Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9771656-2e9b-3098-92d1-4eedc5def83d.roa
File:                     c9771656-2e9b-3098-92d1-4eedc5def83d.roa (raw, json)
Hash identifier:          lcYjDYa3eeLE3812uXAMg6W8h3LBYkPXaJsKiTPAP7I=
Subject key identifier:   AF:B3:C1:AB:94:AD:BC:58:C8:76:9A:6C:E8:E3:4C:EB:4A:9B:30:2D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858494F93F2AFA6D740D4222AB680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9771656-2e9b-3098-92d1-4eedc5def83d.roa
Signing time:             Wed 26 Mar 2025 01:00:40 +0000
ROA not before:           Wed 26 Mar 2025 01:00:40 +0000
ROA not after:            Tue 24 Jun 2025 01:00:40 +0000
asID:                     8881
IP address blocks:        23.27.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:93:f2:af:a6:d7:40:d4:22:2a:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 26 01:00:40 2025 GMT
            Not After : Jun 24 01:00:40 2025 GMT
        Subject: CN=0d35010e-2326-4a38-aea3-4d1a2df6d335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:6b:04:98:bf:4d:a0:ad:68:a3:cc:24:55:
                    b6:a2:3f:c2:58:e4:70:86:a3:7d:ba:f5:a2:bc:9c:
                    6a:4d:b4:21:b2:35:f5:a9:10:07:8a:5c:1f:31:dd:
                    b3:f6:ec:c6:ec:ea:73:5b:ef:a5:3d:d5:66:82:6c:
                    6c:44:25:78:4c:38:64:82:59:68:9d:4d:07:69:32:
                    6b:ec:fb:03:05:b4:b0:99:9d:84:78:e3:ce:2c:52:
                    7b:e2:fe:c4:6c:26:6c:50:9a:b2:55:24:23:50:3f:
                    e4:b7:16:56:f2:16:2b:ad:6a:a7:06:90:eb:64:c7:
                    bc:b7:85:9d:55:34:44:7f:90:22:a8:92:9d:a4:bb:
                    85:c4:a8:7d:ec:3f:c1:69:a2:d5:a4:82:82:3b:49:
                    02:65:7c:4e:4c:01:a0:f6:85:2f:cc:f3:a8:f0:71:
                    9f:7c:ac:0c:b3:b5:75:9a:d6:ee:d2:bc:54:0a:43:
                    0f:e5:bd:32:88:95:6d:86:5c:c0:c9:f2:bb:91:84:
                    c2:3a:e4:9e:e3:b2:3b:c3:8e:e1:76:01:d4:53:ea:
                    73:8c:dc:ae:43:cb:e6:7f:62:3f:73:ac:ba:61:93:
                    86:5a:51:d7:8c:2e:4c:5c:73:51:8b:c5:29:29:71:
                    7f:7e:47:b1:95:c1:4a:c2:c4:40:9a:e8:ab:11:f1:
                    6c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B3:C1:AB:94:AD:BC:58:C8:76:9A:6C:E8:E3:4C:EB:4A:9B:30:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9771656-2e9b-3098-92d1-4eedc5def83d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:47:8b:51:74:9d:20:04:61:33:86:33:5b:48:8b:ac:52:18:
         58:c5:52:86:a0:2a:2f:54:87:9d:bd:c5:a7:ba:3e:48:79:c5:
         df:c0:25:d3:97:d9:d2:b1:a5:69:1e:9d:ce:3b:6a:de:b4:45:
         ae:e2:23:7e:50:43:cf:36:10:b6:b2:9f:66:d9:0d:f0:4e:14:
         e2:e4:1c:ec:3b:cf:ef:0d:a4:15:49:73:db:96:bd:00:ff:de:
         66:34:05:cd:73:55:7b:d9:6a:d2:1a:4e:e2:6c:4b:c9:91:9b:
         ec:43:a7:b5:79:ba:b2:ab:3c:16:44:fc:d6:2c:1c:0e:bc:f7:
         e8:49:5a:1b:a4:03:e5:00:69:ef:ac:99:aa:79:b8:c6:53:78:
         6a:8d:be:e3:4d:04:e3:2e:ec:09:bf:65:55:54:bf:cd:83:35:
         80:96:65:35:2b:eb:53:b4:e5:4f:fa:5f:96:68:ff:37:bf:32:
         ec:1f:12:25:70:23:ca:91:43:55:c4:ca:b3:5c:95:43:b8:84:
         90:d7:c1:79:9b:d1:6b:4a:73:8d:2a:36:cb:d0:87:82:c0:cd:
         5b:8f:f6:0a:c0:f5:b5:dc:21:66:09:f7:7f:3d:f6:46:6d:d3:
         d3:a7:1e:da:65:b4:48:01:80:37:20:a6:ce:a3:cc:2a:3f:16:
         fc:74:e4:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk/KvptdA1CIqtoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk
MGQzNTAxMGUtMjMyNi00YTM4LWFlYTMtNGQxYTJkZjZkMzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJBrBJi/TaCtaKPMJFW2oj/CWORwhqN9uvWi
vJxqTbQhsjX1qRAHilwfMd2z9uzG7OpzW++lPdVmgmxsRCV4TDhkgllonU0HaTJr
7PsDBbSwmZ2EeOPOLFJ74v7EbCZsUJqyVSQjUD/ktxZW8hYrrWqnBpDrZMe8t4Wd
VTREf5AiqJKdpLuFxKh97D/BaaLVpIKCO0kCZXxOTAGg9oUvzPOo8HGffKwMs7V1
mtbu0rxUCkMP5b0yiJVthlzAyfK7kYTCOuSe47I7w47hdgHUU+pzjNyuQ8vmf2I/
c6y6YZOGWlHXjC5MXHNRi8UpKXF/fkexlcFKwsRAmuirEfFs0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+zwauUrbxYyHaabOjjTOtKmzAtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzk3NzE2NTYtMmU5Yi0z
MDk4LTkyZDEtNGVlZGM1ZGVmODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKJHi1F0nSAEYTOGM1tIi6xSGFjFUoagKi9Uh529xae6Pkh5xd/AJdOX
2dKxpWkenc47at60Ra7iI35QQ882ELayn2bZDfBOFOLkHOw7z+8NpBVJc9uWvQD/
3mY0Bc1zVXvZatIaTuJsS8mRm+xDp7V5urKrPBZE/NYsHA689+hJWhukA+UAae+s
map5uMZTeGqNvuNNBOMu7Am/ZVVUv82DNYCWZTUr61O05U/6X5Zo/ze/MuwfEiVw
I8qRQ1XEyrNclUO4hJDXwXmb0WtKc40qNsvQh4LAzVuP9grA9bXcIWYJ93899kZt
09OnHtpltEgBgDcgps6jzCo/Fvx05Jk=
-----END CERTIFICATE-----