Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44406.roa
File: AS44406.roa (raw, json)
Hash identifier: xRTuHtBWGci8FAfjYins/GL+9/bp1NcwDfcwmKOb8hE=
Subject key identifier: F0:58:B1:0D:A7:F5:F3:6A:B5:56:AC:08:97:F4:67:A5:BE:17:08:31
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 43B46434F0580D723A8099EB0921282677944E34
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44406.roa
Signing time: Fri 13 Dec 2024 02:56:29 +0000
ROA not before: Fri 13 Dec 2024 02:51:29 +0000
ROA not after: Fri 12 Dec 2025 02:56:29 +0000
asID: 44406
IP address blocks: 2a06:a005:740::/44 maxlen: 48
2a06:a005:760::/44 maxlen: 48
2a06:a005:780::/44 maxlen: 48
2a06:a005:1e70::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b4:64:34:f0:58:0d:72:3a:80:99:eb:09:21:28:26:77:94:4e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:29 2024 GMT
Not After : Dec 12 02:56:29 2025 GMT
Subject: CN=F058B10DA7F5F36AB556AC0897F467A5BE170831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a1:46:d6:1d:bc:a5:96:1d:22:16:f1:42:a6:
4e:06:7e:9b:1b:3e:e4:50:11:63:07:73:34:38:a5:
6e:96:33:d7:d0:eb:f4:cd:57:d5:f6:af:b3:5c:58:
96:e3:3c:d0:64:6e:2e:92:4c:a5:ef:67:50:6b:f2:
91:05:8a:ad:90:90:9c:aa:f6:95:4c:37:25:16:6d:
72:0d:71:cd:eb:85:00:ea:2d:6e:d4:ef:fb:93:9d:
81:91:77:1f:33:9d:3b:0f:e5:15:bc:31:d8:5d:70:
b6:55:91:76:62:c5:7b:cc:c8:3b:43:e8:73:cd:e7:
b0:64:6a:a1:c4:49:7f:66:c0:fc:9d:7e:5e:a9:aa:
7c:9f:1e:19:bc:38:a9:68:8c:7b:7d:5f:73:d7:8c:
87:81:1e:96:a0:3b:16:9d:11:a4:c5:36:16:4f:79:
dd:54:b8:90:14:13:cb:26:e8:59:c2:7e:e8:09:96:
40:b7:a8:8d:ec:bb:a8:0e:21:16:89:5f:28:bd:2c:
aa:4b:e9:48:19:bd:ac:e7:91:0d:4e:1c:09:02:df:
8c:07:ca:18:6d:ec:b8:cf:5a:11:6e:64:78:02:3f:
e2:f6:03:bc:23:99:fd:1c:ab:2e:51:8a:20:28:91:
00:c6:12:a3:3d:07:d9:a6:ef:a7:95:7d:c6:02:ff:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:58:B1:0D:A7:F5:F3:6A:B5:56:AC:08:97:F4:67:A5:BE:17:08:31
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:740::/44
2a06:a005:760::/44
2a06:a005:780::/44
2a06:a005:1e70::/44
Signature Algorithm: sha256WithRSAEncryption
4f:cb:b2:39:f5:87:37:b6:80:25:1d:8c:9f:a6:a1:2b:f2:6c:
6b:f6:19:2d:16:e5:f2:4a:8c:fc:dd:eb:ce:e4:a8:2d:79:c2:
0a:ac:2c:a2:b6:64:1d:bd:5b:28:65:80:5f:32:55:97:85:59:
b1:f4:33:53:65:a8:23:a9:d3:da:56:ed:1f:f9:f4:7b:bf:60:
df:f3:87:99:c4:00:e5:a9:4f:67:60:cb:d9:cb:a6:c5:44:8b:
8a:35:94:e4:cf:90:59:26:ce:f3:e1:03:31:88:1a:57:08:9a:
c1:30:42:71:3c:45:39:35:c6:c9:66:23:00:c0:51:8c:72:6e:
5f:6e:75:c0:ea:96:15:a4:e3:c9:5e:2e:65:f2:80:cf:39:c8:
cd:82:0f:17:4b:14:19:eb:9a:72:50:84:ad:e9:dc:5a:c2:bc:
a8:84:1d:c4:6d:af:0c:02:90:8f:17:d4:8b:56:2a:41:c2:40:
f4:22:9a:30:cf:1a:9f:89:03:2c:04:2d:f6:ef:d1:00:6a:bf:
4b:9f:8d:15:a5:7f:35:8e:1c:3e:05:ac:06:1d:81:eb:36:85:
20:d5:11:92:74:ff:e0:88:1a:07:40:3e:80:00:86:31:4d:5a:
18:f7:ae:09:b2:5d:5a:37:41:37:e8:7f:2c:f4:a4:47:6c:99:
25:a4:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:19 2025 by rpki-client