Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57483.roa
File:                     AS57483.roa (raw, json)
Hash identifier:          iqh4n0houvmJxhu4hq/QQ4H8dlVcVdnCjMlAuEsj3ec=
Subject key identifier:   57:4D:8C:85:9F:0E:26:B4:BE:BE:B1:DD:19:DD:F1:71:D3:91:59:7B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       0CE4F7D4CC619A61C3EEFBA1D4E31738DD965D00
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57483.roa
Signing time:             Sun 22 Dec 2024 23:45:36 +0000
ROA not before:           Sun 22 Dec 2024 23:40:36 +0000
ROA not after:            Sun 21 Dec 2025 23:45:36 +0000
asID:                     57483
IP address blocks:        2a06:9f81:2500::/40 maxlen: 48
                          2a06:9f81:2600::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e4:f7:d4:cc:61:9a:61:c3:ee:fb:a1:d4:e3:17:38:dd:96:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 22 23:40:36 2024 GMT
            Not After : Dec 21 23:45:36 2025 GMT
        Subject: CN=574D8C859F0E26B4BEBEB1DD19DDF171D391597B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:2a:68:72:6b:94:2c:e6:44:ec:b0:5e:d3:
                    99:e7:85:5a:ab:b3:05:c9:20:a4:94:78:42:34:da:
                    9a:22:70:d9:94:1c:00:56:16:8e:4a:09:9e:75:47:
                    46:62:ed:f9:6d:56:e5:e5:37:4f:1e:be:78:f0:95:
                    32:54:5e:0d:b3:f7:01:08:21:f2:08:39:1c:c8:3f:
                    7d:52:a0:89:e6:23:4e:b8:1d:d7:83:35:28:04:21:
                    38:2e:49:1f:c3:96:df:cd:e7:12:b5:a6:d7:a8:38:
                    c7:18:0b:92:76:29:d5:7e:65:05:fc:78:9f:e0:05:
                    40:46:3c:4c:9d:64:48:18:1b:dc:83:c9:86:ec:ad:
                    e3:67:b0:c1:91:f6:8e:f1:99:39:27:90:22:b0:c1:
                    55:6b:4f:28:15:9c:96:1a:8f:49:fe:e9:c9:bc:53:
                    16:a9:81:c0:9f:3d:5c:a8:3f:59:6a:53:f5:59:01:
                    95:26:ee:98:6a:66:50:6a:68:39:c9:bf:01:b4:6f:
                    0b:6d:c1:1f:ab:82:56:00:39:38:99:b6:97:18:7e:
                    d2:38:e6:39:61:32:80:a1:8d:20:a2:bd:52:1a:f4:
                    69:f6:13:02:b6:c7:2e:25:16:f8:4f:a9:bb:80:0b:
                    19:ff:7f:0f:b0:cb:c1:de:1e:aa:0d:fd:ce:a2:f0:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4D:8C:85:9F:0E:26:B4:BE:BE:B1:DD:19:DD:F1:71:D3:91:59:7B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:2500::-2a06:9f81:26ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         51:e3:04:9e:41:64:72:67:3e:8a:17:3d:18:8b:50:db:fd:24:
         11:dc:c8:e4:29:c9:8f:41:82:8c:50:88:6b:22:99:75:fe:77:
         b5:52:bc:f5:60:06:20:c7:9f:15:2a:1e:5d:ad:83:0f:c7:bb:
         0c:96:98:e7:fe:e0:4a:89:00:87:1b:48:e4:95:c2:d8:e8:33:
         60:b7:50:d8:4d:3b:f1:20:64:39:f0:6a:d9:d1:ae:d3:ca:67:
         a0:c2:b9:b0:b9:f9:4f:50:30:aa:51:31:88:df:a1:f7:c1:08:
         8c:ca:ec:53:2d:4e:b7:f0:cf:06:87:92:61:bc:cf:91:45:0f:
         df:cf:1a:56:ed:d7:f5:61:57:89:aa:b1:e5:ea:bd:40:67:55:
         82:0e:98:69:b6:ef:bd:f2:c1:92:7f:4c:a1:54:a0:b4:fb:71:
         ea:06:6a:33:d1:0a:ac:fb:12:64:48:8e:b5:18:17:51:b1:d3:
         b2:37:8a:dd:8d:63:b0:90:86:a1:45:e8:34:04:19:c2:82:a2:
         1f:5e:b3:48:b7:ce:55:40:68:74:ef:3b:43:03:2e:aa:e9:42:
         f9:1c:e2:38:9c:53:8e:ee:21:3e:08:c9:5a:40:46:43:b0:b6:
         f4:ff:e4:10:81:75:c0:d1:a3:71:df:79:a7:77:fa:d0:44:3b:
         94:b4:aa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:03:24 2025 by rpki-client