Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/f4841d2d-b4a6-3354-8d10-da9c493e4e18.roa
File:                     f4841d2d-b4a6-3354-8d10-da9c493e4e18.roa (raw, json)
Hash identifier:          sAZE+Ht8OgaMb+mXf4rYdscHoQirsO/zjFsL+f+kFVk=
Subject key identifier:   98:CD:24:F8:71:B5:8C:3C:21:18:E2:22:81:CC:25:97:0E:FB:01:68
Certificate issuer:       /CN=1111aa78-6e1e-4e22-9796-bcefdfe4c0bc
Certificate serial:       010D0C9F4328584FA42DC463DC924D2DA194BD00
Authority key identifier: 60:1A:73:12:2D:65:12:49:96:32:4E:81:15:6F:4C:5A:13:F8:CB:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/f4841d2d-b4a6-3354-8d10-da9c493e4e18.roa
Signing time:             Tue 27 Oct 2026 13:00:13 +0000
ROA not before:           Tue 27 Oct 2026 13:00:13 +0000
ROA not after:            Mon 25 Jan 2027 14:00:13 +0000
asID:                     402127
IP address blocks:        23.152.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:2d:c4:63:dc:92:4d:2d:a1:94:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1111aa78-6e1e-4e22-9796-bcefdfe4c0bc
        Validity
            Not Before: Oct 27 13:00:13 2026 GMT
            Not After : Jan 25 14:00:13 2027 GMT
        Subject: CN=e228b47e-c61b-4357-a5d5-dc4d81c936b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:50:04:4c:8f:1a:f0:c1:0f:a3:92:f8:39:
                    d5:cc:a8:95:f2:23:cc:76:b5:a9:ea:61:a3:07:28:
                    ec:51:2a:3b:4c:ae:2a:7c:0c:1f:07:18:4b:86:5d:
                    fb:20:ab:c4:fd:10:c4:fd:02:66:08:f3:0a:43:12:
                    79:07:c5:74:ae:46:7f:37:f7:d6:cc:c2:f6:8f:d9:
                    80:63:64:47:d1:c2:f2:89:49:01:24:f6:2c:48:ee:
                    70:bb:3a:e4:e9:48:7b:39:cd:cd:43:c9:bb:6f:dc:
                    f9:bd:5d:25:89:54:a2:29:64:18:06:cc:8b:79:5c:
                    eb:14:15:dd:d8:3a:f8:d0:17:1d:3a:50:34:1d:63:
                    2f:23:ac:39:e5:d0:ff:b2:c4:63:92:22:2e:8d:48:
                    9d:34:1f:1c:da:63:0f:74:8a:f1:44:38:3e:2f:10:
                    1a:e7:14:5a:27:f9:ff:d8:87:e8:8f:2d:e2:37:c1:
                    c9:6a:bd:7f:cd:d2:68:95:68:cf:cf:40:f9:49:e0:
                    db:ac:e2:ef:71:ab:7e:38:5d:95:5f:e8:67:cb:51:
                    53:e0:db:1a:38:b0:cd:54:3a:9f:76:18:be:cd:0a:
                    20:7a:60:43:8f:a5:01:50:5d:4f:10:0e:3d:53:dc:
                    65:de:a1:a3:7e:4e:71:69:67:c8:8c:29:d7:e3:0f:
                    a7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CD:24:F8:71:B5:8C:3C:21:18:E2:22:81:CC:25:97:0E:FB:01:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/f4841d2d-b4a6-3354-8d10-da9c493e4e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.crl

            X509v3 Authority Key Identifier:
                keyid:60:1A:73:12:2D:65:12:49:96:32:4E:81:15:6F:4C:5A:13:F8:CB:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1111aa78-6e1e-4e22-9796-bcefdfe4c0bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:af:45:79:83:b1:dd:59:88:57:e8:ca:0c:cd:32:71:31:d4:
         6d:76:c9:50:e7:20:4a:4b:d9:b0:96:91:21:b5:27:65:d3:e9:
         e3:7a:10:12:c0:12:d7:bb:b5:31:1e:b9:75:4c:ef:09:66:16:
         20:c2:1f:c9:c3:5b:93:1f:e1:2f:05:f1:90:c9:4f:15:7f:33:
         11:e9:50:3a:17:bc:6d:75:53:19:a2:11:a6:3d:67:41:c8:9a:
         80:88:2d:fb:06:97:15:fa:c9:b2:17:60:d0:d4:05:3f:f1:c2:
         93:46:d6:f5:48:61:29:a0:6d:3a:78:d7:4f:cf:bf:34:ef:e0:
         83:a9:57:a5:a8:7c:ea:73:7e:a4:df:d4:e3:d7:ba:ac:ec:8d:
         26:a5:94:18:d2:fb:e8:c3:7a:b5:ce:d7:75:ee:15:32:f4:ff:
         b8:b6:1f:90:6c:b0:7c:84:2d:9d:f3:e5:bb:13:ab:d2:51:dc:
         de:42:8e:df:86:69:c8:46:a8:47:c7:b8:e9:61:22:f2:a2:f5:
         49:16:fd:02:fd:ed:04:c0:69:8d:4b:fc:ec:c1:26:65:5d:78:
         b2:b9:13:e1:da:56:06:66:1d:18:ea:25:56:d4:d2:88:94:7f:
         ec:f0:13:24:a8:cb:01:13:f0:d4:85:a1:92:58:52:07:ba:8c:
         4b:99:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----