Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216382.roa
File:                     AS216382.roa (raw, json)
Hash identifier:          xqVgh/7OoQ2EOcq/0WH9OilKfXNNhtYfe45pfr2NZPY=
Subject key identifier:   E8:81:36:A6:36:7D:FD:7F:75:D2:C5:14:0D:CF:3C:AD:86:67:5E:8A
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1465A75AB902EBD3F7F314E0F1C4DDEE7D58412F
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216382.roa
Signing time:             Tue 01 Jul 2025 23:46:43 +0000
ROA not before:           Tue 01 Jul 2025 23:41:43 +0000
ROA not after:            Tue 30 Jun 2026 23:46:43 +0000
asID:                     216382
IP address blocks:        2a05:dfc1:7f00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:65:a7:5a:b9:02:eb:d3:f7:f3:14:e0:f1:c4:dd:ee:7d:58:41:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jul  1 23:41:43 2025 GMT
            Not After : Jun 30 23:46:43 2026 GMT
        Subject: CN=E88136A6367DFD7F75D2C5140DCF3CAD86675E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:c4:ff:36:1e:09:f6:11:2e:e5:29:d7:ea:
                    d5:e6:87:8b:d1:a2:ab:3d:c9:1f:47:df:7b:3a:b7:
                    e2:c7:2e:50:7c:42:ff:99:3f:bf:1d:a8:e1:ee:a7:
                    5b:62:fa:c5:5c:55:a5:0a:cd:95:75:da:3c:8a:24:
                    5c:98:7b:9a:b7:fa:34:f9:91:91:e4:b8:bd:26:f3:
                    8f:16:e7:86:6a:8e:90:0c:6c:e9:82:8d:73:20:21:
                    61:8e:52:7d:f4:38:95:8c:3e:5c:f6:81:5c:de:27:
                    f1:5c:3c:15:d1:22:5a:16:29:10:2a:c5:eb:cb:d4:
                    4f:6d:64:3e:25:94:73:a5:f4:53:50:3f:73:b4:8a:
                    53:7e:61:ac:0c:a3:f0:c9:fe:b0:9b:08:a4:24:05:
                    c8:2f:a1:08:2f:2c:6d:39:79:72:dc:d2:3a:71:d1:
                    a0:e8:0b:50:c4:35:26:4c:3e:f5:19:7c:d9:8e:0f:
                    9c:c0:7f:39:c7:cc:ea:06:88:c0:0e:c4:e8:4b:88:
                    ae:3d:be:be:c7:12:db:31:64:be:c6:ad:c9:a0:fb:
                    b4:0c:82:5d:f7:fc:28:6d:df:84:42:63:cf:ff:33:
                    73:f7:22:86:bf:3b:41:c7:09:ef:21:77:ff:75:a4:
                    61:e6:bb:fc:f1:3e:03:ea:d1:4d:96:07:b1:9c:5d:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:81:36:A6:36:7D:FD:7F:75:D2:C5:14:0D:CF:3C:AD:86:67:5E:8A
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216382.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:ec:de:55:a6:4e:c7:3c:61:0e:2c:64:94:62:86:1f:90:fe:
         86:e6:78:e3:bc:33:00:6f:36:f5:19:a1:2d:1c:3d:b6:62:c7:
         d4:ab:34:99:e9:2d:81:02:45:6b:6c:3b:63:ff:fe:20:54:ea:
         10:19:cf:e3:0e:77:8c:e1:c9:ce:7c:63:da:ce:27:8b:9a:7c:
         1d:74:3c:7e:fe:c3:21:c7:90:67:6e:1d:13:1e:09:94:47:b5:
         01:f1:a0:41:4c:06:48:be:48:99:9c:9b:ff:b1:97:51:0f:cc:
         18:13:fc:7f:53:82:fc:61:ef:57:42:32:6e:9c:9e:4a:01:8f:
         53:23:56:01:63:cf:d4:88:fe:12:3c:7a:92:37:e0:0b:3a:19:
         8c:5c:fd:19:be:2f:18:b1:27:6e:99:c4:4a:54:77:0e:12:a6:
         f2:4c:2e:cb:aa:90:8c:9f:bd:fe:58:37:32:6d:35:69:c6:c2:
         c7:65:f9:1e:fe:ec:30:7f:53:6b:3d:7f:dd:f8:c7:c8:0d:ed:
         5c:80:1f:c9:9c:ad:17:c9:d0:86:b1:df:32:f3:6d:ce:5d:e4:
         fa:0f:18:9c:b5:0b:44:8c:fb:0e:14:80:cb:4b:25:81:9e:6b:
         34:60:1f:0b:62:43:8d:86:5a:0e:cb:45:59:8b:dd:2b:d4:f9:
         62:37:99:7a
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUFGWnWrkC69P38xTg8cTd7n1YQS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNTA3MDEyMzQxNDNaFw0yNjA2MzAyMzQ2NDNaMDMxMTAvBgNV
BAMTKEU4ODEzNkE2MzY3REZEN0Y3NUQyQzUxNDBEQ0YzQ0FEODY2NzVFOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCctMT/Nh4J9hEu5SnX6tXmh4vR
oqs9yR9H33s6t+LHLlB8Qv+ZP78dqOHup1ti+sVcVaUKzZV12jyKJFyYe5q3+jT5
kZHkuL0m848W54ZqjpAMbOmCjXMgIWGOUn30OJWMPlz2gVzeJ/FcPBXRIloWKRAq
xevL1E9tZD4llHOl9FNQP3O0ilN+YawMo/DJ/rCbCKQkBcgvoQgvLG05eXLc0jpx
0aDoC1DENSZMPvUZfNmOD5zAfznHzOoGiMAOxOhLiK49vr7HEtsxZL7Grcmg+7QM
gl33/Cht34RCY8//M3P3Ioa/O0HHCe8hd/91pGHmu/zxPgPq0U2WB7GcXe5vAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQU6IE2pjZ9/X910sUUDc88rYZnXoowHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjE2MzgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwX8wDQYJKoZIhvcNAQELBQADggEBACbs
3lWmTsc8YQ4sZJRihh+Q/obmeOO8MwBvNvUZoS0cPbZix9SrNJnpLYECRWtsO2P/
/iBU6hAZz+MOd4zhyc58Y9rOJ4uafB10PH7+wyHHkGduHRMeCZRHtQHxoEFMBki+
SJmcm/+xl1EPzBgT/H9Tgvxh71dCMm6cnkoBj1MjVgFjz9SI/hI8epI34As6GYxc
/Rm+LxixJ26ZxEpUdw4SpvJMLsuqkIyfvf5YNzJtNWnGwsdl+R7+7DB/U2s9f934
x8gN7VyAH8mcrRfJ0Iax3zLzbc5d5PoPGJy1C0SM+w4UgMtLJYGeazRgHwtiQ42G
Wg7LRVmL3SvU+WI3mXo=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:18:16 2025 by rpki-client