Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38392e302f32342d3234203d3e20393234.roa
File: 32332e3133342e38392e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier: S4OGY2kPzvAsypC4NFQvPeb5Ny3PFp+s65XhBsvmuXY=
Subject key identifier: FB:7E:4D:52:44:81:43:B5:41:8E:58:8B:7C:F2:8F:BD:AD:93:09:20
Certificate issuer: /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial: 6D8194595C8F487C8055E901093F417E400CC96E
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38392e302f32342d3234203d3e20393234.roa
Signing time: Wed 24 Sep 2025 23:08:55 +0000
ROA not before: Wed 24 Sep 2025 23:03:55 +0000
ROA not after: Wed 23 Sep 2026 23:08:55 +0000
asID: 924
IP address blocks: 23.134.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:81:94:59:5c:8f:48:7c:80:55:e9:01:09:3f:41:7e:40:0c:c9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Validity
Not Before: Sep 24 23:03:55 2025 GMT
Not After : Sep 23 23:08:55 2026 GMT
Subject: CN=FB7E4D52448143B5418E588B7CF28FBDAD930920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:61:7a:9f:6b:c8:95:b4:bc:c9:03:4b:db:1b:
07:f6:98:53:f0:b8:f9:c4:e0:d0:7b:31:b1:c3:15:
52:e4:14:b4:4c:28:f6:a4:e3:0e:5c:df:e8:d0:68:
79:6f:57:9e:e6:6d:20:a5:3d:a5:b0:bb:7c:c3:c2:
43:41:88:df:ca:16:b2:25:48:42:62:6e:23:a1:5e:
b6:cd:47:47:a2:57:fa:6c:3e:77:54:3d:6f:fb:47:
0d:bc:e1:01:d6:53:8c:4d:bc:08:a9:6b:21:6d:0a:
d7:95:39:49:70:0f:72:9d:15:bd:db:43:6c:5d:99:
36:ea:67:88:51:b5:f0:2d:b1:03:83:6c:26:88:3c:
f8:70:3c:85:2c:ea:90:21:8b:64:67:54:7f:45:7f:
ff:76:a5:a0:cb:6a:cb:77:a3:33:b2:4c:2c:2d:52:
cd:5a:56:ff:d9:43:42:6b:cf:d3:5d:42:63:18:de:
f7:ad:f5:94:be:2a:df:e4:b9:40:60:fe:e0:d6:20:
3f:1e:5b:b6:1d:c7:38:27:d5:1a:90:c6:0a:78:f1:
96:dc:0f:74:98:68:d8:f3:cf:9f:02:cd:1f:58:83:
a2:c4:9d:a9:32:02:57:e6:d5:a8:f4:69:27:2a:e9:
4e:64:35:07:e6:8b:39:7a:ce:a4:5f:30:32:36:9f:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:4D:52:44:81:43:B5:41:8E:58:8B:7C:F2:8F:BD:AD:93:09:20
X509v3 Authority Key Identifier:
keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38392e302f32342d3234203d3e20393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.134.89.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:af:b0:34:45:3c:f3:da:c7:1d:00:19:fc:d3:5e:53:08:eb:
37:ea:0f:47:e7:24:71:bc:6b:05:1d:25:29:5d:2e:89:43:2e:
85:3e:dc:a1:17:cc:82:4b:ce:b0:f5:f7:e3:39:28:0b:95:9a:
d7:45:94:d7:61:2b:d4:68:d3:ed:2d:42:6a:6b:ad:c6:6c:f0:
1f:87:78:bd:2f:75:63:ab:04:f6:e9:2a:03:d9:17:68:18:72:
7a:6a:4e:e4:ae:22:81:49:a1:4f:e4:98:3a:93:57:b1:1d:cd:
ab:63:c4:86:2c:3c:65:65:45:c6:18:ca:ae:c1:20:77:0a:85:
6b:f6:2d:65:7a:ba:34:ef:df:da:f9:7c:1a:f4:a4:80:19:11:
5d:9f:0e:fb:d8:a8:c5:4b:4d:a5:09:ef:97:69:cb:9c:6a:64:
f2:6a:e6:72:be:44:cf:25:80:f4:f8:3b:b9:74:54:25:4d:cc:
e0:0e:ba:fd:df:e5:8b:de:eb:f8:f3:6e:a1:db:fd:83:83:25:
30:11:03:49:bd:34:37:b2:5e:87:02:37:2f:49:2f:34:e4:0a:
a7:cd:cb:35:01:a1:33:b3:23:f4:1f:a1:5c:2e:17:f3:90:34:
0c:e3:0c:01:85:ed:ee:81:71:85:b2:e0:88:40:c2:19:a9:af:
42:1a:c8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:02:33 2025 by rpki-client