Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207941.roa
File: AS207941.roa (raw, json)
Hash identifier: 8M2mDWxZ3X8HGxMMfB7dc8mZNFq+WxrI/SEUj51R9UU=
Subject key identifier: 3A:DE:D9:E7:B3:4A:29:3D:5E:7F:C8:0B:17:93:88:77:C9:E5:03:AA
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3076957BD8A2D1F9378CA05DD7EE4301A43F5406
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207941.roa
Signing time: Fri 13 Dec 2024 02:56:30 +0000
ROA not before: Fri 13 Dec 2024 02:51:30 +0000
ROA not after: Fri 12 Dec 2025 02:56:30 +0000
asID: 207941
IP address blocks: 2a06:a005:b0::/44 maxlen: 48
2a06:a005:c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:76:95:7b:d8:a2:d1:f9:37:8c:a0:5d:d7:ee:43:01:a4:3f:54:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:30 2024 GMT
Not After : Dec 12 02:56:30 2025 GMT
Subject: CN=3ADED9E7B34A293D5E7FC80B17938877C9E503AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:a0:e7:33:3b:7c:01:39:35:66:72:26:a3:
6a:99:6f:8e:92:b6:33:f6:a7:5e:75:1d:65:c3:d7:
6f:24:f9:19:6c:3e:9b:54:6a:ed:26:30:d0:65:81:
74:c0:8c:f7:8f:4a:b1:c1:e6:c7:9d:04:ec:e7:f8:
eb:11:13:31:77:7d:dd:b9:17:92:ca:d5:c9:a8:9a:
f1:25:6e:47:3e:52:90:a0:82:fe:00:c9:10:3c:1c:
0e:ef:2e:11:23:d3:7f:09:a8:ca:88:eb:29:cf:50:
e7:9f:bf:d1:a9:32:5a:86:3c:4b:79:6b:51:cf:20:
70:cc:7a:55:82:62:6b:1e:8b:d5:66:c0:6b:4b:97:
68:0a:f7:57:02:32:24:20:c8:93:14:1e:05:c6:9e:
16:59:75:0c:e1:1e:06:23:cb:ec:e6:e4:65:8a:ad:
ff:ab:61:5a:e2:aa:89:e7:b6:ce:e7:82:4d:94:61:
15:7a:28:ad:49:3f:17:2c:97:ee:4b:01:35:c1:4a:
a8:60:f0:0c:84:df:fd:03:8e:69:3a:b7:1f:69:92:
dd:e4:3e:11:a4:2e:2a:04:96:e0:f9:6b:09:4b:44:
05:38:29:0f:57:b5:b9:24:59:3c:60:ad:2d:d5:33:
af:78:98:bb:86:7c:49:a5:bb:b3:f6:47:bc:d5:85:
48:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DE:D9:E7:B3:4A:29:3D:5E:7F:C8:0B:17:93:88:77:C9:E5:03:AA
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b0::-2a06:a005:cf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7c:0a:df:50:b2:d4:50:2f:3b:39:ba:b2:68:b0:57:8e:c6:93:
74:84:f7:9c:47:09:7a:f1:a2:a3:bf:8d:8d:92:f6:77:28:bf:
65:11:f9:f9:b7:8c:7a:c4:dd:ac:91:bd:70:67:30:fb:fe:8c:
07:e7:43:92:4d:56:4f:15:8d:d1:be:04:a6:a6:03:82:8b:81:
04:66:75:5e:43:75:f5:33:cf:13:fd:7a:64:3a:29:ac:67:cc:
0e:85:21:29:a0:72:c9:d2:fb:7e:ad:72:34:57:6d:d0:78:e6:
20:d4:43:d8:4b:99:3c:7f:b8:a7:a7:61:c9:a3:95:cb:f6:62:
b0:e3:bd:08:68:93:57:b0:a0:ff:7f:76:49:b3:d0:c8:5f:aa:
a8:eb:2b:b3:f3:f7:c2:65:ff:56:3e:ca:ff:e5:f0:4f:da:af:
a0:3e:15:12:6a:e6:52:be:21:07:fb:4f:c2:e2:f4:c9:f8:dd:
04:45:f7:11:eb:8c:a1:34:78:65:03:23:d5:68:f7:66:cf:23:
f1:62:c7:8c:1e:63:cb:94:67:15:2b:fa:d7:bf:38:56:a0:f8:
35:d1:fa:56:e4:8d:e8:19:e1:63:68:cf:7d:23:5e:df:ad:34:
5e:f7:1b:31:05:ca:9e:71:5a:7e:d9:a5:87:72:c9:3c:78:9c:
5f:b5:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:39:22 2025 by rpki-client