Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: nKx+pMRI5qJZ5wr+u9HQxjJE+DSmTybqRDx+E4DNR2o=
Subject key identifier: DE:01:C6:4C:11:6F:9A:13:22:5F:09:33:8C:80:66:7B:AB:76:DA:AD
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 2CA49C47B47FFFBC880BBB4DBB620C448BF64255
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7029.roa
Signing time: Tue 04 Mar 2025 14:11:16 +0000
ROA not before: Tue 04 Mar 2025 14:06:16 +0000
ROA not after: Tue 03 Mar 2026 14:11:16 +0000
asID: 7029
IP address blocks: 157.254.11.0/24 maxlen: 24
157.254.13.0/24 maxlen: 24
157.254.180.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a4:9c:47:b4:7f:ff:bc:88:0b:bb:4d:bb:62:0c:44:8b:f6:42:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 4 14:06:16 2025 GMT
Not After : Mar 3 14:11:16 2026 GMT
Subject: CN=DE01C64C116F9A13225F09338C80667BAB76DAAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:3b:0d:5e:c4:5f:06:33:c8:41:a9:ba:72:
dc:7a:db:b4:74:42:3e:77:eb:1b:a6:8c:76:b0:42:
51:d5:5b:be:9b:e8:f7:b3:f0:e0:14:0e:62:82:f2:
c9:2d:ba:b0:0a:7b:1c:08:00:5b:ef:c1:36:63:bb:
29:d0:e0:4d:50:ce:9e:f5:6b:02:93:03:4c:9b:e6:
11:7e:1e:93:b7:ac:0f:78:fb:e1:8b:54:80:67:8c:
e1:f4:aa:17:d4:f0:e7:93:df:4d:ab:f6:02:2f:59:
92:28:8c:7f:52:7a:35:44:c3:32:43:70:0f:74:ca:
30:35:93:6c:3d:60:c5:2a:cb:21:55:5d:1d:fd:93:
0b:21:49:59:cd:82:30:76:1e:95:db:ce:1e:40:2f:
be:96:3c:1f:ad:18:f5:c7:53:9e:64:02:9a:2e:ac:
ec:9e:66:50:96:9a:cf:2b:b3:4a:bd:bd:29:51:80:
90:90:98:b1:93:68:ab:29:1c:40:7c:98:fe:6e:44:
ca:f4:17:1b:8d:91:79:6b:aa:5e:45:ba:32:9c:5a:
b1:56:7b:31:c4:08:0d:20:8d:2c:3d:44:4f:c8:34:
e9:1c:42:75:82:3c:ec:bd:f7:01:57:ae:fe:54:89:
a3:a8:c4:0a:4a:88:fa:4d:37:61:f3:b7:72:0b:8d:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:01:C6:4C:11:6F:9A:13:22:5F:09:33:8C:80:66:7B:AB:76:DA:AD
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.11.0/24
157.254.13.0/24
157.254.180.0/23
Signature Algorithm: sha256WithRSAEncryption
28:98:36:66:dc:f0:25:cf:e4:73:b6:2b:27:75:38:1a:34:6a:
c3:44:93:56:ff:2a:69:78:9b:6f:6d:25:12:25:9a:e1:91:49:
9d:47:a5:f8:3f:6a:2d:c1:78:24:56:69:e1:b4:ef:37:83:2a:
8e:5f:30:1d:f2:1c:ec:9e:87:8f:63:9e:f8:9a:5f:ff:59:e3:
62:67:16:1a:a5:2a:0c:f1:2b:39:ea:89:e4:1b:10:a2:ed:0d:
86:a0:26:b2:7a:52:72:74:53:41:ea:aa:87:a1:fb:ee:5d:be:
02:e8:8e:40:4a:57:71:53:b3:83:36:74:b6:73:d3:f4:e2:1d:
0e:f4:1b:54:83:7d:43:8c:56:65:2d:8d:d7:85:38:29:4a:50:
d1:28:0d:99:c3:7b:06:64:f1:13:a3:69:9d:be:b5:d1:1a:c3:
8c:aa:be:5e:79:1e:6c:e9:f5:d9:33:5d:9f:77:8f:38:82:81:
28:f8:3c:97:77:34:13:f4:d7:3a:2b:2e:f9:9d:2e:cd:10:cf:
82:59:e5:fb:98:f5:1c:13:3a:34:c2:ad:f3:56:65:2f:13:08:
aa:71:2c:55:19:90:98:8f:91:09:81:b4:52:0f:c6:b0:05:e0:
eb:ee:67:0b:3e:d4:1e:fa:2c:8f:69:7c:d1:ae:6d:e5:f3:7d:
67:05:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net