Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198075.roa
File:                     AS198075.roa (raw, json)
Hash identifier:          pY6tVoFUXRb4ntWPMpNXSIEZI42pWCyb8fSP53yzrFk=
Subject key identifier:   40:F7:4A:77:4F:E0:AD:2D:F5:B9:A2:D3:74:3A:BF:B5:2B:40:8A:AA
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2AFCF00C935FA4D313410B135EC1EF48D1F26459
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198075.roa
Signing time:             Mon 16 Sep 2024 21:44:36 +0000
ROA not before:           Mon 16 Sep 2024 21:39:36 +0000
ROA not after:            Mon 15 Sep 2025 21:44:36 +0000
asID:                     198075
IP address blocks:        2a05:dfc1:ab00::/40 maxlen: 48
                          2a05:dfc1:ac00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fc:f0:0c:93:5f:a4:d3:13:41:0b:13:5e:c1:ef:48:d1:f2:64:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Sep 16 21:39:36 2024 GMT
            Not After : Sep 15 21:44:36 2025 GMT
        Subject: CN=40F74A774FE0AD2DF5B9A2D3743ABFB52B408AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:93:97:2c:17:b4:5c:67:00:ff:9b:de:bc:fd:
                    5d:af:52:35:d9:78:1a:41:83:df:a8:de:da:e8:41:
                    4a:88:18:cf:9b:ba:b9:65:17:55:a4:1a:8c:7c:2e:
                    10:89:6d:ea:1f:40:83:4b:fa:ec:e5:ca:a0:f8:60:
                    a8:08:f2:5d:d1:3d:cb:51:47:08:54:d7:a8:a6:e4:
                    cc:6b:8a:67:56:14:8d:ed:a2:15:2f:e5:49:98:13:
                    3c:b4:c2:09:1f:c4:b6:f7:df:1e:50:c5:fa:a0:ba:
                    37:ca:c1:39:90:d5:bc:21:56:4a:b2:5a:81:e7:be:
                    e1:60:b9:85:a7:3c:90:e2:88:9a:6c:0f:d4:4c:7c:
                    3c:22:e6:2f:90:cb:ac:93:64:13:65:ad:69:34:95:
                    c1:66:01:70:65:b4:cc:b3:2c:97:45:e4:3f:77:60:
                    51:e3:27:5d:72:20:09:bb:e0:aa:fe:28:f5:76:42:
                    1f:74:44:2f:09:44:da:49:33:b7:f0:88:c2:d0:98:
                    53:3e:f5:ba:38:c2:ef:6f:f2:70:36:01:2f:6e:e0:
                    5d:16:20:d6:0f:a1:8c:31:fe:90:2b:5b:b2:36:9b:
                    a4:42:f6:8e:4d:ef:1b:ea:af:35:7b:d3:6c:52:e7:
                    9b:9a:f8:0a:c3:10:d4:87:c7:b5:47:76:f2:e8:9c:
                    b4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F7:4A:77:4F:E0:AD:2D:F5:B9:A2:D3:74:3A:BF:B5:2B:40:8A:AA
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:ab00::-2a05:dfc1:acff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         25:37:26:b4:03:be:36:f7:e4:aa:60:da:d4:ec:a5:58:2e:6f:
         5a:4d:69:c0:d5:0e:ba:99:41:c0:ee:66:5a:7e:4b:e5:ed:17:
         d1:39:59:66:f2:ac:15:cd:39:d5:6d:be:d2:9f:54:87:7c:75:
         f5:d7:62:e9:8a:f2:72:8d:79:08:38:86:6d:24:f3:0c:25:27:
         81:91:70:eb:7a:43:a6:ff:e3:be:6d:3d:47:da:e2:eb:77:2a:
         9b:71:b8:f3:3b:73:84:8c:d8:75:b3:a1:2f:f6:35:0f:00:9f:
         45:e1:3b:b9:d7:07:eb:79:47:24:c4:a7:9a:10:71:c7:1d:80:
         8a:91:8d:95:ff:d7:8d:c4:bf:91:4e:24:5f:9f:4d:81:66:91:
         c3:35:35:22:09:7f:f7:0e:e9:50:63:cd:c0:13:c4:76:06:5d:
         4e:fe:fe:5e:4f:95:eb:f2:e4:f5:21:0b:ef:04:b6:84:eb:a4:
         54:5f:1e:9f:d9:77:63:70:9c:61:42:ec:3f:91:db:7b:1f:c9:
         02:7b:9d:ce:e4:70:18:18:e9:cb:36:18:e5:01:d7:31:a2:ea:
         ca:0d:e8:47:4f:79:ad:5b:ca:b7:a1:e9:e0:89:8c:dc:1e:8a:
         f8:05:cc:7b:e6:91:bc:2c:25:6b:a5:15:b2:f0:d9:ac:80:fa:
         c7:7f:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:25:29 2025 by rpki-client