Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa
File: aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa (raw, json)
Hash identifier: Bxm/oEH2SFbzxajhdnVWBMZd83LUdzX30TgeYwUZVCg=
Subject key identifier: 21:02:87:80:AD:FA:7D:9A:45:F6:5C:BA:EB:71:FB:79:98:52:49:10
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F4328584C470BB76DD8B4C45A28441A00
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa
Signing time: Tue 23 Dec 2025 02:00:31 +0000
ROA not before: Tue 23 Dec 2025 02:00:31 +0000
ROA not after: Mon 23 Mar 2026 01:00:31 +0000
asID: 8075
IP address blocks: 199.0.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:47:0b:b7:6d:d8:b4:c4:5a:28:44:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Dec 23 02:00:31 2025 GMT
Not After : Mar 23 01:00:31 2026 GMT
Subject: CN=4ba76bf4-628b-485d-b220-1b106b8b768f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:b6:e0:90:c6:b4:a6:8d:f3:93:e1:4e:d5:
2b:5c:66:1e:b5:46:33:1c:30:f3:3d:10:36:ce:f3:
59:51:d2:d4:4c:29:46:34:26:f9:70:dc:c0:20:7f:
30:9c:97:53:12:28:66:cb:be:47:7f:35:89:dd:ee:
5f:55:d0:f1:f8:8f:13:69:38:d6:a5:d6:b7:fa:b1:
1c:d3:27:78:f8:2c:e8:20:10:f1:08:fb:24:e5:ed:
34:e5:f0:39:d0:df:ab:42:c3:b2:07:bc:40:3f:da:
13:ec:19:54:91:54:05:b5:c5:13:87:35:83:96:1d:
09:dc:2d:36:35:8b:7b:84:de:66:d0:85:7f:44:fc:
6c:3e:3d:ad:6b:1a:2f:0b:92:10:a6:bf:b2:ab:99:
50:57:66:79:7b:c4:d6:4e:b4:88:a3:87:30:50:1b:
47:63:45:fe:48:87:9f:92:10:8f:6b:42:cd:5c:3b:
2a:41:25:e6:76:cd:c5:28:48:b1:51:f2:60:21:26:
c0:5d:ff:ff:79:61:e7:92:b0:53:cd:5d:91:f1:ec:
2b:12:20:94:09:51:aa:bf:74:9e:a6:e7:03:9e:09:
33:13:7e:35:40:e8:0d:1f:56:ae:74:8d:1f:f3:0b:
96:9f:0d:b9:6f:9b:ae:c2:21:83:44:60:15:a0:44:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:02:87:80:AD:FA:7D:9A:45:F6:5C:BA:EB:71:FB:79:98:52:49:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/aa7c90ef-b8dc-3c09-89bd-512bb5989eb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.0.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:1a:af:08:90:c5:3c:6d:1a:a5:61:3c:de:88:13:46:cf:23:
97:d8:1f:57:20:3b:8f:8e:9d:8d:2b:77:3a:f5:e9:b3:7d:a5:
3a:be:66:88:0a:80:23:69:6e:8c:53:e4:cd:b2:fb:69:f9:76:
9c:53:4d:6c:8b:3f:bd:7c:96:52:ad:82:9b:61:fe:90:d7:bc:
c8:52:a2:2a:bd:7c:c6:61:e1:4b:21:01:5b:79:4d:de:c9:55:
0b:e0:af:93:b0:32:66:ce:81:75:db:99:11:e7:7e:c4:d9:5d:
13:9a:cc:a4:30:59:37:e3:a2:4b:94:92:43:70:87:21:4b:3b:
d4:02:38:d8:da:bc:d6:3a:93:9c:7d:11:52:d6:23:c5:5f:95:
ed:fd:17:2a:dc:ac:0b:70:3f:21:1c:f9:ce:f7:22:e2:b6:73:
bc:dc:b7:e6:12:2d:0b:3f:a6:c7:26:80:4d:66:0d:2c:48:51:
ed:42:52:33:94:74:ed:83:fc:06:65:5e:c0:43:47:bc:30:d8:
d1:ce:5e:18:60:33:6c:c9:13:e1:29:f6:ef:00:80:07:10:4d:
c7:a4:57:22:90:b4:fb:67:a1:18:b2:12:9e:f9:ee:83:b2:1e:
bb:66:dd:7d:bb:c3:f9:eb:eb:41:dd:98:f0:e5:42:5c:1f:0d:
d3:ab:27:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:34:15 2026 by rpki-client