Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97f069c2-c90c-374b-a8f1-76ce951c6844.roa
File:                     97f069c2-c90c-374b-a8f1-76ce951c6844.roa (raw, json)
Hash identifier:          TGlzmO/86kUJ9nLSZ2PnigNOPbhyl0oBacEbN9v2B2w=
Subject key identifier:   1C:31:EC:F7:4E:D3:FC:02:5C:20:65:D7:6C:07:EC:BD:F9:9F:8B:5F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858488E1B119824E19F5080078D00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97f069c2-c90c-374b-a8f1-76ce951c6844.roa
Signing time:             Wed 15 Jan 2025 17:46:13 +0000
ROA not before:           Wed 15 Jan 2025 17:46:13 +0000
ROA not after:            Tue 15 Apr 2025 16:46:13 +0000
asID:                     214238
IP address blocks:        23.27.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8e:1b:11:98:24:e1:9f:50:80:07:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 15 17:46:13 2025 GMT
            Not After : Apr 15 16:46:13 2025 GMT
        Subject: CN=e29a6abf-af7b-46b2-ab6a-d9f115f272e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:0a:53:72:06:d8:37:06:9f:e2:39:cf:32:
                    dc:49:2b:8b:d8:32:a1:fc:79:95:04:c0:79:51:89:
                    45:3c:c7:83:41:ca:d2:10:b0:1c:9e:48:bb:60:80:
                    39:d8:3c:ef:aa:c8:5a:dc:97:93:b4:36:cb:e0:ff:
                    f2:11:92:64:d9:c5:bd:19:a1:c0:20:59:38:3d:cf:
                    96:f2:52:45:aa:1d:7b:e5:a4:cc:18:ba:bf:c3:03:
                    22:25:20:e6:69:fb:65:b9:db:33:e6:43:71:e4:90:
                    93:78:b6:56:40:c1:f2:5b:04:4e:d9:23:63:af:ff:
                    20:89:72:05:a6:47:e3:f3:42:a5:44:f0:5d:a0:f0:
                    24:b2:3b:bc:8a:82:54:ee:5f:a9:93:7d:bb:0a:3b:
                    d1:a2:1f:2f:9c:6f:ec:f4:8d:b3:85:a8:44:8b:db:
                    33:d4:07:ea:de:85:f3:60:74:4b:2e:94:4f:c3:e8:
                    b9:cc:fd:89:7f:db:ce:01:ec:87:01:39:dd:6c:73:
                    be:2a:af:51:44:98:bc:51:57:00:ae:a3:9e:87:bd:
                    95:50:53:e5:37:be:22:bc:82:77:67:9c:3e:83:1f:
                    cc:b9:ed:3a:99:ba:3b:c3:ae:bf:1b:09:38:3e:c7:
                    e3:a4:ac:b5:f7:4c:ab:9b:69:7b:5b:da:c2:55:0a:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:31:EC:F7:4E:D3:FC:02:5C:20:65:D7:6C:07:EC:BD:F9:9F:8B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97f069c2-c90c-374b-a8f1-76ce951c6844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:66:3d:cf:78:51:bb:6a:84:1b:ed:2d:2a:74:12:ba:27:3d:
         3a:a4:23:90:63:33:b3:4e:4e:ca:30:98:5a:3d:45:46:54:df:
         78:d6:f3:62:ad:bb:6c:71:cf:1f:57:82:38:80:9a:1c:3c:4b:
         45:c4:23:5f:02:4e:27:7a:6c:4c:ad:fb:c6:a5:85:58:a3:8e:
         75:98:63:bd:d7:eb:7b:10:63:ef:67:13:f1:67:8f:29:e2:17:
         da:c8:4a:02:fb:dc:cb:f0:54:af:4b:18:15:2e:ce:27:51:58:
         59:38:2b:14:71:2d:52:31:b0:0a:8d:b4:fd:d3:d5:6a:2b:e1:
         40:c9:fb:ca:a9:97:3d:43:67:be:93:22:5b:51:a6:a5:98:a2:
         29:3d:08:f2:5a:a4:94:b5:5f:e2:a1:0f:a4:42:d4:e8:1d:db:
         a0:e8:61:8c:a3:9a:9a:03:3c:e7:f2:ab:23:34:9d:d6:48:ba:
         4e:79:9d:37:fb:b1:a7:ce:d7:2a:32:6a:55:3d:c5:72:ea:24:
         e0:22:78:5a:99:6e:d3:5e:b9:b8:c0:0d:1a:af:f2:f6:6f:80:
         50:fe:b9:83:4e:dc:df:4f:a8:81:65:60:51:25:af:97:9a:24:
         d9:b2:12:75:85:b1:62:6b:5e:ba:a8:10:21:e4:34:74:79:42:
         d9:3c:06:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:10 2025 by rpki-client