Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199073.roa
File:                     AS199073.roa (raw, json)
Hash identifier:          dXJ1NfH//TCK/E1ltby6DAEpWSutMlJ9zQy/o8apwHk=
Subject key identifier:   3A:53:4B:D8:08:BB:F5:E6:F8:58:A6:23:76:65:60:4E:DE:55:0B:F4
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1E02D929D3B197AADA49352E714F1568ADB9CE4A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199073.roa
Signing time:             Thu 30 Jan 2025 02:45:44 +0000
ROA not before:           Thu 30 Jan 2025 02:40:44 +0000
ROA not after:            Thu 29 Jan 2026 02:45:44 +0000
asID:                     199073
IP address blocks:        2a05:dfc1:1b00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:02:d9:29:d3:b1:97:aa:da:49:35:2e:71:4f:15:68:ad:b9:ce:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jan 30 02:40:44 2025 GMT
            Not After : Jan 29 02:45:44 2026 GMT
        Subject: CN=3A534BD808BBF5E6F858A6237665604EDE550BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:fd:51:28:92:5f:df:8f:e2:a5:5c:ea:43:
                    84:34:02:5d:10:63:5a:fd:c8:4b:81:75:d8:55:1d:
                    bc:8e:23:1e:11:f5:1f:3d:7a:1e:54:7f:ae:69:2d:
                    de:67:84:e1:5f:61:3a:13:6c:84:8d:9e:2f:9c:5c:
                    a4:49:26:32:87:0c:de:5d:92:07:c3:34:ae:33:0e:
                    98:47:08:0d:87:31:03:a6:8d:01:41:1a:0f:2c:c1:
                    20:f7:fe:90:d7:12:99:5f:99:94:7b:c4:28:13:2c:
                    ae:31:55:b6:5a:e2:5a:2d:b0:d9:57:15:d1:42:99:
                    2f:bb:ec:ed:1e:b4:c9:9e:bc:e9:c7:92:d0:6e:15:
                    66:62:07:bb:ad:1c:7b:c1:7e:7a:bf:01:27:a5:e2:
                    89:a6:91:9e:c8:df:6e:2b:0b:06:d5:9a:96:cb:45:
                    ba:aa:b8:9e:e3:74:17:4e:42:f6:45:bd:8d:e5:eb:
                    40:65:0f:57:6c:d2:7b:34:96:1e:59:43:fd:c2:88:
                    0b:fd:5e:29:42:54:6b:1b:5d:6d:09:e6:c3:20:eb:
                    68:b7:08:75:f1:09:f9:1d:29:09:0f:db:fb:61:ee:
                    a1:70:33:fa:60:b2:6c:de:8a:5e:fc:07:1b:1e:01:
                    18:9c:f0:93:b1:05:70:90:b9:bd:07:df:95:04:89:
                    91:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:53:4B:D8:08:BB:F5:E6:F8:58:A6:23:76:65:60:4E:DE:55:0B:F4
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199073.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:14:a4:4c:f2:61:40:b8:f7:c3:23:08:4b:d0:da:71:b7:84:
         1d:e4:38:90:ef:2c:9e:d0:f0:fe:15:3b:6e:63:40:7f:4d:13:
         a5:54:71:30:6a:87:9c:12:33:c0:a0:88:37:de:72:81:a7:61:
         66:40:68:b0:ac:32:06:43:28:29:05:f8:8a:c6:ab:d0:e3:af:
         36:0b:44:b5:ad:41:f4:57:f0:ba:99:a9:39:80:a2:ea:3d:2c:
         67:b0:24:c1:88:a3:34:8d:6b:a2:12:54:4a:34:0c:99:29:b2:
         4a:e5:b4:fa:c1:88:e4:67:cb:68:23:d1:1f:d0:82:12:d2:39:
         41:78:dc:80:3b:d5:02:dc:a6:12:62:e8:b7:51:5d:fa:1d:64:
         08:fb:07:40:58:48:94:49:47:d8:fe:b6:75:75:ba:ff:d0:a3:
         41:ae:71:a9:15:ed:97:e1:95:56:50:54:77:8e:6f:75:2b:46:
         88:d0:11:d1:b5:27:03:bf:80:b8:13:5a:fe:d4:e1:ee:ae:9e:
         ee:5d:14:b1:1e:ed:5d:32:72:d7:4b:e2:33:a0:75:63:95:9b:
         1f:bc:47:22:31:a3:04:7f:f5:07:89:d6:76:c6:62:eb:8d:46:
         0b:e6:7b:ae:9c:71:fc:ec:18:fd:9b:da:4f:52:2d:32:27:39:
         64:0a:ea:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:03:26 2025 by rpki-client