Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23776107-e0dc-352c-9494-537e654c71e4.roa
File:                     23776107-e0dc-352c-9494-537e654c71e4.roa (raw, json)
Hash identifier:          1GZxCo70e6G4ZCK8SBoQMF2DZ+8Q1CKwGK/HO8FXwWM=
Subject key identifier:   2D:63:42:7C:21:01:D7:AC:CC:EE:20:2B:28:74:EA:4D:CB:01:34:3C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858491AA6D402BDAF2C5B4638F6C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23776107-e0dc-352c-9494-537e654c71e4.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     40676
IP address blocks:        23.27.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:d4:02:bd:af:2c:5b:46:38:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=4db8d938-81a2-41d4-a7b1-577112772c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:38:72:4c:c0:5b:f9:e4:7a:13:62:1e:89:
                    67:44:4d:c6:73:4c:57:44:0d:96:ea:b5:2d:79:18:
                    e1:6e:26:01:40:75:a6:a6:4b:19:b1:54:e7:c8:3d:
                    b2:ce:2b:64:d8:ab:bc:7b:12:61:42:13:1e:2f:d9:
                    6c:24:a2:5b:96:2c:cd:35:98:a6:12:ec:bc:df:40:
                    94:71:1e:b6:fb:4d:3b:0f:31:35:50:cc:b1:4e:e4:
                    62:f9:b9:bb:e7:f9:74:21:85:14:91:67:71:6d:90:
                    ce:15:92:a1:29:fc:19:33:09:08:d2:e6:a8:67:15:
                    8d:70:8b:43:cf:1b:53:97:4c:bd:b2:c3:2d:60:6a:
                    ef:e0:36:5e:aa:5e:51:76:d5:7b:f1:18:37:25:7e:
                    54:db:9a:04:5d:eb:7a:40:0b:65:63:39:44:38:9e:
                    4b:59:88:59:37:80:f7:9c:27:62:f5:3e:f1:53:19:
                    82:f6:81:6c:74:f6:d5:64:82:a6:c1:3c:e3:f6:c5:
                    e7:a8:fd:47:64:e6:a7:88:53:94:32:14:d2:53:56:
                    1c:b0:dc:91:f3:1b:dd:44:4b:e1:b3:03:33:5d:bb:
                    c8:2c:1b:fb:38:43:a2:f9:ca:fb:73:e4:6d:ee:37:
                    68:6c:4e:c8:df:2b:b8:b3:66:d6:e1:12:8c:3c:c9:
                    fc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:63:42:7C:21:01:D7:AC:CC:EE:20:2B:28:74:EA:4D:CB:01:34:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23776107-e0dc-352c-9494-537e654c71e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7a:b9:90:ac:1d:7c:34:36:d4:64:db:b2:52:c3:25:a2:61:
         5f:f7:4d:70:f6:6c:1a:b5:6a:dc:24:20:e2:3f:ac:e6:e1:34:
         62:7a:0b:97:06:c8:4d:7d:9a:b6:0f:7f:1b:c7:1b:b5:06:6b:
         9b:9f:02:2a:12:40:c2:b2:dc:3f:51:df:8a:37:47:27:67:ac:
         06:c2:7f:fd:55:62:e4:93:0e:2b:c2:2a:5f:11:51:bd:49:68:
         2e:09:19:e6:66:f9:42:da:a4:0c:88:59:19:1c:12:56:6b:cc:
         e4:36:fd:ca:fc:65:9a:18:e8:26:ba:f4:97:e9:d8:f5:38:7b:
         eb:8c:75:90:58:fd:07:20:b8:17:32:1a:6a:60:d0:50:2b:46:
         a4:75:1b:8c:64:0a:6b:55:52:30:27:65:b9:1e:e4:c6:7b:4e:
         22:47:84:ed:60:a6:63:0b:26:44:ee:45:c9:c1:c8:32:f6:24:
         60:85:15:ac:f7:44:dc:77:fa:ec:b6:78:7d:71:d3:52:c7:49:
         b3:b5:9a:be:57:6e:a9:a1:db:dc:95:3d:38:cb:49:66:31:48:
         92:ec:b1:f9:40:dc:58:b0:5d:c3:32:c1:35:3e:16:17:a6:a6:
         72:4d:32:0b:82:57:b3:b6:8a:3a:98:4c:e2:73:12:e7:31:02:
         1f:6b:64:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:41 2025 by rpki-client