Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/4892a1e2-9695-369f-ab71-7848f2816415.roa
File: 4892a1e2-9695-369f-ab71-7848f2816415.roa (raw, json)
Hash identifier: BlVT55/2Nabfx3sFHluynrQVYAS+EcGRifGjx/BCZyk=
Subject key identifier: D3:8C:8C:31:F8:47:F7:D5:81:AA:A5:E9:7B:73:37:E3:7D:82:77:BA
Certificate issuer: /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial: 010D0C9F4328584C50D12D9A128EDE9C5A118C90
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/4892a1e2-9695-369f-ab71-7848f2816415.roa
Signing time: Fri 26 Dec 2025 14:00:39 +0000
ROA not before: Fri 26 Dec 2025 14:00:39 +0000
ROA not after: Thu 26 Mar 2026 13:00:39 +0000
asID: 399820
IP address blocks: 2602:fc2f:f00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:50:d1:2d:9a:12:8e:de:9c:5a:11:8c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
Validity
Not Before: Dec 26 14:00:39 2025 GMT
Not After : Mar 26 13:00:39 2026 GMT
Subject: CN=44ca0227-f4e7-48ec-a7f8-c357b38c2881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:97:fc:4f:26:39:47:50:29:cf:b6:79:5f:
51:b0:ea:a9:01:01:9d:4d:b6:cd:45:20:2a:dc:11:
0f:78:95:75:81:29:e5:ff:e7:a5:eb:67:c4:52:e7:
31:a4:76:3a:3d:d1:a5:45:b3:c0:16:00:3c:50:f3:
bd:94:07:a6:38:3d:e4:df:3f:c5:15:48:26:42:75:
b1:a2:22:53:2b:0f:c3:86:ab:15:d5:41:f8:d7:11:
54:04:4c:6f:24:77:cb:cc:8d:d3:9f:e9:5a:99:d9:
74:63:ce:e7:52:ed:30:e1:7f:7e:63:0f:ae:37:1c:
2a:97:16:e6:73:3d:68:bb:4f:28:53:1a:78:3f:64:
28:15:41:c1:19:de:e4:5b:c6:72:b1:9c:11:cb:39:
7a:08:88:bb:c6:58:39:35:cc:87:d4:f2:b0:be:b0:
2e:c9:94:6e:c5:77:d7:c6:c9:b6:bc:c9:ad:8e:52:
ff:b0:a7:9c:ea:ab:73:2c:57:fa:f9:8a:44:e3:75:
28:71:f4:44:2e:7a:97:ec:9e:80:1a:fb:db:5e:c4:
55:52:89:24:bc:a8:dd:ee:5c:71:54:33:bc:e2:38:
04:ae:81:fa:da:0a:da:89:e8:ad:94:e4:8f:d3:fb:
ec:70:21:94:54:f8:49:7e:1a:9b:4b:48:7d:2d:ea:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8C:8C:31:F8:47:F7:D5:81:AA:A5:E9:7B:73:37:E3:7D:82:77:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/4892a1e2-9695-369f-ab71-7848f2816415.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl
X509v3 Authority Key Identifier:
keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc2f:f00::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:f2:18:d0:f3:cd:d3:0a:aa:68:62:7e:a1:ea:89:c0:91:01:
9c:a2:50:1f:97:12:a1:ec:e7:28:e9:f7:67:9b:17:2e:25:2b:
61:e4:d9:f4:f1:a1:39:1a:d7:e5:47:99:6e:d2:03:86:61:f9:
0a:ba:58:d5:00:02:34:1a:ad:31:b4:82:0c:9d:8b:ab:2d:58:
46:2c:0b:87:c6:03:97:9c:1d:53:32:3d:60:18:79:c4:85:28:
fd:18:4d:cb:9a:63:40:3e:ab:e1:3d:76:58:f6:a1:58:7d:6f:
b3:d2:a2:42:2e:24:39:b4:4d:ca:77:94:a9:a9:e0:5a:dd:1c:
9c:ac:33:ad:8d:85:b5:f0:4f:e3:15:25:77:c8:de:e1:ac:34:
75:b3:12:c6:90:5c:10:dc:6b:46:7c:67:2a:95:9c:a7:ab:e3:
be:9a:7d:15:a8:df:e5:f5:52:9a:8c:c9:f1:7c:4e:12:69:46:
d1:5e:8f:68:a4:8c:8c:df:5e:64:61:dd:c1:37:1d:57:b8:30:
ec:11:64:8d:c2:bf:8d:0a:58:1a:c9:5d:c8:a8:63:e5:b8:ad:
0e:8f:32:35:37:f2:c6:5b:07:fd:1d:ce:48:77:78:de:dc:aa:
e2:5b:f1:dd:cf:fb:b2:a8:7c:9c:6a:19:28:e3:d5:d7:74:c1:
1b:a2:9d:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExQ0S2aEo7enFoRjJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU4NDhlMTYtYjQyOS00NTA1LTkyMzQtZjZkODg5ZmQx
NDM4MB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk
NDRjYTAyMjctZjRlNy00OGVjLWE3ZjgtYzM1N2IzOGMyODgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ESX/E8mOUdQKc+2eV9RsOqpAQGdTbbNRSAq
3BEPeJV1gSnl/+el62fEUucxpHY6PdGlRbPAFgA8UPO9lAemOD3k3z/FFUgmQnWx
oiJTKw/DhqsV1UH41xFUBExvJHfLzI3Tn+lamdl0Y87nUu0w4X9+Yw+uNxwqlxbm
cz1ou08oUxp4P2QoFUHBGd7kW8ZysZwRyzl6CIi7xlg5NcyH1PKwvrAuyZRuxXfX
xsm2vMmtjlL/sKec6qtzLFf6+YpE43UocfRELnqX7J6AGvvbXsRVUokkvKjd7lxx
VDO84jgEroH62graieitlOSP0/vscCGUVPhJfhqbS0h9LeqjyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNOMjDH4R/fVgaql6XtzN+N9gne6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0
OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4ODlmZDE0MzgvNDg5MmExZTItOTY5NS0z
NjlmLWFiNzEtNzg0OGYyODE2NDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4NDhlMTYtYjQyOS00NTA1LTky
MzQtZjZkODg5ZmQxNDM4L2RlODQ4ZTE2LWI0MjktNDUwNS05MjM0LWY2ZDg4OWZk
MTQzOC5jcmwwHwYDVR0jBBgwFoAUHsnQl1NrlIorg8DaKChlnetiZ+QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg0OGUxNi1iNDI5LTQ1MDUtOTIzNC1mNmQ4
ODlmZDE0MzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8Lw8A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAvyGNDzzdMKqmhifqHqicCRAZyiUB+XEqHs5yjp92ebFy4lK2Hk
2fTxoTka1+VHmW7SA4Zh+Qq6WNUAAjQarTG0ggydi6stWEYsC4fGA5ecHVMyPWAY
ecSFKP0YTcuaY0A+q+E9dlj2oVh9b7PSokIuJDm0Tcp3lKmp4FrdHJysM62NhbXw
T+MVJXfI3uGsNHWzEsaQXBDca0Z8ZyqVnKer476afRWo3+X1UpqMyfF8ThJpRtFe
j2ikjIzfXmRh3cE3HVe4MOwRZI3Cv40KWBrJXcioY+W4rQ6PMjU38sZbB/0dzkh3
eN7cquJb8d3P+7KofJxqGSjj1dd0wRuinWA=
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:34 2026 by rpki-client