Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS7029.roa
File: AS7029.roa (raw, json)
Hash identifier: 3I6Kkvhw3BKlddzTzyp6swNP5kvytNGcWekNzhEXfBQ=
Subject key identifier: 3E:5A:29:EB:52:76:84:3B:14:03:C3:00:BF:54:34:E0:E3:C8:FB:95
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7959011FE7E12B2E6B652E5359C9FF9866C37D77
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS7029.roa
Signing time: Wed 12 Mar 2025 20:21:37 +0000
ROA not before: Wed 12 Mar 2025 20:16:37 +0000
ROA not after: Wed 11 Mar 2026 20:21:37 +0000
asID: 7029
IP address blocks: 2a06:9f42::/32 maxlen: 48
2a09:54c4::/32 maxlen: 48
2a0a:6046::/32 maxlen: 48
2a0d:d904::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:59:01:1f:e7:e1:2b:2e:6b:65:2e:53:59:c9:ff:98:66:c3:7d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Mar 12 20:16:37 2025 GMT
Not After : Mar 11 20:21:37 2026 GMT
Subject: CN=3E5A29EB5276843B1403C300BF5434E0E3C8FB95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:21:78:03:48:2b:4b:6b:ca:09:5a:94:d9:
33:27:7a:a8:67:13:c7:53:46:4c:1e:24:15:e0:a0:
72:7e:c9:e9:dd:c3:bd:9b:1d:f0:35:96:88:6a:c0:
c4:50:b7:8e:83:48:94:40:15:1b:ae:2f:36:aa:a7:
8c:e0:dd:a4:67:bf:5d:98:7e:a5:83:8d:26:73:46:
9d:8a:a1:11:ab:b8:f9:dd:81:86:a4:28:81:43:5e:
d9:32:63:56:82:7b:18:fc:6c:18:40:ef:b0:bc:c8:
ee:cc:33:05:84:75:f3:3b:c2:6d:fd:c1:35:b8:b8:
10:26:c2:81:df:e8:c2:19:e7:f6:e2:35:46:1b:2a:
18:0f:4d:58:1e:6e:1e:99:88:3c:da:81:bc:bd:f0:
57:1d:e5:61:9e:d6:95:a0:75:61:4a:af:30:28:66:
93:c7:34:90:55:00:0b:88:f6:46:a9:b9:be:e3:42:
12:a5:43:e4:d6:ea:9a:cb:7f:aa:a3:d2:9f:5c:ff:
9d:09:cb:50:de:34:86:89:12:b0:b2:1e:67:8c:86:
3c:a1:49:5f:5b:1f:d2:c9:04:d9:5f:73:f0:56:d4:
9a:95:6b:ff:35:6b:95:06:07:50:a5:a1:bd:ec:f8:
6f:ff:5c:a3:fb:aa:4c:4f:c3:0c:11:d2:31:72:0c:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5A:29:EB:52:76:84:3B:14:03:C3:00:BF:54:34:E0:E3:C8:FB:95
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS7029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f42::/32
2a09:54c4::/32
2a0a:6046::/32
2a0d:d904::/32
Signature Algorithm: sha256WithRSAEncryption
3d:b8:b5:18:12:65:73:a3:69:6d:e3:32:64:d4:3e:aa:a0:39:
89:94:03:54:a2:60:04:f2:00:39:29:e4:d1:c7:33:2a:2e:d6:
f1:78:4b:f4:0a:cd:20:02:b2:ee:34:e4:38:76:f0:c8:13:95:
3e:3a:c6:70:7e:86:1d:ce:7f:de:08:cd:a6:81:1e:c4:f3:e0:
2b:c9:c9:12:e7:f1:17:e5:17:2a:51:b9:0e:d3:8c:39:c2:a5:
99:3e:51:99:79:b1:6b:43:a2:e8:0e:5d:ab:88:05:8f:e1:45:
df:c4:2e:c0:c1:36:01:e2:de:67:e2:1b:e4:fa:3d:06:4c:84:
c6:32:36:cc:2b:03:40:ea:11:be:ce:bd:9a:92:cd:cf:85:3f:
eb:40:de:25:77:4d:28:5a:8e:66:71:39:27:c6:ca:0b:5c:24:
cb:80:ca:4f:7a:87:4f:53:cd:2d:a0:a6:0e:2b:c7:86:73:dd:
44:b1:af:16:58:92:60:a1:a8:b1:aa:5d:33:42:9f:bc:48:6a:
fd:c7:9b:35:6f:44:9a:70:d5:d4:e1:4c:3f:14:e6:93:6e:c7:
e1:7f:ca:5f:db:93:21:1e:00:87:0e:8c:b2:e1:60:34:52:ac:
ed:b6:21:97:dd:ce:56:e9:e0:13:42:69:18:f5:f3:ec:78:eb:
cf:68:a3:df
-----BEGIN CERTIFICATE-----
MIIE+TCCA+GgAwIBAgIUeVkBH+fhKy5rZS5TWcn/mGbDfXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTAzMTIyMDE2MzdaFw0yNjAzMTEyMDIxMzdaMDMxMTAvBgNV
BAMTKDNFNUEyOUVCNTI3Njg0M0IxNDAzQzMwMEJGNTQzNEUwRTNDOEZCOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmyF4A0grS2vKCVqU2TMneqhn
E8dTRkweJBXgoHJ+yendw72bHfA1lohqwMRQt46DSJRAFRuuLzaqp4zg3aRnv12Y
fqWDjSZzRp2KoRGruPndgYakKIFDXtkyY1aCexj8bBhA77C8yO7MMwWEdfM7wm39
wTW4uBAmwoHf6MIZ5/biNUYbKhgPTVgebh6ZiDzagby98Fcd5WGe1pWgdWFKrzAo
ZpPHNJBVAAuI9kapub7jQhKlQ+TW6prLf6qj0p9c/50Jy1DeNIaJErCyHmeMhjyh
SV9bH9LJBNlfc/BW1JqVa/81a5UGB1Clob3s+G//XKP7qkxPwwwR0jFyDPjlAgMB
AAGjggIDMIIB/zAdBgNVHQ4EFgQUPlop61J2hDsUA8MAv1Q04OPI+5UwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBuBggrBgEF
BQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
NzAyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1BggrBgEFBQcBBwEB
/wQmMCQwIgQCAAIwHAMFACoGn0IDBQAqCVTEAwUAKgpgRgMFACoN2QQwDQYJKoZI
hvcNAQELBQADggEBAD24tRgSZXOjaW3jMmTUPqqgOYmUA1SiYATyADkp5NHHMyou
1vF4S/QKzSACsu405Dh28MgTlT46xnB+hh3Of94IzaaBHsTz4CvJyRLn8RflFypR
uQ7TjDnCpZk+UZl5sWtDougOXauIBY/hRd/ELsDBNgHi3mfiG+T6PQZMhMYyNswr
A0DqEb7OvZqSzc+FP+tA3iV3TShajmZxOSfGygtcJMuAyk96h09TzS2gpg4rx4Zz
3USxrxZYkmChqLGqXTNCn7xIav3HmzVvRJpw1dThTD8U5pNux+F/yl/bkyEeAIcO
jLLhYDRSrO22IZfdzlbp4BNCaRj18+x4689oo98=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:39:26 2025 by rpki-client