Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212271.roa
File:                     AS212271.roa (raw, json)
Hash identifier:          p3J9c28lbxL6hZT/ZHRtNN0X/tPkLfGqezxRzBrCXak=
Subject key identifier:   80:01:11:B9:B1:DF:E8:D7:39:1D:A4:73:8C:48:3F:DC:52:BD:D3:2E
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       37DE48E645EF570A10F470FD3E9F19FF46AD054C
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212271.roa
Signing time:             Mon 09 Dec 2024 23:45:36 +0000
ROA not before:           Mon 09 Dec 2024 23:40:36 +0000
ROA not after:            Mon 08 Dec 2025 23:45:36 +0000
asID:                     212271
IP address blocks:        2a05:dfc1:3c00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:de:48:e6:45:ef:57:0a:10:f4:70:fd:3e:9f:19:ff:46:ad:05:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 23:40:36 2024 GMT
            Not After : Dec  8 23:45:36 2025 GMT
        Subject: CN=800111B9B1DFE8D7391DA4738C483FDC52BDD32E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:0a:b3:84:08:69:0f:c3:62:d9:12:ad:61:
                    e3:f9:d4:de:e7:9b:ab:29:17:57:c9:81:42:c2:8e:
                    65:8b:67:8c:51:02:27:7a:9e:02:06:38:09:54:d2:
                    c8:7e:bb:dd:d1:50:92:44:48:8c:af:4b:01:60:63:
                    49:51:10:c5:45:1f:ac:7a:df:58:2a:e2:97:b6:8d:
                    e2:c7:d6:a3:8c:71:48:17:93:b3:dc:bf:f4:c4:b6:
                    d4:8f:37:c8:27:4a:2e:65:08:63:38:70:b0:31:fe:
                    4f:1b:f8:0e:40:78:4d:be:ac:5d:ad:e3:b6:5f:21:
                    3e:7b:af:66:bf:19:54:c9:34:cf:02:7b:3a:94:9a:
                    79:8a:99:f8:7b:95:fc:da:f1:cd:85:22:1a:6c:e4:
                    eb:27:63:45:c8:83:d6:4f:d0:da:86:70:7f:14:0d:
                    29:4a:87:bf:89:92:e5:f3:35:f7:53:25:d8:10:48:
                    3b:4f:c9:10:8d:90:d1:36:df:1f:37:b2:8c:a9:53:
                    96:f9:9f:3c:72:46:9f:b6:12:c8:6d:56:4a:e8:15:
                    c9:d9:72:02:26:c3:66:93:a2:d1:19:0d:97:89:33:
                    f4:e2:e5:ff:5d:c0:73:63:83:b1:f4:6b:ad:4a:9a:
                    6d:60:cf:bd:b9:3b:31:c6:81:12:96:d3:74:f0:0a:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:01:11:B9:B1:DF:E8:D7:39:1D:A4:73:8C:48:3F:DC:52:BD:D3:2E
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212271.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:3c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:d7:ea:2c:55:19:5f:56:51:2a:8f:a3:28:e0:a2:e7:26:
         17:03:da:43:3a:60:6e:42:b5:f5:aa:f3:2f:ba:35:0c:b8:7c:
         4f:3a:5b:30:36:f9:95:ff:10:25:9c:47:c7:0d:a8:f1:07:10:
         32:7a:7e:53:de:fc:dd:9d:f4:e0:b5:b8:2d:d8:34:9d:a4:be:
         2e:74:6f:76:95:84:88:41:71:d5:b2:9c:91:d4:27:b6:5c:fd:
         1c:46:e4:7d:52:6c:dc:69:47:4b:58:ee:8f:8e:78:da:d4:a3:
         84:b8:b4:de:f8:f8:ca:41:98:39:ac:18:b2:68:58:bc:fc:87:
         38:6a:bc:27:f8:10:ba:be:5d:8f:c3:d1:2d:c3:1f:fe:3c:4c:
         10:9e:7c:14:40:90:1d:38:dd:9b:12:24:e8:1d:97:d6:30:b4:
         3c:cd:1a:e7:46:be:cc:6c:a6:88:d7:76:a3:86:53:63:98:41:
         47:8d:e1:48:2f:fd:2b:39:1f:a9:ae:a5:6b:a1:4e:07:72:0d:
         8e:85:a5:1f:56:44:7c:90:a5:28:3d:3b:5a:90:3b:73:b6:f7:
         91:93:4d:38:d6:8c:0d:ab:8d:f6:7f:7e:0b:71:63:3b:58:0d:
         92:8f:88:ec:5d:90:9d:11:ab:39:cd:4e:a5:2d:76:bc:de:1e:
         83:d6:ee:32
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUN95I5kXvVwoQ9HD9Pp8Z/0atBUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNDEyMDkyMzQwMzZaFw0yNTEyMDgyMzQ1MzZaMDMxMTAvBgNV
BAMTKDgwMDExMUI5QjFERkU4RDczOTFEQTQ3MzhDNDgzRkRDNTJCREQzMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2QqzhAhpD8Ni2RKtYeP51N7n
m6spF1fJgULCjmWLZ4xRAid6ngIGOAlU0sh+u93RUJJESIyvSwFgY0lREMVFH6x6
31gq4pe2jeLH1qOMcUgXk7Pcv/TEttSPN8gnSi5lCGM4cLAx/k8b+A5AeE2+rF2t
47ZfIT57r2a/GVTJNM8CezqUmnmKmfh7lfza8c2FIhps5OsnY0XIg9ZP0NqGcH8U
DSlKh7+JkuXzNfdTJdgQSDtPyRCNkNE23x83soypU5b5nzxyRp+2EshtVkroFcnZ
cgImw2aTotEZDZeJM/Ti5f9dwHNjg7H0a61Kmm1gz725OzHGgRKW03TwCn13AgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUgAERubHf6Nc5HaRzjEg/3FK90y4wHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjEyMjcxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwTwwDQYJKoZIhvcNAQELBQADggEBAAnB
1+osVRlfVlEqj6Mo4KLnJhcD2kM6YG5CtfWq8y+6NQy4fE86WzA2+ZX/ECWcR8cN
qPEHEDJ6flPe/N2d9OC1uC3YNJ2kvi50b3aVhIhBcdWynJHUJ7Zc/RxG5H1SbNxp
R0tY7o+OeNrUo4S4tN74+MpBmDmsGLJoWLz8hzhqvCf4ELq+XY/D0S3DH/48TBCe
fBRAkB043ZsSJOgdl9YwtDzNGudGvsxspojXdqOGU2OYQUeN4Ugv/Ss5H6mupWuh
TgdyDY6FpR9WRHyQpSg9O1qQO3O295GTTTjWjA2rjfZ/fgtxYztYDZKPiOxdkJ0R
qznNTqUtdrzeHoPW7jI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:01:02 2025 by rpki-client