Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ddae4220-ff86-3265-b4ee-0e6bfe06369f.roa
File: ddae4220-ff86-3265-b4ee-0e6bfe06369f.roa (raw, json)
Hash identifier: uQ0hNrCYWZ+czeKqXDf9CmSgwWUwOZrcv7INgIjTBTo=
Subject key identifier: B4:68:3E:48:24:99:31:C9:A9:15:48:CB:E0:B8:8C:70:23:37:65:83
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F4328584C470BB7AD47B278809CCEEF80
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ddae4220-ff86-3265-b4ee-0e6bfe06369f.roa
Signing time: Tue 23 Dec 2025 02:00:31 +0000
ROA not before: Tue 23 Dec 2025 02:00:31 +0000
ROA not after: Mon 23 Mar 2026 01:00:31 +0000
asID: 3356
IP address blocks: 199.0.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:47:0b:b7:ad:47:b2:78:80:9c:ce:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Dec 23 02:00:31 2025 GMT
Not After : Mar 23 01:00:31 2026 GMT
Subject: CN=bdf0e87c-f4cb-44b7-bf08-756341b134fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:a7:c3:17:7c:28:d7:f1:36:e2:fd:3e:5a:
cf:54:04:9c:0a:0c:c8:79:58:8e:86:ee:ef:75:bf:
34:86:d6:8e:5e:3c:46:53:b9:df:45:38:fa:14:e8:
db:5f:0b:9c:e7:df:db:1e:fc:e1:77:71:20:40:4a:
1b:0f:de:a3:19:27:82:aa:4a:c3:74:53:d0:c1:5f:
a0:b6:e1:cb:94:ab:18:b7:09:18:cb:bc:9e:62:00:
3e:54:af:a9:77:24:c2:29:83:50:71:9a:2e:61:66:
b6:23:7d:54:5a:fb:e7:47:25:15:64:99:da:e6:e2:
16:46:0f:a0:c7:7f:80:be:eb:17:48:d5:9f:3c:06:
26:85:76:54:06:f6:0f:24:d3:1e:d0:14:36:1a:1d:
3f:78:b7:98:58:f3:5c:8d:f9:da:52:74:70:86:a4:
83:99:7f:5f:fa:82:19:f8:36:ef:bf:c9:a6:1b:d8:
f0:01:43:3f:52:95:f2:01:99:91:01:f8:29:8e:61:
46:84:b6:5c:ab:ba:d2:b4:4e:f8:52:4b:f0:35:d8:
56:9e:83:3f:13:76:75:60:aa:2e:38:7c:4d:b7:d9:
b1:9e:09:34:80:6c:c2:68:24:61:be:ff:df:2e:79:
cb:25:a1:64:28:41:ce:de:66:d6:c8:dc:c3:37:94:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:68:3E:48:24:99:31:C9:A9:15:48:CB:E0:B8:8C:70:23:37:65:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ddae4220-ff86-3265-b4ee-0e6bfe06369f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.0.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:50:71:74:11:29:b8:fa:c6:dd:ea:55:06:ba:79:a8:f5:02:
5d:b2:c7:e3:0b:6c:d1:9f:a2:92:dd:e1:a6:4e:5e:4f:e7:53:
23:94:3b:ed:40:8f:10:f0:48:fb:71:e2:40:f7:36:14:8c:21:
f9:f7:2d:af:52:50:3f:28:ac:47:b4:d1:b4:b8:19:1b:b2:b0:
2c:f2:47:e1:ee:52:18:4d:b8:cd:75:df:6d:33:88:de:6d:0e:
d6:2a:4b:3c:c3:ff:98:d0:3e:9b:d9:78:18:d9:7a:3e:4d:da:
9d:8a:d7:4d:2a:f9:2a:ec:dc:34:01:c2:e5:2e:81:0b:b0:69:
b3:2f:25:4d:2c:0a:f2:ef:11:ea:88:12:49:37:73:7a:6f:5d:
f5:10:40:c6:c9:c1:d5:60:b1:1c:f8:d5:bc:5f:da:53:4f:57:
db:eb:74:e8:1e:6f:f1:ee:f8:04:2a:d1:cc:8c:86:d6:6b:ae:
f2:c9:2c:07:19:af:36:5a:e9:3a:47:43:21:2b:da:95:13:68:
7a:f9:64:9b:71:81:34:5e:de:33:91:3f:b6:4a:3e:a5:de:3e:
b4:02:93:19:ce:88:25:24:30:49:61:17:69:9f:8c:09:57:0f:
94:44:95:a1:92:0e:01:00:7d:ec:cd:75:09:4c:a1:ca:e2:74:
a2:d6:bf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:34:29 2026 by rpki-client