Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cc53724a-5db4-312c-835f-f35a86cc1280.roa
File:                     cc53724a-5db4-312c-835f-f35a86cc1280.roa (raw, json)
Hash identifier:          +PA8fn5PEFZiFohFimS/CxuIzq4WDPMZkzoxSeX419k=
Subject key identifier:   C3:90:8C:4B:FD:A2:88:80:58:29:F1:09:DA:2B:04:63:F0:82:08:D6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848B78B8BE7A719006556657900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cc53724a-5db4-312c-835f-f35a86cc1280.roa
Signing time:             Thu 30 Jan 2025 14:00:51 +0000
ROA not before:           Thu 30 Jan 2025 14:00:51 +0000
ROA not after:            Wed 30 Apr 2025 13:00:51 +0000
asID:                     11404
IP address blocks:        23.27.118.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:8b:8b:e7:a7:19:00:65:56:65:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 30 14:00:51 2025 GMT
            Not After : Apr 30 13:00:51 2025 GMT
        Subject: CN=a41ac15f-2acd-47b7-8be6-b0bd0fd04da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:96:17:9d:09:0c:b5:f4:0f:6d:de:98:f7:a4:
                    f8:7b:67:b1:15:d2:3c:ef:6a:60:51:2f:04:5f:10:
                    4f:27:88:6f:89:e0:31:3a:5e:28:76:3a:a7:f5:32:
                    ab:34:1a:8b:3f:0f:d3:94:42:5e:be:cf:a3:b0:d8:
                    6c:d0:44:32:5c:af:a9:64:75:61:b5:01:34:5f:7d:
                    4d:88:7b:b6:a3:2b:62:b0:7b:67:60:ee:05:ac:32:
                    a2:58:f7:82:4c:7c:9d:28:7b:60:05:de:5b:ce:8f:
                    de:a9:4f:14:89:09:0f:de:73:c3:99:1e:74:15:37:
                    e0:ab:7d:0a:48:73:7c:84:1d:57:88:15:86:6a:d8:
                    08:f7:11:f7:94:62:d1:97:19:7c:fc:b8:f8:16:44:
                    69:f6:16:eb:84:c9:2a:c4:10:2f:58:e1:9a:54:74:
                    d6:87:e8:c5:63:05:09:1c:9b:f3:f3:da:69:f2:09:
                    ed:9c:36:e7:88:a6:43:7d:ef:83:dd:b2:38:0d:b7:
                    bc:e0:34:3a:6d:dc:6d:4b:f3:76:c0:7b:79:60:c8:
                    33:72:b7:8f:2b:d0:fa:f9:ef:bb:9f:35:d3:93:5c:
                    cb:1e:d2:6b:3a:41:5c:20:5f:39:f7:84:fa:42:07:
                    53:be:4c:32:4a:de:a7:28:37:fa:7d:ae:28:b0:5c:
                    49:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:90:8C:4B:FD:A2:88:80:58:29:F1:09:DA:2B:04:63:F0:82:08:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cc53724a-5db4-312c-835f-f35a86cc1280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:bf:76:15:08:e7:86:7f:43:8f:c0:41:48:8d:a2:97:43:c9:
         31:b8:13:fa:3a:ee:2e:03:6e:1b:ac:3a:67:b4:93:a8:e5:00:
         81:50:e2:9e:a5:0a:86:dd:b2:a1:c6:9f:c5:0e:d7:e7:16:eb:
         ae:80:79:d5:1a:ab:f3:15:a4:ac:e4:4e:cc:21:9d:a3:1e:f7:
         6e:3e:90:cd:06:03:bf:51:ba:7f:88:c3:e2:a8:6e:cb:3a:85:
         4e:45:c1:83:34:15:97:05:8f:35:e0:3e:56:c5:8d:a4:70:77:
         13:c0:cd:4d:d9:cb:43:14:56:65:43:a1:df:a1:a8:96:c4:da:
         23:02:b8:a2:a5:2e:7f:f3:02:a0:0d:9c:a6:d7:b0:9c:1e:37:
         48:c9:ae:27:e8:64:3e:63:17:7f:5f:8f:fc:19:40:42:1b:d4:
         7a:7f:d6:e8:a0:38:7e:6e:5b:2f:a7:92:f9:02:4a:b7:d6:ba:
         70:49:7d:2a:d6:0d:e8:ab:ce:a7:a9:b7:f4:88:65:f5:a2:3c:
         59:0f:ca:75:63:b0:80:f1:66:d4:b1:8a:34:49:08:a5:51:a2:
         6d:8a:f7:81:ed:86:27:d9:33:fd:1e:24:96:84:96:3f:8a:aa:
         33:81:ac:1a:87:c3:f7:e3:ad:c4:85:75:4e:c0:68:05:35:c5:
         82:8b:e6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:10 2025 by rpki-client