Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/272ba619-4282-3152-ab58-26a12a7300fe.roa
File:                     272ba619-4282-3152-ab58-26a12a7300fe.roa (raw, json)
Hash identifier:          MtDMz56CceFNM9RVyacNvdCPdKTGZ6zj5oMPcDpPPVg=
Subject key identifier:   F2:04:EF:A0:96:22:55:2F:37:BD:8A:23:54:08:7C:E5:FF:C5:DD:67
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AC60DFBEEDF0F4F98ED47440
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/272ba619-4282-3152-ab58-26a12a7300fe.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     149440
IP address blocks:        23.27.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:df:be:ed:f0:f4:f9:8e:d4:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=6e516289-d825-4d73-b606-661ae796500e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:22:11:98:a1:46:fb:91:8c:ef:d8:c2:95:
                    72:d9:8d:01:fe:74:ae:99:cd:60:7f:25:b3:13:5a:
                    16:de:0f:3e:62:af:67:4d:32:86:1c:5e:b5:5e:fd:
                    40:62:9e:ef:0f:ef:b3:37:e8:cc:f4:ad:2a:4e:74:
                    a3:93:71:dc:38:30:1f:24:30:3f:8c:74:4c:2c:86:
                    a3:e7:20:43:75:f6:3a:16:33:b7:c2:31:49:e9:1c:
                    74:32:58:6c:24:8f:19:47:4e:9e:30:a1:f4:04:3a:
                    65:0e:15:00:b1:ea:5c:71:9f:5d:87:79:03:82:d7:
                    5f:75:40:62:03:64:6c:5d:7c:6c:2b:85:0f:80:af:
                    b2:3b:de:bb:0a:85:7e:6a:44:0a:cb:5f:d8:be:22:
                    69:21:7d:d1:0b:27:2c:82:74:90:9e:3f:4a:b7:ab:
                    a0:db:17:d0:50:c3:2f:6a:20:a2:14:ac:55:de:0e:
                    86:4d:b2:e3:a3:dc:52:59:53:db:55:08:0c:09:2c:
                    40:cf:d9:b8:3d:d3:26:f9:c2:66:0f:a5:be:d3:5e:
                    86:72:28:6c:75:fe:e1:8f:64:9c:01:3d:0b:c3:ea:
                    8e:f4:83:4e:77:c9:ff:2f:9a:f3:ad:49:7a:76:0e:
                    06:9d:4c:8c:27:3b:71:58:7a:a8:a5:64:4a:0b:c8:
                    0f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:04:EF:A0:96:22:55:2F:37:BD:8A:23:54:08:7C:E5:FF:C5:DD:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/272ba619-4282-3152-ab58-26a12a7300fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:49:9e:3b:94:c1:49:a8:54:44:7f:62:33:23:e1:e6:10:dd:
         d0:03:6e:84:e4:0f:2f:92:c8:3f:8b:10:41:87:7e:0d:42:23:
         42:a4:db:d7:bb:5b:8e:24:60:3c:00:e4:3f:3e:e9:94:df:2a:
         25:e1:35:07:55:c6:d7:f1:c3:6f:2a:8a:45:0b:0e:97:c2:18:
         99:91:47:09:62:d7:c9:28:bf:b3:03:a6:4a:60:55:f0:5d:79:
         34:26:cd:31:95:31:9d:5e:7a:ba:94:2d:fd:c7:a3:f0:b0:e6:
         17:9b:d5:aa:a5:70:a8:b4:47:77:cd:7e:73:a3:a1:31:b4:b7:
         6c:01:eb:e5:a4:9f:38:d3:89:ad:11:a3:43:70:64:35:ef:2e:
         b7:2d:97:09:cb:94:e1:34:8a:72:0c:78:f1:b6:97:67:41:3b:
         cc:55:7b:2b:fb:d5:1c:54:a6:f6:90:0e:11:bb:9c:b9:30:4a:
         8b:4c:cb:aa:09:01:fb:38:83:3e:4a:2e:ab:98:b0:ad:19:da:
         9d:c7:82:07:92:cf:c3:59:a4:67:ec:53:61:bb:41:85:ed:6b:
         b8:f6:b0:ef:81:1e:ee:25:68:0a:33:56:66:b8:1f:09:99:37:
         2d:4b:3a:b3:a6:56:91:0a:51:ac:c7:6c:6d:37:9e:d4:38:0e:
         b8:ff:e5:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYN++7fD0+Y7UdEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk
NmU1MTYyODktZDgyNS00ZDczLWI2MDYtNjYxYWU3OTY1MDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK4iEZihRvuRjO/YwpVy2Y0B/nSumc1gfyWz
E1oW3g8+Yq9nTTKGHF61Xv1AYp7vD++zN+jM9K0qTnSjk3HcODAfJDA/jHRMLIaj
5yBDdfY6FjO3wjFJ6Rx0MlhsJI8ZR06eMKH0BDplDhUAsepccZ9dh3kDgtdfdUBi
A2RsXXxsK4UPgK+yO967CoV+akQKy1/YviJpIX3RCycsgnSQnj9Kt6ug2xfQUMMv
aiCiFKxV3g6GTbLjo9xSWVPbVQgMCSxAz9m4PdMm+cJmD6W+016Gcihsdf7hj2Sc
AT0Lw+qO9INOd8n/L5rzrUl6dg4GnUyMJztxWHqopWRKC8gPDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPIE76CWIlUvN72KI1QIfOX/xd1nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjcyYmE2MTktNDI4Mi0z
MTUyLWFiNTgtMjZhMTJhNzMwMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtJnjuUwUmoVER/YjMj4eYQ3dADboTkDy+SyD+LEEGHfg1CI0Kk29e7
W44kYDwA5D8+6ZTfKiXhNQdVxtfxw28qikULDpfCGJmRRwli18kov7MDpkpgVfBd
eTQmzTGVMZ1eerqULf3Ho/Cw5heb1aqlcKi0R3fNfnOjoTG0t2wB6+WknzjTia0R
o0NwZDXvLrctlwnLlOE0inIMePG2l2dBO8xVeyv71RxUpvaQDhG7nLkwSotMy6oJ
Afs4gz5KLquYsK0Z2p3HggeSz8NZpGfsU2G7QYXta7j2sO+BHu4laAozVma4HwmZ
Ny1LOrOmVpEKUazHbG03ntQ4Drj/5RE=
-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:22 2025 by rpki-client