Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208768.roa
File: AS208768.roa (raw, json)
Hash identifier: trlirlOvY3EtfeG5WvbqLyBN2BCHGX7OFXZc0oti25U=
Subject key identifier: 5D:AF:03:6E:33:31:01:C5:4A:5B:9B:85:AB:AF:05:6C:8D:4D:85:FD
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3BF5704FBC215F509BB8D9B1ED7447A5245CE485
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208768.roa
Signing time: Fri 13 Dec 2024 02:56:30 +0000
ROA not before: Fri 13 Dec 2024 02:51:30 +0000
ROA not after: Fri 12 Dec 2025 02:56:30 +0000
asID: 208768
IP address blocks: 2a06:a005:2ca0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f5:70:4f:bc:21:5f:50:9b:b8:d9:b1:ed:74:47:a5:24:5c:e4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:30 2024 GMT
Not After : Dec 12 02:56:30 2025 GMT
Subject: CN=5DAF036E333101C54A5B9B85ABAF056C8D4D85FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:28:90:1b:6c:62:6e:32:72:2a:09:6a:25:
15:ee:13:b6:ea:a5:d7:1c:ff:fa:5b:9f:e2:92:da:
8c:58:be:eb:39:9d:09:50:d9:bb:ea:3f:24:d6:07:
1c:0a:fb:13:a9:fc:bf:47:5f:16:59:f7:3f:2a:3f:
1e:3a:f3:96:44:8c:54:d3:85:91:9c:b0:f4:29:db:
38:a8:2a:3f:b2:c2:b1:b5:24:4d:27:a9:ed:b0:da:
08:bc:ea:5f:ab:fd:e0:dd:e5:b7:a6:4e:08:e3:0c:
9d:76:c3:18:e6:61:26:5d:b7:a6:33:7f:a2:41:34:
84:84:3c:cd:3f:9c:3c:9b:4d:45:8f:19:79:32:4c:
97:fa:ca:c6:e4:d5:50:95:a1:9e:57:26:31:40:8d:
84:cf:69:e4:4a:c9:99:ae:1e:17:d1:31:b7:d1:c5:
61:1d:ef:45:1f:3a:db:6d:2b:f6:40:ff:5d:0f:6f:
9c:24:26:6c:3a:0e:3b:7c:78:e7:f2:bc:be:bd:a4:
de:a2:98:f9:7d:e5:80:b5:d9:69:d9:06:d6:5a:99:
c4:af:22:04:04:20:b8:53:0d:37:3b:1f:64:bf:c2:
55:49:e7:3b:ae:2e:30:ca:b5:ca:da:19:b9:2e:e9:
da:9f:ad:af:f6:df:87:1f:cf:0f:6b:7e:a2:37:a6:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AF:03:6E:33:31:01:C5:4A:5B:9B:85:AB:AF:05:6C:8D:4D:85:FD
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2ca0::/44
Signature Algorithm: sha256WithRSAEncryption
b5:fe:f3:4a:f1:cd:5f:1d:7e:68:82:0b:86:94:5b:b7:cd:75:
83:96:3a:2d:09:4c:33:dd:cf:ac:6b:e7:91:80:4d:b4:ff:c9:
b6:d9:07:9b:b9:14:e9:f7:36:15:24:4e:cc:4e:f5:65:ed:47:
2f:64:fc:39:df:bb:70:98:a4:a7:1d:f8:fe:c4:81:ea:10:31:
72:9e:58:9d:db:ad:a3:92:0b:d0:68:b1:69:f1:c3:e8:25:e3:
9b:63:8c:30:fd:18:e9:8e:18:b7:25:d1:30:80:cc:40:47:2b:
c2:2e:c4:24:35:14:f2:0f:85:87:b5:fa:37:8c:2b:71:b2:45:
a7:c4:03:92:1b:31:e5:58:db:e7:63:44:fe:ef:7b:30:15:de:
fc:8e:94:f5:1b:db:24:5e:e6:ed:61:8c:6f:f8:d3:c5:30:07:
62:a5:08:68:03:9b:60:d1:87:b1:e2:49:d1:35:31:19:fe:37:
fc:27:1d:eb:ad:15:34:89:0f:99:b3:d9:17:76:3a:a5:5d:f2:
d5:48:6b:c4:5e:9b:d2:d7:57:ac:5f:4b:84:9d:52:05:c2:56:
51:b3:aa:a9:1e:b3:94:d1:a9:4a:15:12:1e:9c:e9:62:b4:4d:
e2:82:f7:a3:5d:08:60:64:7a:df:83:e9:89:9d:fb:c4:07:8a:
8f:f5:15:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:25 2025 by rpki-client