Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7516c4f5-ff34-3faa-af42-ae4c324aae5a.roa
File:                     7516c4f5-ff34-3faa-af42-ae4c324aae5a.roa (raw, json)
Hash identifier:          PHbEiEGB6mZnD/Vq18tR8aOYraGE612Gq0iFyZdFcFo=
Subject key identifier:   87:F1:C4:1B:FC:73:DB:2E:36:BD:2E:4A:B1:DB:E6:22:90:F8:86:E1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848130D4A079FD6DC6AC4DA0180
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7516c4f5-ff34-3faa-af42-ae4c324aae5a.roa
Signing time:             Mon 02 Dec 2024 15:54:01 +0000
ROA not before:           Mon 02 Dec 2024 15:54:01 +0000
ROA not after:            Sun 02 Mar 2025 15:54:01 +0000
asID:                     11798
IP address blocks:        23.27.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:13:0d:4a:07:9f:d6:dc:6a:c4:da:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec  2 15:54:01 2024 GMT
            Not After : Mar  2 15:54:01 2025 GMT
        Subject: CN=868c1da8-a872-4858-ab52-4f1204f63383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:70:82:88:8a:ec:09:50:8e:32:ed:db:12:ee:
                    05:0e:80:e6:f6:5b:39:64:90:30:24:1e:04:03:55:
                    5d:93:06:04:6f:bd:bc:f6:ed:8b:6f:ac:42:60:cf:
                    83:27:07:bf:c8:70:39:62:b4:7a:02:5a:48:63:56:
                    79:79:ef:cf:6e:31:73:17:98:48:3f:b9:96:e4:1b:
                    27:fe:3d:6d:5a:05:88:db:a3:50:e3:eb:8b:c7:39:
                    37:64:31:6b:8b:b6:70:df:4c:48:64:1d:79:5e:e2:
                    e0:ab:1d:96:37:b9:72:29:58:2a:25:9b:8d:13:ff:
                    83:60:07:a8:ca:b4:b0:8c:77:93:a2:4a:42:06:30:
                    fd:34:ab:10:d6:d4:2e:21:2d:58:7e:d7:01:4c:95:
                    93:6f:14:36:e6:43:d8:55:ec:ba:d7:b7:8b:ab:63:
                    17:16:2f:c5:a7:39:cb:43:e1:b5:a4:45:12:aa:b8:
                    ff:79:ac:b7:76:f4:1c:9e:6d:3a:5e:11:e3:28:c7:
                    ef:07:eb:0c:10:99:92:e1:f7:a3:da:9b:83:0f:60:
                    ba:e2:42:c8:b2:01:cd:74:a5:50:d1:6d:d2:95:a2:
                    b6:61:5a:de:0d:d8:0e:e3:e8:75:4e:b5:a3:4b:a1:
                    a9:b3:3f:61:a1:8c:e4:62:41:c9:21:8a:61:4c:06:
                    5a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F1:C4:1B:FC:73:DB:2E:36:BD:2E:4A:B1:DB:E6:22:90:F8:86:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7516c4f5-ff34-3faa-af42-ae4c324aae5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:7d:f4:c9:96:78:c8:8e:4b:b0:cb:a2:07:5e:a4:01:bb:4f:
         7e:91:69:ac:42:12:b6:2d:07:ed:7a:e7:0a:65:c0:7e:0f:70:
         60:8e:53:27:05:d5:43:5c:fc:1e:c6:87:76:55:94:d8:b4:b6:
         fa:00:cc:43:c9:d0:93:8f:ab:21:89:dc:05:1a:5a:eb:8d:0a:
         b6:f9:95:0c:00:bf:b2:d5:ad:44:29:ff:c2:47:e5:49:52:6c:
         91:03:3b:bc:86:2f:5d:06:1a:13:be:b0:86:71:77:87:91:59:
         3c:5c:fa:c2:52:92:43:1e:a6:ac:6e:cf:93:5d:5b:c4:13:8f:
         3f:7a:bf:cf:da:b6:7a:63:1e:5d:52:90:3b:00:13:33:9a:7b:
         6d:75:fe:88:ac:34:d5:05:b5:24:0b:f8:fb:67:63:9e:4c:a2:
         0f:f0:2c:fd:cf:d6:53:b7:e2:cc:e8:0d:1a:0c:06:7b:03:9c:
         e1:b8:74:45:62:08:06:f8:6c:fe:8d:96:bf:38:98:9b:74:3a:
         d2:fd:d3:f4:e9:31:78:5f:f2:56:e3:15:13:46:fc:dc:e8:da:
         74:ec:eb:41:57:4e:d8:04:0d:8f:4d:03:65:84:cd:b0:80:c6:
         9a:49:97:49:d5:71:79:1d:a9:b4:1b:46:d1:45:f2:7e:c0:ac:
         70:ed:10:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:58 2025 by rpki-client