Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/229f77a4-3dfb-34c2-b453-c46e37a942e8.roa
File:                     229f77a4-3dfb-34c2-b453-c46e37a942e8.roa (raw, json)
Hash identifier:          6BPGbJg+z2WMMf1kEjZHL7H4wxH5OZziXSyBBaVVS1s=
Subject key identifier:   B1:AC:DF:C9:10:2B:D0:80:B4:A9:CA:D1:89:07:C8:67:66:89:C8:72
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858484AAAE5B9F2C031E13B2AEB80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/229f77a4-3dfb-34c2-b453-c46e37a942e8.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     149440
IP address blocks:        23.27.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:e5:b9:f2:c0:31:e1:3b:2a:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=abe175ee-f99c-4ae5-8b21-bdd65605a54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0d:bb:3c:29:6e:5f:3e:37:4d:38:47:a7:d6:
                    b3:b1:2b:1d:95:63:fe:77:aa:71:8d:fe:b7:ce:d0:
                    ee:d4:eb:e0:ba:45:24:06:8e:3c:4b:4d:77:e0:f3:
                    fb:f8:99:b3:01:05:fb:d6:96:c9:e5:b2:57:70:d0:
                    f8:f2:06:ba:4a:50:ac:47:27:98:d0:08:0a:55:3b:
                    8f:73:c1:b9:9e:4b:e1:29:6d:60:94:e9:a2:56:79:
                    81:f5:d6:77:99:f8:8a:c8:3c:0c:f5:bf:bd:62:ba:
                    9b:01:c5:41:81:bd:04:ab:f7:48:ec:3f:40:84:e4:
                    5c:4b:62:5f:ef:a1:47:f1:55:c0:13:f7:98:46:40:
                    f4:79:ac:67:b2:c4:ff:67:a7:98:30:88:5a:70:64:
                    7a:65:f6:59:e7:89:df:c0:6b:8d:8e:82:80:06:fc:
                    da:95:5f:4f:b7:c4:4b:43:22:cb:68:e3:a3:4d:86:
                    44:3a:d8:1f:15:10:b9:3f:84:61:07:b5:e6:42:d4:
                    7b:5b:5c:6c:d9:d4:e6:20:27:03:d1:8f:73:36:6f:
                    08:d9:c3:7d:73:6c:64:af:a4:61:87:75:3b:37:40:
                    63:8e:f3:41:f5:10:9e:a4:42:be:b4:30:8f:c0:c5:
                    84:4b:80:ec:87:f4:1b:24:01:7b:68:8f:fc:52:74:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AC:DF:C9:10:2B:D0:80:B4:A9:CA:D1:89:07:C8:67:66:89:C8:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/229f77a4-3dfb-34c2-b453-c46e37a942e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:56:6b:e1:bc:a3:ea:e1:e2:f6:c7:7b:d4:c8:9f:fa:e0:d9:
         d0:df:34:d4:8a:70:eb:ff:28:ea:6e:3d:81:d2:0b:ef:1c:2c:
         56:28:7c:d7:85:fc:09:d1:38:c9:6f:fc:b0:fe:d1:35:25:a1:
         09:9f:46:e6:ad:b7:23:56:5f:26:7b:45:77:08:e1:15:d2:86:
         c8:ca:ca:3a:ca:13:35:cb:0b:5e:0a:5a:53:b3:b6:90:2e:c6:
         b5:35:0b:61:d2:19:9a:2f:97:c6:8f:3a:41:d1:40:04:9b:84:
         5a:5d:72:ea:69:af:2c:2a:2c:a2:cc:a7:7c:95:81:e1:56:63:
         12:cd:85:08:ca:7f:fa:8c:4e:1f:92:33:d5:6c:3f:bb:4c:bd:
         2a:91:39:8b:7a:d3:8d:30:f3:7c:9b:6e:fd:46:95:61:fd:6c:
         8d:af:bb:58:ec:a5:7f:cc:f7:9f:7b:f4:1d:e7:3d:2e:14:46:
         06:3c:88:0f:70:21:71:ec:2b:ef:28:b5:54:14:08:8e:a0:c1:
         55:c5:56:62:c9:50:aa:be:e4:5d:fe:6c:d2:20:4e:51:72:22:
         2e:49:db:85:ac:07:7b:c6:39:c4:8f:32:1b:c3:84:06:cf:61:
         05:cd:88:c8:1e:9e:ee:e9:ea:0f:00:ed:4c:29:10:b3:33:e5:
         91:f8:07:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:26:12 2025 by rpki-client