Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9ecd322f-a6fb-336c-a3ab-6d36c3b2d88c.roa
File:                     9ecd322f-a6fb-336c-a3ab-6d36c3b2d88c.roa (raw, json)
Hash identifier:          S7D66hWbrJxu9n6mumaosBnFgH99q3Whsz9+Jy4915A=
Subject key identifier:   24:89:B7:1F:2B:1F:AD:11:5F:B7:D8:1F:A5:CC:59:A8:CD:F4:18:61
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848DEA127AF0149B6B0F1A23840
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9ecd322f-a6fb-336c-a3ab-6d36c3b2d88c.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     400899
IP address blocks:        23.27.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:27:af:01:49:b6:b0:f1:a2:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=7859fb40-ffcc-4591-902f-07823cc13d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:70:e8:ca:09:f0:e9:83:4a:7d:c9:26:d4:21:
                    7a:31:53:a7:f4:3a:a7:ca:8c:8d:81:1f:a0:57:06:
                    5d:f9:01:e5:b8:64:b4:3d:ac:82:f2:b9:bf:a1:39:
                    db:c9:68:7d:d7:c7:d3:21:99:9a:59:10:05:ac:1e:
                    0f:46:f0:00:30:ef:81:4b:df:a3:de:15:8d:7d:6f:
                    02:2e:45:37:23:a4:0e:23:9e:35:71:43:99:fc:bf:
                    1f:7c:56:05:0d:19:22:3e:df:dc:0c:a8:fa:e1:96:
                    fd:05:46:21:c4:96:6e:c3:18:d8:1b:92:c2:46:eb:
                    e5:90:34:2b:e8:0c:b4:db:8f:0f:00:89:15:7f:3c:
                    fa:cd:b7:31:de:09:a5:b2:bb:87:2b:75:fe:5e:d8:
                    ca:d5:29:87:0d:2a:fb:94:f0:ef:9f:3b:a4:db:f2:
                    f9:32:35:55:06:22:87:77:5e:0a:15:9f:0d:c5:37:
                    c4:8f:ba:5b:a9:f7:a8:4a:46:3f:5a:cf:54:3d:df:
                    95:00:59:38:76:91:5d:c9:83:85:00:0a:45:fc:22:
                    c1:fe:b4:b7:69:8d:c8:81:15:81:7a:70:5a:5a:47:
                    54:96:65:f4:09:ba:8a:14:f0:55:a3:8a:3d:f7:bc:
                    6e:dc:90:55:d7:ec:81:8f:dc:2f:77:01:bb:11:0d:
                    51:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:89:B7:1F:2B:1F:AD:11:5F:B7:D8:1F:A5:CC:59:A8:CD:F4:18:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9ecd322f-a6fb-336c-a3ab-6d36c3b2d88c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3e:43:1d:9d:51:c9:99:16:88:08:1c:4a:a5:80:5f:a0:32:
         3a:df:fd:ec:c8:9d:63:49:82:b8:7d:b0:1f:bf:6f:59:cf:d8:
         b7:1c:ba:63:d2:58:cf:d1:ca:9a:52:af:70:2e:31:3c:2e:00:
         12:fa:50:b5:e6:df:cc:d0:6d:0c:29:68:e0:6a:b7:dd:58:f2:
         4c:64:17:49:11:d2:45:32:1c:12:a8:d8:a0:53:08:80:ce:5a:
         d0:f5:2c:62:db:0d:6a:35:45:5d:ac:ed:ae:6f:77:16:74:c8:
         be:87:74:4e:09:b3:d6:a7:d0:29:17:fb:d7:c6:47:ae:29:80:
         86:43:c9:d3:4a:5f:e0:5e:2f:dd:bc:55:2a:e8:4b:d6:36:ca:
         86:c0:f7:57:01:3b:ab:ed:c8:a6:56:4f:bb:25:fe:6e:59:ca:
         b9:e3:50:f0:bc:a7:3b:e9:73:fe:86:b8:16:4b:36:76:1f:ef:
         58:a5:7a:e0:93:77:41:ad:87:53:f4:95:84:69:dc:20:5e:b7:
         ce:2b:2c:da:33:d0:69:3e:ae:65:2e:07:3f:c4:fe:a6:a7:56:
         b8:49:bc:f3:8c:66:b1:a8:21:1e:f6:93:8c:ed:b2:9f:4a:39:
         7e:a8:4d:42:4c:b2:a9:9f:ea:68:92:8d:2d:b3:f4:a3:f3:91:
         12:11:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:12 2025 by rpki-client