Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51019.roa
File:                     AS51019.roa (raw, json)
Hash identifier:          2cEiKQ6U85s1Z/97Tm2eIHuvYpl//6sERUbLROrriDc=
Subject key identifier:   4A:7D:3B:05:2C:30:4A:19:B9:04:EE:C0:70:C8:B0:1B:CE:25:EB:F7
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1F478E63FD12C5A27655093DCDDD783456B9EEB2
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51019.roa
Signing time:             Mon 24 Feb 2025 02:45:54 +0000
ROA not before:           Mon 24 Feb 2025 02:40:54 +0000
ROA not after:            Mon 23 Feb 2026 02:45:54 +0000
asID:                     51019
IP address blocks:        2a05:dfc1:b00f::/48 maxlen: 48
                          2a05:dfc1:ff00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:47:8e:63:fd:12:c5:a2:76:55:09:3d:cd:dd:78:34:56:b9:ee:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Feb 24 02:40:54 2025 GMT
            Not After : Feb 23 02:45:54 2026 GMT
        Subject: CN=4A7D3B052C304A19B904EEC070C8B01BCE25EBF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:b8:41:b9:6c:7b:65:d6:84:7e:4a:f7:56:
                    b2:d0:94:dd:d7:c0:57:5a:d1:c4:c6:9f:1c:fe:ee:
                    a6:c6:be:10:42:c6:85:82:71:a7:5a:2d:80:eb:85:
                    15:ca:ba:70:39:12:4f:0d:2d:2f:a4:bf:ba:fa:b2:
                    22:8c:aa:4b:c9:d6:16:8e:3b:08:8f:a0:75:62:fa:
                    96:67:b7:bc:b3:8e:f1:0b:be:4a:57:5e:ad:e2:db:
                    1f:0d:f9:01:26:6f:37:82:98:72:4d:36:d1:3e:11:
                    e4:ea:69:39:21:a0:80:68:7f:88:da:21:2c:c7:67:
                    66:97:fb:75:79:0f:f1:74:03:5e:b1:3e:26:41:d0:
                    0d:0e:ef:42:99:13:10:f4:c4:cd:0a:2b:d0:af:38:
                    07:a5:b3:32:3f:ab:62:c5:c6:37:05:eb:74:10:d5:
                    7a:b3:1f:c3:22:26:d6:6f:69:4f:73:a2:a6:7f:a7:
                    7c:fa:ce:76:bb:16:76:9b:c3:e4:6d:3a:2b:91:86:
                    7c:62:1c:e8:5b:99:12:32:5b:39:74:d4:a0:f4:8c:
                    c3:46:af:15:f6:d7:c9:44:28:86:34:be:13:b2:ed:
                    f4:5b:4f:d5:6f:62:77:1d:31:f7:c5:50:f2:4c:3a:
                    12:19:84:77:d3:ac:a4:07:0a:93:2c:4f:a7:6c:35:
                    1f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7D:3B:05:2C:30:4A:19:B9:04:EE:C0:70:C8:B0:1B:CE:25:EB:F7
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51019.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:b00f::/48
                  2a05:dfc1:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:6d:d6:a1:f4:66:9b:cf:91:a2:8a:3d:d3:cb:37:04:93:77:
         e8:d7:19:a4:71:d7:5c:28:47:92:81:98:23:ba:8f:a5:30:c8:
         d5:b3:cd:4c:7c:f0:19:26:d9:0f:de:f9:20:c2:32:10:fe:04:
         2a:5f:5a:28:61:bc:d1:33:45:98:4f:0b:ef:21:31:3a:2c:21:
         ac:7a:8c:96:3f:a9:83:6c:c7:d5:75:f2:b6:61:90:c1:9a:c5:
         d2:8d:e0:df:fe:5b:83:b6:3b:d9:db:a4:ed:9e:27:89:27:1b:
         d1:40:de:f8:73:d1:1e:7c:9d:6d:c7:db:12:46:63:0e:ca:58:
         b0:99:d3:08:69:f1:c6:85:3c:4c:79:7f:41:86:db:d5:8d:ce:
         80:f6:30:76:ff:bc:8e:2d:cb:f7:38:a1:17:79:30:04:6a:c0:
         e8:c1:1d:87:25:5f:df:09:19:48:6d:63:75:e0:8a:e8:8f:77:
         e5:c2:cf:7a:40:df:43:0e:9b:2d:9a:b7:9f:48:d1:59:82:3b:
         be:ec:04:8c:97:62:83:b4:42:73:1c:2c:fe:9f:04:3a:0a:53:
         be:c6:c8:08:fd:2f:51:b1:da:07:29:42:6a:57:e0:f5:f8:85:
         77:e9:63:18:cc:37:26:a2:c5:0e:6b:6d:58:b2:99:3c:fe:bb:
         e7:d9:a3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:05:29 2025 by rpki-client