Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b90a685c-ea63-382f-93bd-4fd08905322d.roa
File:                     b90a685c-ea63-382f-93bd-4fd08905322d.roa (raw, json)
Hash identifier:          b+OqYwy04pClm4QMBe+NTjdzarYC0yZOMSyP+7cxu7o=
Subject key identifier:   D5:42:99:7C:9B:65:34:B5:8C:4B:37:01:7C:CF:52:B0:F4:F7:18:38
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858488E1B11D78701F7EAA0B83BA0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b90a685c-ea63-382f-93bd-4fd08905322d.roa
Signing time:             Wed 15 Jan 2025 17:46:13 +0000
ROA not before:           Wed 15 Jan 2025 17:46:13 +0000
ROA not after:            Tue 15 Apr 2025 16:46:13 +0000
asID:                     214238
IP address blocks:        23.27.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8e:1b:11:d7:87:01:f7:ea:a0:b8:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 15 17:46:13 2025 GMT
            Not After : Apr 15 16:46:13 2025 GMT
        Subject: CN=6746c3c5-2363-4810-acb4-17792610dcc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:4f:b5:af:8a:5b:45:d2:72:50:76:95:8e:
                    a0:9a:ba:f4:77:32:66:f9:bf:93:b6:f6:df:8b:78:
                    cf:fe:69:69:17:d9:7c:d0:51:ed:5f:b6:71:cb:3a:
                    09:ca:14:d1:ef:98:4b:1b:ef:55:23:20:c9:16:3d:
                    f6:de:17:e7:7a:37:d3:ac:8c:37:c3:45:11:69:75:
                    b4:ad:78:9f:40:1f:8e:02:af:f1:5a:2c:be:68:44:
                    47:61:d2:27:8c:d4:ea:c6:69:e3:19:0d:96:df:13:
                    7c:c2:23:55:78:82:7c:83:e9:0a:be:70:36:72:2a:
                    90:bb:d4:63:2b:c1:2f:e0:a3:83:13:46:f5:18:97:
                    3c:ea:1d:d6:d3:c6:c5:a4:32:9f:b8:cb:f6:81:3f:
                    fc:8d:e0:50:fb:57:9e:86:3e:03:6c:3c:69:c8:79:
                    b5:7f:de:43:8c:f4:45:bf:f7:e9:e5:e7:ca:d7:90:
                    b6:17:30:de:74:47:23:70:c1:58:39:68:c3:59:c9:
                    fa:39:a5:3b:59:c5:35:6e:05:99:d8:f3:b6:e6:9d:
                    60:d9:23:03:da:07:53:12:65:06:b0:43:63:7a:6f:
                    56:2d:81:e8:b6:f8:9d:f1:0c:b6:7d:03:c6:58:70:
                    5e:e3:07:5b:bf:f7:7d:9a:d3:f8:ad:0b:b1:56:90:
                    09:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:42:99:7C:9B:65:34:B5:8C:4B:37:01:7C:CF:52:B0:F4:F7:18:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b90a685c-ea63-382f-93bd-4fd08905322d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:a7:24:0c:a2:e7:79:cb:b0:a6:dd:64:c3:37:24:6c:d9:
         a1:50:0e:23:88:00:d1:3c:19:d3:0f:87:27:75:de:a2:7f:52:
         cf:90:c9:14:ed:ef:9f:16:fc:63:a8:0b:ff:7b:66:bf:4d:f3:
         df:9d:41:33:a4:bc:09:90:29:cb:65:f7:9e:14:f5:c9:e4:de:
         f3:66:03:9e:32:44:7e:a5:51:f8:54:26:d2:3c:4a:6b:9c:0f:
         54:34:91:62:51:bd:e3:03:1e:0d:2d:41:52:d1:83:c5:e1:02:
         10:c3:4b:f1:c5:c3:e7:91:99:d9:f0:28:53:81:58:b0:aa:3f:
         29:8e:e3:b8:48:5f:cc:54:2f:41:89:39:b3:da:64:9d:54:bf:
         bf:83:74:2a:49:4c:ab:7e:6b:07:c1:55:81:90:bf:b2:60:bb:
         50:5e:27:4d:15:44:e4:1f:fe:c0:b4:4a:ad:67:cc:bc:67:9f:
         48:62:02:f5:19:40:c3:9c:a7:2e:66:cb:7d:12:8f:59:fb:ed:
         48:3d:d7:a8:6b:38:ee:6c:54:4d:52:f2:1a:d7:75:5b:7b:ef:
         02:5c:31:14:95:73:51:4a:01:a5:c2:9e:b8:f3:06:d7:6f:1b:
         26:86:79:21:dd:bc:1a:3e:42:19:4f:b9:06:6c:19:4d:f4:0c:
         cc:94:4b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:34 2025 by rpki-client