Route Origin Authorization
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31382e302f32332d3234203d3e20343030333034.roa
File: 3136322e3232322e31382e302f32332d3234203d3e20343030333034.roa (raw, json)
Hash identifier: AImc+U1IBxUTJCjdlAODHCX2TXwdbh5CLu3GlxypCtg=
Subject key identifier: D3:7E:31:6F:33:79:00:91:E9:C1:D2:36:93:95:F5:E7:7B:DD:58:04
Certificate issuer: /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial: 03AD728470FFC8902ABF434DDF8F036301D745A7
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31382e302f32332d3234203d3e20343030333034.roa
Signing time: Wed 22 Oct 2025 02:12:03 +0000
ROA not before: Wed 22 Oct 2025 02:07:03 +0000
ROA not after: Wed 21 Oct 2026 02:12:03 +0000
asID: 400304
IP address blocks: 162.222.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ad:72:84:70:ff:c8:90:2a:bf:43:4d:df:8f:03:63:01:d7:45:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Validity
Not Before: Oct 22 02:07:03 2025 GMT
Not After : Oct 21 02:12:03 2026 GMT
Subject: CN=D37E316F33790091E9C1D2369395F5E77BDD5804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:56:c8:3f:85:c4:39:c8:77:39:5e:d3:db:
84:95:7f:0e:8f:6f:9b:0d:26:c7:90:ee:e4:20:23:
7c:08:bc:0f:e7:ee:57:a4:55:a8:99:55:c3:ec:35:
bd:8b:42:46:bb:de:66:86:11:d7:3d:7b:f2:49:48:
f1:12:cd:8c:f5:14:4a:15:f4:c3:f8:52:13:97:8b:
eb:94:8d:26:7d:b0:9c:91:2f:15:e3:2c:b1:97:99:
21:bd:e9:30:72:b8:aa:98:c2:9c:bb:f3:9a:64:35:
8e:09:02:14:22:24:5d:3f:13:b7:72:65:f2:8a:5d:
ca:9c:a7:f5:9f:0a:63:da:74:df:fe:5d:49:6f:d0:
1e:c0:2f:b0:a6:46:f1:d7:8f:55:98:ca:66:47:87:
13:e2:c7:e4:60:a6:1b:b2:c9:6b:49:8c:57:e7:35:
8e:fa:aa:54:2b:86:4e:2f:8e:e4:b2:c1:15:ba:fc:
e6:90:56:56:19:d3:57:d9:07:79:a3:dc:39:94:39:
5c:03:3f:bb:62:2d:d0:78:a5:cd:f8:47:f3:68:6c:
9d:c2:47:9f:10:d1:6e:f3:3f:a3:b6:35:54:9c:a3:
5d:2a:07:9e:b1:d5:c3:52:bc:d0:8c:d3:90:8e:29:
0f:c6:66:d9:58:6c:2c:b3:0b:38:1a:fb:b6:99:c9:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7E:31:6F:33:79:00:91:E9:C1:D2:36:93:95:F5:E7:7B:DD:58:04
X509v3 Authority Key Identifier:
keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/3136322e3232322e31382e302f32332d3234203d3e20343030333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.222.18.0/23
Signature Algorithm: sha256WithRSAEncryption
21:a7:8e:8b:4e:5a:8f:f6:cd:04:17:f9:ad:23:5f:b6:07:08:
4c:50:f4:35:e4:e1:4a:3f:6f:40:dc:ab:90:b1:ac:e4:20:e3:
c9:2c:ad:c5:18:30:19:1a:89:93:5e:4f:80:91:4f:4c:b6:9b:
f0:b3:f7:d9:b4:bf:ba:8d:67:fa:18:a6:fa:be:b5:24:05:31:
0e:28:3f:54:bd:7d:01:b2:bb:3b:22:3a:dd:32:f7:3f:2e:39:
8f:64:a5:d0:4f:4f:18:e0:46:59:d3:5c:9d:04:fb:6f:fd:cf:
95:98:c3:57:21:54:b2:44:af:84:02:47:ab:0f:0c:60:31:04:
16:f9:7e:01:70:ac:30:9c:b3:5e:d4:0c:c2:43:d2:d6:96:78:
71:e7:93:c7:de:ae:e8:eb:9f:60:e8:72:b3:20:72:4f:1a:31:
5a:2e:2f:1d:9f:ae:95:15:9b:8a:6d:e5:3d:80:c8:cf:81:e2:
31:7b:b1:8d:62:ff:a7:c3:0a:77:bc:28:e4:47:bf:d2:1e:8a:
bf:c7:ff:5e:8c:39:ac:36:6b:6c:42:2c:39:71:e6:8e:fd:28:
ef:74:ae:44:1b:10:71:2c:47:1d:0a:91:7e:81:e8:75:72:46:
91:5c:22:17:51:f7:9c:cb:0a:85:30:33:fd:44:29:8a:ce:d6:
84:79:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:58:34 2025 by rpki-client