Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200879.roa
File: AS200879.roa (raw, json)
Hash identifier: 3brVRqAhOqwflNjC0vt3POA4bnyZfqFWd6SLOoQDDKc=
Subject key identifier: 78:BC:AE:AD:87:31:F3:09:B8:DF:CD:0B:7B:E9:A2:2D:CC:FC:47:C6
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4D861663FC7F72DCFB7273DC0555254C0CAF58F5
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200879.roa
Signing time: Wed 08 Jan 2025 12:40:16 +0000
ROA not before: Wed 08 Jan 2025 12:35:16 +0000
ROA not after: Wed 07 Jan 2026 12:40:16 +0000
asID: 200879
IP address blocks: 2a06:a005:b6a::/48 maxlen: 48
2a06:a005:1d51::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:86:16:63:fc:7f:72:dc:fb:72:73:dc:05:55:25:4c:0c:af:58:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 8 12:35:16 2025 GMT
Not After : Jan 7 12:40:16 2026 GMT
Subject: CN=78BCAEAD8731F309B8DFCD0B7BE9A22DCCFC47C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:a2:10:78:01:49:5c:79:66:ba:3a:d8:ed:
67:8c:b5:d1:35:25:0a:8c:b7:f6:97:2f:a5:b3:ef:
42:8c:48:35:03:62:5b:51:e8:99:00:92:cd:c2:78:
7b:b3:2a:20:0c:d6:9b:69:21:37:14:95:66:9f:7b:
42:d5:2d:7f:a2:a6:c0:b0:fc:64:7c:40:5a:7a:7c:
59:7f:e4:f5:14:61:41:8f:82:fe:6c:7f:96:a7:d0:
a4:97:3c:c2:70:66:77:7a:b0:66:62:47:5d:d9:2f:
09:26:c7:af:68:64:d8:64:df:b7:32:62:22:72:bf:
2f:14:41:81:16:27:a5:6f:3c:95:42:ad:1d:b6:b8:
d0:bd:9a:ee:63:c3:da:2d:39:06:5a:2c:e0:0e:b6:
0b:45:9b:4b:73:7c:7e:4d:4d:d9:3a:ce:ec:ae:61:
62:ff:d3:3d:2b:22:2c:9a:66:a8:59:aa:aa:77:29:
9a:e9:2c:23:5b:2b:26:3e:11:9e:7d:28:07:c7:97:
55:70:bc:1b:3e:28:96:45:1c:de:32:44:4b:fa:46:
f7:79:b6:e1:36:9b:b5:8c:89:60:42:38:4c:2a:5d:
ae:6b:d1:e2:58:06:48:58:9c:bf:58:a8:e7:06:5d:
50:cb:60:2b:dc:90:74:fa:0c:17:c3:c9:62:2a:c4:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BC:AE:AD:87:31:F3:09:B8:DF:CD:0B:7B:E9:A2:2D:CC:FC:47:C6
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200879.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b6a::/48
2a06:a005:1d51::/48
Signature Algorithm: sha256WithRSAEncryption
42:27:8b:b5:35:dd:a5:45:c3:1b:17:e3:d7:a7:c6:28:c4:ba:
c3:a7:12:a6:b6:2e:95:45:6e:ae:a2:cc:26:b2:b3:9b:1f:14:
a7:0b:79:de:ca:77:a2:9f:05:93:99:bf:b2:3b:ad:6c:4e:71:
31:88:58:20:78:f4:70:7f:3e:0e:73:48:f0:90:7b:1a:90:0c:
aa:26:06:67:61:1e:17:15:ec:2e:4b:cf:b5:69:40:8b:5c:ff:
82:e5:8f:c4:36:99:3d:5e:df:0e:8a:8f:85:29:02:0c:55:76:
a2:74:82:ec:57:84:3a:85:b9:6b:49:c9:82:cb:a0:19:b7:6e:
56:10:32:9e:ab:d1:cd:da:4a:e0:80:d4:b2:95:a1:bb:07:8a:
1f:64:63:bd:a7:79:a5:c0:0f:59:61:5f:af:91:91:99:bc:8e:
5a:ed:44:c8:f3:f3:d0:e6:1f:1b:5e:63:d5:e2:85:90:a9:53:
b5:c5:d6:c0:9d:97:04:58:f9:c1:3c:29:f1:81:26:60:a5:53:
c1:92:d8:41:10:33:b4:b7:ee:96:91:1f:06:c4:c7:33:2d:f4:
1e:49:75:2a:30:17:41:56:bf:5a:bf:91:10:2d:9c:e2:81:51:
eb:82:96:31:a5:0e:bf:df:ee:f8:74:c3:bc:97:03:49:f8:42:
cb:b5:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:27 2025 by rpki-client