Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205232.roa
File:                     AS205232.roa (raw, json)
Hash identifier:          K1GKvGxscO5n+0CZf55az8FO0ergWSW/SfsKxitUeXE=
Subject key identifier:   45:A8:1B:BC:E1:4F:76:6E:0A:8A:5E:EC:1F:F5:2F:26:D1:61:F3:54
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4FCF92DC6B2F4CEB3C61C69788C1958474A1CC4D
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205232.roa
Signing time:             Sun 06 Oct 2024 04:44:58 +0000
ROA not before:           Sun 06 Oct 2024 04:39:58 +0000
ROA not after:            Sun 05 Oct 2025 04:44:58 +0000
asID:                     205232
IP address blocks:        2a0a:6040:9c00::/40 maxlen: 40
                          2a0a:6040:a000::/40 maxlen: 48
                          2a0a:6040:f800::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:cf:92:dc:6b:2f:4c:eb:3c:61:c6:97:88:c1:95:84:74:a1:cc:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:39:58 2024 GMT
            Not After : Oct  5 04:44:58 2025 GMT
        Subject: CN=45A81BBCE14F766E0A8A5EEC1FF52F26D161F354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:7c:6a:12:93:db:21:37:85:6f:78:c8:f6:
                    d5:4e:57:8d:9a:50:e8:da:12:b1:d4:68:c4:05:63:
                    ca:97:b3:37:f5:ef:dd:c6:7f:f8:eb:04:d6:ce:a2:
                    41:c3:15:cf:e5:d5:37:f4:41:70:bf:ed:28:7d:f9:
                    bf:d3:d6:e7:37:a7:56:d3:b6:e2:34:75:0e:ce:ac:
                    fa:6f:d1:e1:d3:53:6d:12:b1:ad:cb:9b:31:94:7d:
                    69:80:d5:42:be:31:af:4d:f4:12:56:3f:7b:3c:0f:
                    6d:8c:6e:7c:fe:b2:13:41:97:14:75:41:84:54:bd:
                    54:0e:e8:34:45:23:00:a4:85:fd:f7:75:b0:5c:de:
                    b2:08:26:f4:9b:84:cb:2c:42:56:b0:39:f5:e7:4a:
                    ca:61:d9:53:fe:21:5f:9a:80:c4:5c:39:d5:71:8d:
                    63:db:3b:7a:c0:f2:39:31:86:5c:1b:d3:5c:09:fd:
                    3b:75:5e:da:22:1d:a7:35:ba:5d:bb:a1:bd:63:1f:
                    fa:84:88:8c:08:c6:68:15:43:8d:5f:60:aa:3b:9f:
                    b2:24:be:b0:dd:45:9c:2b:37:74:00:78:de:ee:3d:
                    56:b1:1a:83:8e:f3:fd:2f:79:db:be:20:b8:13:98:
                    34:c4:19:98:ea:b5:18:1f:e4:5a:73:2c:c7:66:70:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A8:1B:BC:E1:4F:76:6E:0A:8A:5E:EC:1F:F5:2F:26:D1:61:F3:54
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:9c00::/40
                  2a0a:6040:a000::/40
                  2a0a:6040:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:24:ec:d6:f3:6c:2c:45:94:e5:7f:21:58:8c:31:ad:8b:5c:
         92:70:43:73:4d:39:70:7d:d3:93:95:84:3d:b7:e5:06:3e:d1:
         a1:9f:75:a4:f8:be:f1:13:e3:f9:23:d6:0b:3f:f0:df:5a:1f:
         a2:3f:ba:5f:bd:ab:84:77:60:f0:bd:66:35:a0:2e:45:8f:93:
         7d:42:a1:02:db:89:ef:7f:11:56:dd:c0:32:7e:a6:5a:d7:e7:
         16:bb:9d:ac:15:b5:0c:b3:dd:3b:3f:f9:cd:ba:87:6a:9e:2d:
         ea:17:25:14:1d:6f:84:73:f8:2c:29:69:7d:fd:a9:89:eb:e1:
         e6:9a:40:78:b1:c7:50:3b:de:7e:f7:39:fa:c4:da:c7:c5:59:
         b3:97:1a:1a:40:dc:d6:c3:10:70:99:7b:57:aa:f1:bc:d6:07:
         5f:fb:ff:dd:15:e3:a2:bd:08:77:95:a7:7c:b3:51:64:30:7f:
         ba:66:43:75:35:94:02:3b:62:0e:89:43:71:9f:4a:25:61:a1:
         2c:6b:74:50:d4:84:d3:82:ea:b9:8e:e1:ce:ea:b9:29:c1:c0:
         15:55:c6:6d:b0:ad:b3:34:82:d5:f5:23:7f:c7:85:64:12:72:
         70:d5:44:5b:d9:f3:69:73:c0:fd:fe:df:72:14:6c:4a:a1:e2:
         36:53:6e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:59:06 2025 by rpki-client