Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/81b41aa7-a527-3b09-b48f-e20808d33096.roa
File:                     81b41aa7-a527-3b09-b48f-e20808d33096.roa (raw, json)
Hash identifier:          WuVjmsVI9JatRb4FZ34QGHTqymuzbPnGDhbZMgwAkqo=
Subject key identifier:   0F:7D:F6:50:76:19:1C:AC:43:E6:9D:9C:79:F3:7D:15:DD:9B:A6:06
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858480EA505946DAB24153439CB92
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/81b41aa7-a527-3b09-b48f-e20808d33096.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     15083
IP address blocks:        23.27.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:05:94:6d:ab:24:15:34:39:cb:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=5e7b091b-8cc3-4119-9f0f-fbb30c27e2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:ab:c2:54:0f:e9:e3:24:f9:75:06:8a:9c:
                    a6:17:41:d9:97:ce:17:b0:e4:8d:bf:c8:8d:7b:68:
                    c5:7a:7b:93:03:1b:1d:0e:93:26:d5:18:55:63:0b:
                    4c:65:c2:ce:8d:c0:bb:22:04:ba:27:26:05:8d:5d:
                    2f:08:d0:99:9e:59:4c:ad:61:bd:1a:8b:c6:27:2f:
                    7e:23:40:96:ca:3e:8b:7f:79:2b:de:d2:a2:59:fb:
                    6e:33:d9:48:8e:a2:1e:8c:8d:ea:35:2e:ea:a3:8d:
                    24:f7:6c:d8:5d:cc:b6:b0:ec:74:c4:62:c8:72:4d:
                    f3:a0:b7:48:bf:cc:a7:f2:25:0f:85:36:a8:76:72:
                    83:6f:7b:26:be:1d:3a:fc:2e:21:56:ff:9a:1d:18:
                    27:96:71:73:7c:4b:8f:3e:cc:07:81:5a:8c:60:5f:
                    39:76:ea:4b:4d:20:fb:ee:92:d6:b0:f6:c6:c5:2b:
                    4f:07:05:0c:8f:0a:3f:49:0f:cb:a9:59:4f:57:50:
                    c9:d0:64:34:da:16:ad:63:e9:e9:50:f2:fe:59:c6:
                    8e:3f:5f:f4:90:ce:21:b5:b9:bc:01:f3:69:ff:15:
                    1b:cd:c5:20:24:1c:11:31:bb:e1:ee:f4:76:16:82:
                    6c:47:c9:e5:3f:cc:12:6a:60:f7:bb:7b:11:22:34:
                    3a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7D:F6:50:76:19:1C:AC:43:E6:9D:9C:79:F3:7D:15:DD:9B:A6:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/81b41aa7-a527-3b09-b48f-e20808d33096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:5a:14:07:0d:33:3a:6b:28:8c:1c:24:7c:5e:c4:b6:37:7c:
         7c:bc:8c:bb:1b:bc:6d:23:31:88:d5:4b:4a:e0:8a:84:17:92:
         96:04:c2:e8:0d:b5:b5:83:cf:c5:1a:42:40:80:c8:b7:3b:74:
         7c:7a:51:24:e3:90:3b:f7:c7:db:28:0c:ed:52:6b:8e:6e:43:
         1c:bc:8a:1c:96:91:b3:16:1e:ab:75:e4:80:fb:26:ab:0e:7c:
         7d:e5:e8:03:82:a3:21:23:5f:11:c2:68:a9:73:1f:d8:c2:26:
         1d:84:a7:5a:79:f7:88:dc:b4:2f:96:8b:1f:76:63:2d:a1:8b:
         b5:9d:bc:b7:4c:77:be:87:66:54:a6:3a:e2:17:ef:c4:7e:91:
         18:ea:80:15:fc:1b:c4:e4:a6:26:f6:e5:dd:c8:fd:26:7e:e4:
         c2:a6:1b:59:05:13:d5:73:ee:d2:c0:c2:8e:5c:f2:42:8d:db:
         c7:a7:b3:80:40:4e:ff:93:6a:be:1e:29:18:4c:f6:92:38:91:
         17:4f:0e:27:a5:a1:6c:06:ff:ff:9e:7e:85:33:e7:bd:30:f9:
         44:fe:75:f1:4e:78:31:ad:5f:7a:5c:04:07:d6:00:f7:20:d1:
         93:e3:6e:b6:f7:3a:fa:0b:d0:49:ba:2d:97:f9:54:cd:69:26:
         53:d2:b9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:45 2025 by rpki-client