Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0933444b-f338-3e63-be02-c1fd0210d14f.roa
File:                     0933444b-f338-3e63-be02-c1fd0210d14f.roa (raw, json)
Hash identifier:          43fhltfIb58VCLdh7Nl3CeM/CcgAiBw1KxUqNHLmD/c=
Subject key identifier:   45:81:C8:7A:4D:20:17:DA:65:8E:78:5E:9F:C7:6D:EA:EE:11:74:77
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858484585306D1BBCC6519853B1C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0933444b-f338-3e63-be02-c1fd0210d14f.roa
Signing time:             Fri 20 Dec 2024 17:46:01 +0000
ROA not before:           Fri 20 Dec 2024 17:46:01 +0000
ROA not after:            Thu 20 Mar 2025 16:46:01 +0000
asID:                     11798
IP address blocks:        23.27.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:85:30:6d:1b:bc:c6:51:98:53:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 20 17:46:01 2024 GMT
            Not After : Mar 20 16:46:01 2025 GMT
        Subject: CN=038c4be9-2a1b-411e-b041-31583cd869c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d1:c7:4c:28:fb:e1:25:0c:91:a3:80:69:b6:
                    d3:d4:c4:08:4f:84:3b:44:f0:01:aa:47:a8:b4:5d:
                    4e:61:1b:92:f2:46:9c:b8:49:d0:8b:50:3c:95:28:
                    1d:57:35:4c:ac:c6:95:4f:cd:66:5c:98:2f:37:14:
                    e8:9b:73:32:ce:f1:04:cd:0d:48:1b:03:84:50:c7:
                    f9:7b:27:66:cd:47:f9:03:55:e6:82:27:b1:74:dd:
                    b4:ac:a4:9e:6a:69:8f:d9:a5:9f:9d:30:e9:81:c9:
                    7a:cb:af:97:f1:a6:75:e7:24:66:03:dd:7a:64:93:
                    3e:5e:1f:ab:f9:d4:14:ad:7b:4a:76:60:7e:09:27:
                    08:b2:6d:a6:a0:91:08:6c:b7:97:ab:3b:45:2e:86:
                    26:43:8f:18:66:0f:24:da:45:57:ec:4c:04:31:e8:
                    4d:fa:1c:c9:d3:41:4c:40:cb:98:74:4a:dd:d4:2f:
                    1b:3f:e2:f1:f8:a8:23:39:a7:80:30:03:bc:3e:67:
                    e0:03:8d:13:6d:d9:c6:9e:6e:a4:53:cb:aa:4c:17:
                    df:ea:f4:bc:52:11:73:0a:35:0c:43:3d:8a:78:2b:
                    fb:2c:a2:15:ad:d5:5f:8b:eb:ea:e8:b2:13:e4:3e:
                    9c:e6:9a:6e:a7:8d:69:35:03:17:8d:d4:d7:42:1a:
                    9e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:81:C8:7A:4D:20:17:DA:65:8E:78:5E:9F:C7:6D:EA:EE:11:74:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0933444b-f338-3e63-be02-c1fd0210d14f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:1b:20:5f:8b:fd:55:ab:61:45:2a:b5:2b:6a:a3:89:54:70:
         b7:4c:6f:9e:30:53:84:65:58:bf:9b:00:70:d1:6d:e0:a5:92:
         09:88:72:86:ef:25:bc:84:99:4b:e4:6a:b1:f9:a5:61:d5:0f:
         2e:b3:70:54:ff:cb:58:4f:51:aa:55:14:04:70:a3:b6:e6:58:
         ca:80:f0:45:39:ba:c2:8a:2a:13:c5:06:55:aa:b6:bd:e5:7e:
         0c:42:d1:7a:6b:8c:2b:fc:ad:a8:df:8c:f8:26:63:25:3a:a4:
         87:a7:e0:e6:a8:35:7a:69:a1:4c:41:f0:f2:c9:e6:4b:92:fe:
         4f:c3:52:4f:c2:bb:a5:74:eb:42:ba:86:60:06:76:f1:ff:20:
         29:7f:22:17:4a:6b:cd:6b:15:1c:10:3d:b6:2d:5d:1a:ed:2e:
         12:cb:59:8a:0e:94:05:97:e5:b7:4c:f7:60:e4:9c:3c:bc:60:
         85:95:8b:f8:f4:aa:5d:51:5b:e9:0d:c7:f5:9b:8e:de:8d:08:
         cb:6d:ca:30:be:db:45:e8:02:db:4d:11:a9:27:a2:91:a0:80:
         01:2d:b3:57:ac:6a:e9:dc:de:b1:ac:e2:ad:c5:08:3d:1f:c6:
         24:2e:4f:a5:f4:d1:00:1e:59:51:2c:8d:45:2b:13:bb:c1:82:
         df:d7:52:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFhTBtG7zGUZhTscAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTIyMDE3NDYwMVoXDTI1MDMyMDE2NDYwMVowLzEtMCsGA1UEAxMk
MDM4YzRiZTktMmExYi00MTFlLWIwNDEtMzE1ODNjZDg2OWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9HHTCj74SUMkaOAabbT1MQIT4Q7RPABqkeo
tF1OYRuS8kacuEnQi1A8lSgdVzVMrMaVT81mXJgvNxTom3MyzvEEzQ1IGwOEUMf5
eydmzUf5A1XmgiexdN20rKSeammP2aWfnTDpgcl6y6+X8aZ15yRmA916ZJM+Xh+r
+dQUrXtKdmB+CScIsm2moJEIbLeXqztFLoYmQ48YZg8k2kVX7EwEMehN+hzJ00FM
QMuYdErd1C8bP+Lx+KgjOaeAMAO8PmfgA40TbdnGnm6kU8uqTBff6vS8UhFzCjUM
Qz2KeCv7LKIVrdVfi+vq6LIT5D6c5ppup41pNQMXjdTXQhqemQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEWByHpNIBfaZY54Xp/HberuEXR3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDkzMzQ0NGItZjMzOC0z
ZTYzLWJlMDItYzFmZDAyMTBkMTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxv2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKIbIF+L/VWrYUUqtStqo4lUcLdMb54wU4RlWL+bAHDRbeClkgmIcobv
JbyEmUvkarH5pWHVDy6zcFT/y1hPUapVFARwo7bmWMqA8EU5usKKKhPFBlWqtr3l
fgxC0XprjCv8rajfjPgmYyU6pIen4OaoNXppoUxB8PLJ5kuS/k/DUk/Cu6V060K6
hmAGdvH/ICl/IhdKa81rFRwQPbYtXRrtLhLLWYoOlAWX5bdM92DknDy8YIWVi/j0
ql1RW+kNx/Wbjt6NCMttyjC+20XoAttNEaknopGggAEts1esaunc3rGs4q3FCD0f
xiQuT6X00QAeWVEsjUUrE7vBgt/XUmw=
-----END CERTIFICATE-----
Generated at Thu May 8 16:00:49 2025 by rpki-client