Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS211562.roa
File:                     AS211562.roa (raw, json)
Hash identifier:          vPmhPCGa6mKkjESo/qT4wU7P1AzW028L7L75DVvMZ3k=
Subject key identifier:   20:35:D7:3E:62:21:C0:B7:10:D1:BB:69:44:3B:90:62:7F:52:04:75
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       16FA96217D45A676E643BCB098D075F8C71B98AF
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS211562.roa
Signing time:             Mon 23 Dec 2024 23:45:37 +0000
ROA not before:           Mon 23 Dec 2024 23:40:37 +0000
ROA not after:            Mon 22 Dec 2025 23:45:37 +0000
asID:                     211562
IP address blocks:        2a06:9f81:3500::/40 maxlen: 48
                          2a06:9f81:3600::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fa:96:21:7d:45:a6:76:e6:43:bc:b0:98:d0:75:f8:c7:1b:98:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 23 23:40:37 2024 GMT
            Not After : Dec 22 23:45:37 2025 GMT
        Subject: CN=2035D73E6221C0B710D1BB69443B90627F520475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:ce:38:34:4a:89:40:65:09:24:53:72:e5:
                    34:e2:2c:96:a4:65:2b:64:32:b8:95:dd:3f:7e:89:
                    98:d8:72:41:2a:a7:63:ff:b8:27:23:a2:b1:5d:81:
                    64:4f:17:fe:09:41:ca:c2:20:f7:e9:b5:4a:ae:b9:
                    f6:3c:17:30:ce:53:50:58:d3:01:da:51:54:5e:8a:
                    53:ef:35:b0:13:69:c4:37:2c:21:14:4b:63:d5:81:
                    f5:4e:cd:4a:de:fa:49:39:62:98:20:26:49:67:b6:
                    aa:d1:7c:1e:07:b9:7f:5c:4b:82:ce:92:2e:22:7f:
                    60:54:ea:82:ab:93:c0:4e:ac:1a:b5:d0:b7:94:9a:
                    6b:b1:3e:2c:3c:c5:af:f3:d4:3f:fb:bd:50:e4:98:
                    a6:00:e4:93:14:62:0a:f8:6a:5b:fd:72:b6:00:26:
                    86:c0:9b:26:87:79:2c:64:8b:1d:83:04:87:dd:80:
                    2c:b4:30:88:8c:0b:5c:34:18:da:a3:5e:c2:67:6d:
                    41:f1:30:9e:22:a0:b7:45:43:37:49:e1:a3:e1:6a:
                    3e:b3:29:9d:51:f5:c0:36:8e:3a:2e:04:9f:8a:7c:
                    47:a5:73:5f:94:2a:9d:15:31:e4:31:20:c8:2f:ee:
                    fb:39:13:fa:d9:ae:0a:9e:a1:f3:70:15:5b:4d:6d:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:35:D7:3E:62:21:C0:B7:10:D1:BB:69:44:3B:90:62:7F:52:04:75
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS211562.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3500::-2a06:9f81:36ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         af:19:9a:bc:f6:40:da:ae:c6:67:e7:77:2a:fb:43:4c:d9:f2:
         d0:6b:21:0c:9a:49:00:ad:79:5b:54:37:00:ef:a3:a7:98:4d:
         06:2d:95:c7:7f:be:5f:4b:ad:42:1b:2b:36:50:39:94:29:42:
         a2:a5:48:d0:b3:a0:b1:ee:8b:e4:b4:69:98:4d:48:07:92:92:
         43:e4:e3:fe:c8:4f:1c:76:2b:8a:2c:cb:21:0d:80:0a:41:13:
         ad:da:0e:1b:16:ac:d7:16:3c:2c:4b:53:ac:e8:f2:03:d9:66:
         ba:c7:db:10:f1:49:e7:7b:fb:59:16:71:9a:4a:d5:41:87:2c:
         46:fd:a5:78:2e:16:f0:61:26:43:b6:3a:59:62:1f:91:13:43:
         50:52:c9:6b:21:88:95:fe:0d:cf:7d:e2:d3:68:70:b9:f3:fb:
         b0:12:40:68:22:69:fe:92:4c:a7:98:3c:77:8a:37:f7:a0:39:
         17:86:54:8f:23:9a:05:a6:47:46:45:1d:bd:3d:b6:ac:c4:94:
         51:7d:f7:04:d4:9f:58:f9:e2:c6:55:69:66:36:74:b5:44:8a:
         79:97:ff:59:dd:af:75:57:ae:76:1a:2f:32:f3:9c:49:76:b9:
         f0:08:d2:5a:e8:1b:ce:be:12:f4:cd:88:3c:3a:37:0a:fb:40:
         84:f7:96:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:59:59 2025 by rpki-client