ea:9e:c5:08:50:ac:3b:b9:5b:d8:41:bf:0e:5c:
f3:70:a5:6f:2f:59:aa:8c:a4:dc:4b:75:f4:9b:ec:
35:b0:12:fd:4f:a6:ee:63:ac:a2:e6:11:ef:3d:90:
e7:7e:bb:bc:d7:23:9d:b8:83:b9:08:ee:f5:56:5d:
72:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:39:97:6B:58:CC:E2:95:84:AA:45:82:A9:28:7B:B2:2F:C8:38:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl
X509v3 Authority Key Identifier:
keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.9.0/24
207.174.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:51:c0:db:3d:e4:56:a6:46:28:d2:5a:06:53:17:f9:ce:ec:
30:9c:b1:4e:4c:fa:2b:f4:fa:c5:01:53:c8:24:17:3b:1b:69:
68:5f:04:65:97:fc:ef:d5:84:61:65:79:e7:be:8c:93:0c:03:
9a:5b:72:41:b9:7f:e3:9f:17:76:28:b2:1c:d5:35:59:5c:04:
f7:81:92:78:52:c0:82:7e:de:02:07:45:71:c4:ca:3e:de:a9:
ff:eb:e1:c3:43:21:45:33:64:86:6c:a5:e9:66:2d:3b:a3:5f:
6b:d0:a8:93:30:0e:5b:7c:2e:b6:e9:d8:12:49:11:55:09:b8:
e9:c3:56:7f:17:26:4e:fd:b9:f9:b9:b2:e6:96:cf:23:88:1f:
1b:eb:17:3a:dc:65:50:04:6f:98:83:c6:d5:d1:e9:8c:11:72:
75:09:85:0e:fe:c2:bd:a4:d5:07:8e:89:89:40:44:8e:42:28:
ca:1e:34:9a:43:66:4d:2e:a7:92:03:af:e0:e9:16:09:1a:6d:
15:9d:1a:96:cd:aa:d9:13:34:d7:43:bc:08:ec:a3:02:bd:ff:
46:86:bd:5a:ef:2f:ab:80:6d:f5:73:63:ce:28:60:ad:2d:58:
eb:64:16:93:a5:34:af:44:f3:43:0b:cb:f4:f8:8e:54:e2:44:
02:a3:c1:4c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzqXOL6nZGru+e904AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0
YTBlMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
YjYwMjU3NWItYjEwZC00OWQ0LWExMjAtZjE4Njk2ZjEwZjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqN0i5GyyRxqlrn4GVFzj9QMCW3C4tswqYHC
SfFn0Glh9dhrALamHg/DHtt87NwjWPXMx2ewYJnHnlkovUwmHWfrnTNg4gsCYx9T
E4noYf2fZ96Sw3lVW2Hgb6BSeRUSRJoGnz+blW+jWcC4aty4aIKRPruW1Y5jUDnW
8aTIRJkmrJ26CwvUvWoTSWj7b9MdPjKBbkj4FTaDbVtooNAlclPfr3vWqtQQ//5R
Xq5DblMwLpYAd5LA6GFPTV4/MmrvOhnW6p7FCFCsO7lb2EG/DlzzcKVvL1mqjKTc
S3X0m+w1sBL9T6buY6yi5hHvPZDnfru81yOduIO5CO71Vl1y1QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJk5l2tYzOKVhKpFgqkoe7IvyDjZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1
YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvYmY2ZDNmOTMtYzBiOS0z
ODNhLWI1MGItOGRmMzNiOGExODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx
NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk
NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz
NDk3ZDRhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzqgJAwQA
z67KMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABlRwNs95FamRijSWgZTF/nO7DCcsU5M+iv0+sUBU8gkFzsb
aWhfBGWX/O/VhGFleee+jJMMA5pbckG5f+OfF3YoshzVNVlcBPeBknhSwIJ+3gIH
RXHEyj7eqf/r4cNDIUUzZIZspelmLTujX2vQqJMwDlt8Lrbp2BJJEVUJuOnDVn8X
Jk79ufm5suaWzyOIHxvrFzrcZVAEb5iDxtXR6YwRcnUJhQ7+wr2k1QeOiYlARI5C
KMoeNJpDZk0up5IDr+DpFgkabRWdGpbNqtkTNNdDvAjsowK9/0aGvVrvL6uAbfVz
Y84oYK0tWOtkFpOlNK9E80MLy/T4jlTiRAKjwUw=
-----END CERTIFICATE-----
Generated at Thu Mar 5 03:37:59 2026 by rpki-client