Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/bbaee1cd-4189-354a-b341-d97d1fec6371.roa
File: bbaee1cd-4189-354a-b341-d97d1fec6371.roa (raw, json)
Hash identifier: 0joT77NWs+wqc8VVwMj1ps/32Q8i6Gae7LbrO44rRnI=
Subject key identifier: 5B:9D:94:81:AA:D1:4F:16:73:E7:CF:2D:A0:C1:A6:86:98:79:AC:55
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F4328584D948AAA2293579C5FA90D1E80
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/bbaee1cd-4189-354a-b341-d97d1fec6371.roa
Signing time: Tue 21 Apr 2026 13:00:31 +0000
ROA not before: Tue 21 Apr 2026 13:00:31 +0000
ROA not after: Mon 20 Jul 2026 13:00:31 +0000
asID: 398465
IP address blocks: 65.87.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:94:8a:aa:22:93:57:9c:5f:a9:0d:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Apr 21 13:00:31 2026 GMT
Not After : Jul 20 13:00:31 2026 GMT
Subject: CN=ce561d72-f6cb-479f-93a8-6340bd81cf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:11:c2:aa:c0:17:7c:0a:35:76:7a:da:9e:
33:65:04:00:76:46:8c:01:f4:d6:34:62:b6:4f:0a:
48:16:7c:6b:7c:ba:a1:bd:2c:e7:65:93:45:9f:6c:
9d:22:7a:bc:f6:a1:8a:6d:42:7d:d9:47:fe:49:bb:
cb:de:5c:bc:61:6d:53:f5:c6:d7:5a:af:96:11:c7:
72:02:be:18:37:44:60:f1:23:c7:3b:a6:8b:8f:db:
99:3d:52:36:05:2f:a7:66:cf:37:b6:90:26:3c:4b:
31:e8:da:18:ed:64:e2:18:da:35:1d:25:42:65:eb:
1b:65:50:27:55:41:63:47:cc:a6:3b:26:06:14:fa:
13:93:f3:3c:54:21:6d:b0:3d:38:a5:1e:a2:9f:1a:
6c:fb:d7:95:b4:42:fb:22:cb:b3:cb:45:fb:54:0c:
07:b6:6d:97:c4:22:ed:00:b6:c6:22:0b:4d:60:39:
95:50:cb:06:89:8c:34:49:6e:62:97:46:9e:aa:7c:
e0:e3:02:d2:2d:f1:72:52:2e:53:2a:e7:48:19:92:
93:30:49:3a:71:7d:16:77:a4:34:bb:87:7e:e2:8e:
73:9b:ad:43:81:15:9e:cd:e3:da:5a:bd:cc:00:d6:
cf:48:c1:04:e0:1b:51:60:f3:71:78:71:0e:fa:7f:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9D:94:81:AA:D1:4F:16:73:E7:CF:2D:A0:C1:A6:86:98:79:AC:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/bbaee1cd-4189-354a-b341-d97d1fec6371.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:e4:73:52:34:0f:28:9b:5f:c1:d0:08:58:2d:b3:7a:62:06:
af:a6:40:1d:56:d0:70:ab:28:bb:62:b2:d4:b2:13:77:fe:e4:
4d:98:ad:d1:a9:82:10:a3:5c:cc:01:b3:f9:2b:89:d2:e6:fc:
67:5f:cf:71:e4:04:10:7d:b4:c7:d1:d6:8c:88:3d:a6:70:bf:
c1:e1:34:7f:1e:6e:db:3e:06:23:f3:21:a5:38:26:a7:5f:1e:
8a:75:67:c5:58:4a:30:3b:40:f5:cc:72:b2:f7:25:c4:40:0d:
5b:42:f8:20:bf:d8:18:fd:e3:88:c8:17:32:10:73:59:04:a2:
2e:dd:d8:5b:90:ff:ba:e3:4e:85:b8:89:fd:e2:f2:53:ab:b2:
b2:4f:e5:e6:bc:82:04:76:3e:1f:1e:46:a6:22:32:ae:f6:0a:
6c:93:c9:da:b4:82:0d:c2:ef:2d:13:49:86:e0:c6:19:a2:0b:
a4:90:56:97:81:3f:be:01:6f:a1:55:22:58:39:f1:17:5a:05:
4d:f9:c3:68:d2:a5:bb:b3:7d:d1:c2:8d:dd:bc:db:f7:7d:2e:
7d:78:31:28:2b:c2:bb:5a:cb:62:0e:21:f0:9d:93:c7:2a:a2:
b1:82:9f:c3:1b:7d:c2:06:f9:ab:5a:ca:ad:4f:9f:86:b2:a1:
0e:b4:2a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:55 2026 by rpki-client