Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46261.roa
File:                     AS46261.roa (raw, json)
Hash identifier:          PB9PC46IBAdjYmVukPcPekHfaJBkcDe5vduDKSgnd24=
Subject key identifier:   2E:D4:81:97:9C:6B:62:46:4E:0F:B1:26:16:1A:A2:86:FD:3E:CC:6E
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       479AFE22566B02561EAAD5711EEB5A79BEADC798
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46261.roa
Signing time:             Wed 26 Feb 2025 22:29:53 +0000
ROA not before:           Wed 26 Feb 2025 22:24:53 +0000
ROA not after:            Wed 25 Feb 2026 22:29:53 +0000
asID:                     46261
IP address blocks:        104.234.24.0/23 maxlen: 24
                          104.234.36.0/23 maxlen: 24
                          104.234.60.0/23 maxlen: 24
                          104.234.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9a:fe:22:56:6b:02:56:1e:aa:d5:71:1e:eb:5a:79:be:ad:c7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Feb 26 22:24:53 2025 GMT
            Not After : Feb 25 22:29:53 2026 GMT
        Subject: CN=2ED481979C6B62464E0FB126161AA286FD3ECC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:7c:b0:f0:d2:01:d1:e1:d1:d0:3d:23:ce:
                    e8:fa:91:99:3e:cd:5a:da:d2:5e:f8:30:89:5b:04:
                    bc:8a:bf:b9:f4:25:6f:da:0e:06:b0:af:18:01:7e:
                    20:70:d1:fa:9b:8d:7d:28:f5:c2:a8:90:dd:cb:fe:
                    0b:7e:7a:d2:0e:0e:ed:e0:86:93:65:7f:d4:e8:1f:
                    b9:cb:9d:ca:ae:05:5f:e3:84:38:ea:0a:71:db:be:
                    5a:02:90:8f:b5:80:35:4d:a8:d3:f7:c7:ad:2a:ce:
                    31:ee:3a:31:94:b0:93:93:e4:3e:ee:94:ed:26:f0:
                    62:de:96:f2:e5:7b:3b:90:31:9a:78:0a:55:22:6e:
                    a5:df:07:1c:e1:81:0b:a3:d2:10:c7:f6:45:37:dd:
                    e3:d4:40:dc:56:8b:89:28:35:e6:0d:a0:0b:49:e4:
                    19:c8:33:cb:d4:71:ee:1f:2c:8f:0c:8e:32:2b:72:
                    72:0c:46:d4:4b:e4:c0:12:7f:e0:ee:09:dd:25:35:
                    3f:ae:47:54:ef:64:8d:74:4c:5a:b0:24:8d:7f:56:
                    87:38:34:ce:8a:d4:ef:5b:a3:ef:9b:8a:6a:04:0f:
                    24:25:a8:ce:a0:bb:e8:e4:38:d3:a1:2a:64:0b:2e:
                    9d:d6:c9:c2:a4:4a:79:80:76:07:8b:d0:6f:fc:7f:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:81:97:9C:6B:62:46:4E:0F:B1:26:16:1A:A2:86:FD:3E:CC:6E
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS46261.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.24.0/23
                  104.234.36.0/23
                  104.234.60.0/23
                  104.234.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:1b:a7:d0:4d:45:63:3e:c9:58:ef:e8:6c:df:9c:59:e1:2c:
         0c:87:8a:a3:7c:f7:a8:fb:d8:7a:7c:86:d6:d5:e3:b6:de:af:
         58:10:ec:2f:7a:d4:16:bf:9a:2f:f8:a3:f2:a5:a0:3d:86:bd:
         74:27:97:cd:4d:1d:c5:98:4e:04:73:ad:51:2f:09:ee:f4:6b:
         a3:77:a4:70:24:a7:fa:05:16:47:61:5d:bd:e0:82:f8:fc:7a:
         42:94:e2:60:ff:7c:4e:31:d0:bb:56:e7:85:14:20:9c:03:33:
         24:b8:8e:bf:5b:f3:5a:3b:eb:fe:92:24:9a:f8:48:49:46:1a:
         56:fd:46:bb:bd:3c:da:0b:80:72:98:32:74:a5:4c:a3:48:59:
         af:98:84:b4:a4:ba:21:0d:c6:e8:8c:25:61:df:84:11:43:5f:
         72:d6:ad:38:20:35:c7:38:3e:63:f8:8e:ea:d9:4a:f2:c2:bf:
         ce:0d:d2:c0:e3:aa:76:ae:68:59:8f:07:d3:ad:43:f8:94:62:
         14:84:34:c5:e3:ac:f5:f4:ce:f4:a1:a7:db:2d:ad:7f:ae:6c:
         e4:39:4b:d8:99:bd:93:42:f3:62:70:50:c1:a0:eb:14:2d:d9:
         05:b0:6c:2d:5a:93:0f:06:fb:0e:40:36:74:81:2a:8b:3e:76:
         c6:e2:d6:84
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIUR5r+IlZrAlYeqtVxHutaeb6tx5gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMjI2MjIyNDUzWhcNMjYwMjI1MjIyOTUz
WjAzMTEwLwYDVQQDEygyRUQ0ODE5NzlDNkI2MjQ2NEUwRkIxMjYxNjFBQTI4NkZE
M0VDQzZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyV8sPDSAdHh
0dA9I87o+pGZPs1a2tJe+DCJWwS8ir+59CVv2g4GsK8YAX4gcNH6m419KPXCqJDd
y/4LfnrSDg7t4IaTZX/U6B+5y53KrgVf44Q46gpx275aApCPtYA1TajT98etKs4x
7joxlLCTk+Q+7pTtJvBi3pby5Xs7kDGaeApVIm6l3wcc4YELo9IQx/ZFN93j1EDc
VouJKDXmDaALSeQZyDPL1HHuHyyPDI4yK3JyDEbUS+TAEn/g7gndJTU/rkdU72SN
dExasCSNf1aHODTOitTvW6Pvm4pqBA8kJajOoLvo5DjToSpkCy6d1snCpEp5gHYH
i9Bv/H/fXQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFC7UgZeca2JGTg+xJhYaoob9
PsxuMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzQ2MjYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBaOoYAwQBaOokAwQBaOo8AwQAaOpx
MA0GCSqGSIb3DQEBCwUAA4IBAQCaG6fQTUVjPslY7+hs35xZ4SwMh4qjfPeo+9h6
fIbW1eO23q9YEOwvetQWv5ov+KPypaA9hr10J5fNTR3FmE4Ec61RLwnu9Gujd6Rw
JKf6BRZHYV294IL4/HpClOJg/3xOMdC7VueFFCCcAzMkuI6/W/NaO+v+kiSa+EhJ
RhpW/Ua7vTzaC4BymDJ0pUyjSFmvmIS0pLohDcbojCVh34QRQ19y1q04IDXHOD5j
+I7q2Urywr/ODdLA46p2rmhZjwfTrUP4lGIUhDTF46z19M70oafbLa1/rmzkOUvY
mb2TQvNicFDBoOsULdkFsGwtWpMPBvsOQDZ0gSqLPnbG4taE
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net