Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3931303a3a2f34342d3438203d3e20313337343039.roa
File: 323630323a666166643a3931303a3a2f34342d3438203d3e20313337343039.roa (raw, json)
Hash identifier: UPW79Skpx0AXBgGlr+ykVj9ipU3hATD5OaokuNcSgck=
Subject key identifier: 2D:63:9D:E1:7A:3B:A4:05:EB:BE:0D:AB:FB:CB:8C:CE:AD:59:C4:E8
Certificate issuer: /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial: 03BDC7605D2964C70296B0D8B1DE0EA8D95050FD
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3931303a3a2f34342d3438203d3e20313337343039.roa
Signing time: Tue 04 Feb 2025 22:45:50 +0000
ROA not before: Tue 04 Feb 2025 22:40:50 +0000
ROA not after: Tue 03 Feb 2026 22:45:50 +0000
asID: 137409
IP address blocks: 2602:fafd:910::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:bd:c7:60:5d:29:64:c7:02:96:b0:d8:b1:de:0e:a8:d9:50:50:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Validity
Not Before: Feb 4 22:40:50 2025 GMT
Not After : Feb 3 22:45:50 2026 GMT
Subject: CN=2D639DE17A3BA405EBBE0DABFBCB8CCEAD59C4E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:1d:b0:7e:79:62:bd:d9:71:65:99:70:84:
43:e1:3f:8e:bb:3b:87:c5:dd:0f:b3:5b:f6:f6:e6:
25:85:88:fb:e4:e1:33:fa:da:61:d0:37:3d:79:c5:
77:cf:1f:cb:a4:fd:66:88:1b:50:ef:67:b1:94:7e:
d0:c6:a0:ff:56:d3:3e:4e:f7:3b:9e:5e:fa:b3:12:
9a:ed:97:b4:5c:5b:dd:64:fd:89:ab:fd:9f:c6:81:
36:18:f8:b8:ee:23:38:f1:9a:82:29:58:da:2d:5a:
ed:bf:da:98:fb:0f:eb:75:b8:e0:3d:54:d7:74:dc:
ae:62:af:b1:98:c9:c3:e4:03:b1:27:f2:e4:11:9e:
9d:7b:96:28:13:06:09:7e:32:e3:95:79:25:3a:55:
ee:77:f8:85:82:06:8a:35:77:65:a2:af:ca:46:12:
4a:11:b5:4b:95:43:35:37:ce:96:c7:4e:af:ea:bb:
89:70:22:33:e1:c1:16:c2:5c:ad:ba:dd:dc:c0:b5:
f2:0b:b1:3a:da:9c:3d:13:61:9f:87:59:96:e2:73:
64:2c:6e:58:a7:99:4d:7e:f1:d7:0a:f9:f3:34:d4:
94:af:1a:8e:25:e9:0e:38:24:46:6a:f5:6b:53:53:
0d:68:ee:66:72:ba:ba:42:62:a5:f0:0a:7f:3d:52:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:63:9D:E1:7A:3B:A4:05:EB:BE:0D:AB:FB:CB:8C:CE:AD:59:C4:E8
X509v3 Authority Key Identifier:
keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a3931303a3a2f34342d3438203d3e20313337343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fafd:910::/44
Signature Algorithm: sha256WithRSAEncryption
40:b0:ba:44:b7:39:7b:90:9f:c7:9b:cf:f3:ea:d6:b0:ed:4d:
d2:e2:ef:7b:28:db:25:aa:3d:78:ce:a2:f1:8d:fb:2e:67:9c:
f8:3e:92:45:90:8c:f4:0a:b9:f2:1a:e0:4a:0f:76:c1:a1:df:
59:c2:fe:de:a2:d7:fd:7e:77:fb:1c:78:f0:8a:ea:c8:a6:de:
ce:46:c5:fb:c6:90:2a:e9:49:38:a1:41:15:c0:b5:bc:4e:90:
5a:2c:ab:40:1a:62:53:88:7b:1f:26:25:cb:c3:2b:8d:7e:50:
4b:fc:b0:83:1b:63:c6:36:5f:0d:ca:aa:79:f9:4b:58:eb:77:
ed:60:e6:c8:dc:c4:03:b8:0a:35:5e:70:76:11:71:81:22:a8:
bf:b1:da:65:ab:c8:b6:a9:24:2d:96:ba:6c:f3:bc:c9:6a:49:
1a:e1:0c:b9:6a:64:38:7b:e7:29:28:88:6f:79:1c:09:58:01:
b4:92:50:31:dd:bc:5f:1d:ca:84:37:b7:c4:36:89:c4:57:d7:
a0:58:db:21:28:0d:65:ee:76:86:35:22:ac:42:dd:fa:d2:52:
21:d7:60:6f:5a:15:5d:2f:cc:af:98:38:65:62:3b:f4:c3:66:
17:b0:b8:19:ea:b8:f5:01:b6:6c:69:85:3c:90:d5:5f:f9:3d:
7c:83:95:e5
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUA73HYF0pZMcClrDYsd4OqNlQUP0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjUwMjA0MjI0MDUwWhcNMjYwMjAzMjI0NTUw
WjAzMTEwLwYDVQQDEygyRDYzOURFMTdBM0JBNDA1RUJCRTBEQUJGQkNCOENDRUFE
NTlDNEU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVgdsH55Yr3Z
cWWZcIRD4T+OuzuHxd0Ps1v29uYlhYj75OEz+tph0Dc9ecV3zx/LpP1miBtQ72ex
lH7QxqD/VtM+Tvc7nl76sxKa7Ze0XFvdZP2Jq/2fxoE2GPi47iM48ZqCKVjaLVrt
v9qY+w/rdbjgPVTXdNyuYq+xmMnD5AOxJ/LkEZ6de5YoEwYJfjLjlXklOlXud/iF
ggaKNXdloq/KRhJKEbVLlUM1N86Wx06v6ruJcCIz4cEWwlytut3cwLXyC7E62pw9
E2Gfh1mW4nNkLG5Yp5lNfvHXCvnzNNSUrxqOJekOOCRGavVrU1MNaO5mcrq6QmKl
8Ap/PVJ9JwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFC1jneF6O6QF674Nq/vLjM6t
WcToMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCB
gAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzEvMzIzNjMwMzIzYTY2NjE2NjY0M2EzOTMxMzAzYTNhMmYz
NDM0MmQzNDM4MjAzZDNlMjAzMTMzMzczNDMwMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvr9CRAw
DQYJKoZIhvcNAQELBQADggEBAECwukS3OXuQn8ebz/Pq1rDtTdLi73so2yWqPXjO
ovGN+y5nnPg+kkWQjPQKufIa4EoPdsGh31nC/t6i1/1+d/scePCK6sim3s5GxfvG
kCrpSTihQRXAtbxOkFosq0AaYlOIex8mJcvDK41+UEv8sIMbY8Y2Xw3Kqnn5S1jr
d+1g5sjcxAO4CjVecHYRcYEiqL+x2mWryLapJC2WumzzvMlqSRrhDLlqZDh75yko
iG95HAlYAbSSUDHdvF8dyoQ3t8Q2icRX16BY2yEoDWXudoY1IqxC3frSUiHXYG9a
FV0vzK+YOGViO/TDZhewuBnquPUBtmxphTyQ1V/5PXyDleU=
-----END CERTIFICATE-----
Generated at Thu Apr 10 20:18:34 2025 by rpki-client