Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ca0b148-42b7-3023-a826-317fc0ce6795.roa
File:                     1ca0b148-42b7-3023-a826-317fc0ce6795.roa (raw, json)
Hash identifier:          ZIVUtEf/BZ61fdv5iW7AY2SHmWjdkXJ+apJBIh0FXEM=
Subject key identifier:   4C:3B:76:C2:0B:E7:49:D6:31:87:BA:FF:4F:5A:AA:84:48:42:C6:28
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847F584E9D70CD9216435A77800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ca0b148-42b7-3023-a826-317fc0ce6795.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     7018
IP address blocks:        23.27.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:e9:d7:0c:d9:21:64:35:a7:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=4f9ef528-99e9-456c-81fc-a79160d69203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:33:d9:d6:6d:34:93:13:25:4d:15:55:0f:
                    88:8f:37:d9:02:63:18:e2:d4:df:20:b5:3f:e3:38:
                    f8:2c:f4:b9:78:b9:a6:df:12:db:1f:07:a2:9d:2a:
                    03:a0:2d:c3:b8:b8:6f:c6:b6:c1:28:cd:18:a5:7c:
                    1d:63:fb:9e:3c:4f:07:f3:2f:ff:50:47:30:9f:ab:
                    5f:1d:03:81:33:34:cf:34:b6:13:e1:4e:7d:b5:9b:
                    d1:b4:ac:56:09:10:0c:ea:b6:d0:3f:4c:17:ce:7d:
                    09:3f:32:29:2b:b5:57:ad:be:2c:00:97:11:31:a9:
                    63:b1:29:c4:5a:38:34:fd:f1:e9:2d:d9:7d:af:54:
                    7c:32:10:a6:ba:d5:ee:8e:2e:e5:49:41:d0:6d:b4:
                    a8:1b:31:00:14:6b:93:5e:a1:cd:ef:d9:d0:28:a5:
                    d8:84:6c:28:96:f8:6f:8d:3e:ed:a3:3d:46:78:69:
                    75:35:1a:b1:df:8f:d0:18:fc:66:f0:54:d8:22:82:
                    cf:df:0c:d1:9c:bf:1b:72:2f:28:b7:59:8b:cb:20:
                    ba:cd:5b:36:5b:8b:8b:fb:55:f0:9a:e7:24:57:d8:
                    31:da:de:cd:f3:b3:0e:11:c6:8b:9d:15:5b:a8:75:
                    12:3d:22:64:29:d7:8d:b1:12:a0:1d:3e:f1:d6:2c:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3B:76:C2:0B:E7:49:D6:31:87:BA:FF:4F:5A:AA:84:48:42:C6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ca0b148-42b7-3023-a826-317fc0ce6795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ce:71:2b:46:13:b9:ac:e6:97:14:c0:ae:31:ec:91:54:b0:
         2c:26:51:1f:2d:cf:1c:b5:e8:b3:0e:11:d6:14:67:a5:31:72:
         a1:55:9d:f4:2e:a9:53:49:8d:c8:27:64:6b:e7:a7:0b:a9:c3:
         aa:2a:a7:99:81:ba:1c:13:3d:a7:c8:ff:c5:1c:03:89:0e:d5:
         50:fc:02:53:db:1d:66:5e:bc:ee:a9:0b:bd:8d:53:2f:65:35:
         e2:7d:95:73:47:2c:1e:b6:5c:e6:11:d0:bf:ae:a6:18:d8:7c:
         c9:2c:59:c7:90:06:6a:b4:b0:9c:1e:27:19:49:70:c3:01:d4:
         17:62:01:f7:4c:a9:a1:42:15:4a:16:cc:28:75:52:f1:cf:22:
         c1:d0:61:15:f9:38:bc:df:5a:38:7c:2b:0c:5b:f5:15:dd:7c:
         b5:ef:2a:e6:4d:3f:87:62:71:96:10:87:73:13:df:9e:f7:75:
         00:ca:5d:0b:75:16:43:78:b0:15:6f:49:40:a4:c3:f2:75:9a:
         99:1a:24:ab:0a:19:94:51:28:ac:0d:31:57:2a:5c:74:4c:06:
         96:35:97:1d:4f:f1:47:05:8f:29:e2:0b:7d:15:f1:33:5c:e0:
         b1:82:d8:d0:2b:06:f1:23:05:c7:37:fd:2f:92:0f:88:e5:52:
         08:b0:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:48 2025 by rpki-client