Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3702431-d93f-376f-8c34-0e16b2e912f6.roa
File:                     d3702431-d93f-376f-8c34-0e16b2e912f6.roa (raw, json)
Hash identifier:          XBtIp48XBQCC3GGoILty4/IMQ8nczpJ/uvDxOUvgoL0=
Subject key identifier:   17:21:8B:11:91:3C:1D:4A:01:C6:4C:D5:04:E9:4F:CE:57:03:94:51
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858483B4FF611AFC5CEA2918AA380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3702431-d93f-376f-8c34-0e16b2e912f6.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     40676
IP address blocks:        23.27.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:f6:11:af:c5:ce:a2:91:8a:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=9bc1c7fc-631f-4850-ac2d-cbc60ae23752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:59:da:b7:24:15:f7:83:ca:92:37:d5:7d:a9:
                    13:fc:72:ff:b1:c6:70:8c:f1:0c:bf:48:74:30:9f:
                    9e:ab:9e:fd:4b:ed:69:26:fc:73:d9:f9:b1:87:4b:
                    a4:47:63:58:81:53:05:b1:e3:dd:30:06:87:8c:55:
                    67:0c:4d:11:be:e8:ce:62:bd:4b:30:4a:3e:cc:25:
                    5b:ab:63:6b:e5:3f:ed:2f:84:3a:a3:50:2b:74:a6:
                    af:74:59:31:94:5c:30:25:42:8f:83:08:e2:db:12:
                    b7:b7:fa:1e:c8:e4:79:b2:18:6c:f3:eb:dd:92:97:
                    b5:e0:76:3a:b6:22:e8:d2:f6:e6:fa:66:77:c8:49:
                    cb:5e:46:97:5c:d8:0e:85:6a:2a:57:3a:6f:ac:53:
                    f3:14:9c:6a:f1:0f:c0:ae:6e:62:c4:46:72:c7:f0:
                    f2:2c:fe:8b:1f:22:b6:af:57:04:b4:bf:1d:54:e9:
                    cd:66:cb:ae:6d:b4:81:c3:e7:b4:aa:e2:75:fe:41:
                    4a:2a:45:75:07:c2:90:0b:41:31:38:cb:6a:fa:63:
                    62:7d:e3:f5:d9:43:61:05:94:38:29:49:b2:f2:e0:
                    f6:44:2b:6c:6b:a5:d3:f0:7a:f3:b6:9c:de:08:e9:
                    9d:60:26:dc:c5:d4:3a:82:44:cb:20:d5:49:74:66:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:21:8B:11:91:3C:1D:4A:01:C6:4C:D5:04:E9:4F:CE:57:03:94:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3702431-d93f-376f-8c34-0e16b2e912f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:99:b9:26:f0:ea:6f:e5:e0:dc:09:6d:59:51:a9:2d:e8:
         63:f1:03:29:15:b0:ad:45:5f:e0:42:b3:61:ba:d0:7f:85:71:
         2b:38:63:33:30:72:48:b6:c7:45:e2:38:d4:61:a6:00:f5:f9:
         ef:d2:27:8d:8c:41:7a:ae:85:cb:d0:d7:0b:6d:6d:2d:2c:e5:
         1f:46:1f:7b:2a:43:e8:bc:81:c2:2f:63:1d:72:05:b9:ad:8a:
         4b:d2:0b:92:f8:e5:7e:cb:5b:ba:b6:a4:47:c5:ab:46:dc:98:
         78:88:f9:67:08:0e:56:12:16:90:d7:53:ff:a2:be:07:0b:f9:
         16:3e:f0:60:34:18:e1:8e:fb:90:64:50:59:9b:c7:ea:bc:eb:
         bd:35:49:52:35:0a:64:b1:0a:b7:6a:d7:0f:93:7d:ad:6b:84:
         6b:8e:4e:a1:2e:29:8b:fe:9e:b1:6c:c8:2d:07:d3:d2:b1:e7:
         44:d4:44:0f:b0:dd:1b:11:9e:ca:4a:bb:e5:cd:9b:a7:9d:05:
         eb:6a:0e:41:9e:cd:1b:6b:f4:9c:4a:1f:a5:55:9f:bb:55:97:
         ef:02:4f:57:52:3f:69:ec:5f:17:a7:6e:a8:a6:dd:02:bd:bb:
         fe:4e:85:4d:de:f6:f8:df:5d:e7:d0:5e:51:ac:da:93:24:8f:
         24:7c:90:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:23:19 2025 by rpki-client