Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a31303a3a2f34342d3438203d3e203334393237.roa
File:                     323630323a666166643a31303a3a2f34342d3438203d3e203334393237.roa (raw, json)
Hash identifier:          Z6IyjS08wXMXMxqSrsZ06AsdRc/eQXeY7Ydkr1bjjF0=
Subject key identifier:   66:7F:59:01:9D:52:B3:2B:09:6A:95:9F:17:34:DF:76:1E:BA:1C:9F
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       171AEF99CAC399A840144F5500B0EE5768C339E8
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a31303a3a2f34342d3438203d3e203334393237.roa
Signing time:             Thu 30 Jan 2025 22:45:44 +0000
ROA not before:           Thu 30 Jan 2025 22:40:44 +0000
ROA not after:            Thu 29 Jan 2026 22:45:44 +0000
asID:                     34927
IP address blocks:        2602:fafd:10::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1a:ef:99:ca:c3:99:a8:40:14:4f:55:00:b0:ee:57:68:c3:39:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Jan 30 22:40:44 2025 GMT
            Not After : Jan 29 22:45:44 2026 GMT
        Subject: CN=667F59019D52B32B096A959F1734DF761EBA1C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:40:f1:39:6a:93:64:3a:9a:32:06:de:5c:ef:
                    54:8e:ad:de:8d:c9:c2:96:1e:39:9e:24:94:95:92:
                    f1:a1:01:6b:90:df:b2:bc:1f:23:bb:55:92:95:e5:
                    a8:b5:dc:a4:75:8d:27:ff:a0:57:e9:5c:e5:71:04:
                    ae:0b:4f:50:7f:39:32:9d:6c:a6:b1:80:a3:91:85:
                    ed:b7:68:a4:b4:bd:6b:bf:5c:52:79:ab:1e:76:35:
                    df:00:62:8a:54:62:47:b0:98:ac:ce:13:6e:21:f0:
                    2c:88:e4:91:47:38:d2:0b:5c:52:97:99:c6:0f:9f:
                    ff:9c:49:68:8f:34:2c:4d:a1:44:97:e4:dc:03:ec:
                    2e:70:98:17:87:38:a0:da:80:a0:c3:3d:74:d7:9c:
                    6d:35:4f:e6:5f:e4:f8:e1:d3:32:09:55:0f:de:77:
                    54:d1:d8:00:c7:11:a7:ec:00:d9:1c:cc:e1:2f:cd:
                    a0:09:41:67:07:0e:fb:d9:14:5a:1c:9e:d1:43:dd:
                    76:a2:3e:11:ea:07:d3:bf:12:bd:62:0f:18:62:31:
                    76:1e:2d:d5:52:c2:af:50:ea:68:57:8d:09:c1:8f:
                    18:d3:ed:bc:bc:5e:ab:51:71:0e:d3:3a:2f:b8:94:
                    3e:49:6c:09:4f:0d:60:ae:d0:56:00:ab:14:b4:0d:
                    5d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7F:59:01:9D:52:B3:2B:09:6A:95:9F:17:34:DF:76:1E:BA:1C:9F
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a31303a3a2f34342d3438203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:e2:79:57:50:ac:7e:2e:ab:76:61:89:0f:86:ad:60:97:2f:
         29:a4:a5:10:a8:52:0e:98:0d:75:0a:ba:cb:13:06:90:5a:c5:
         5c:9b:65:9b:2b:e5:a6:99:ea:40:c9:2b:60:e9:e5:c6:6b:51:
         a6:3b:98:36:93:53:ad:a6:89:6b:26:8d:c3:7c:8c:b1:9e:01:
         19:44:a0:77:b9:ac:2a:2e:b2:78:42:5b:1b:1a:33:6a:b5:af:
         d3:59:65:99:f8:a0:8d:92:c7:66:bb:10:a4:90:83:9d:f3:bd:
         17:3a:08:18:ed:1c:f6:27:57:7d:03:51:3a:d5:8c:58:46:94:
         4c:66:9f:c0:75:95:86:9f:7a:24:7d:9e:49:b3:db:67:5f:fe:
         66:f9:04:42:e0:60:c4:55:da:56:8b:6e:18:5c:55:49:59:94:
         a6:28:47:1c:68:a8:fe:59:a0:05:3d:cb:19:e9:01:31:88:07:
         06:99:63:49:76:b9:31:3c:2c:dc:28:f2:99:96:fe:55:dc:fe:
         75:51:b5:d8:1e:b4:7f:e8:94:38:0c:2c:84:2a:7f:f3:3e:ff:
         7c:4b:bd:bb:69:e5:02:3d:ef:9d:52:51:1a:77:d8:4d:67:ae:
         d8:01:b1:9f:d6:7a:17:af:a9:51:27:9e:f7:53:81:7f:1e:59:
         82:40:24:ae
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIUFxrvmcrDmahAFE9VALDuV2jDOegwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhhY2I1MDZh
OTA0OTU5YmIxOGIwM2RlNzgwHhcNMjUwMTMwMjI0MDQ0WhcNMjYwMTI5MjI0NTQ0
WjAzMTEwLwYDVQQDEyg2NjdGNTkwMTlENTJCMzJCMDk2QTk1OUYxNzM0REY3NjFF
QkExQzlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UDxOWqTZDqa
MgbeXO9Ujq3ejcnClh45niSUlZLxoQFrkN+yvB8ju1WSleWotdykdY0n/6BX6Vzl
cQSuC09QfzkynWymsYCjkYXtt2iktL1rv1xSeasedjXfAGKKVGJHsJiszhNuIfAs
iOSRRzjSC1xSl5nGD5//nElojzQsTaFEl+TcA+wucJgXhzig2oCgwz1015xtNU/m
X+T44dMyCVUP3ndU0dgAxxGn7ADZHMzhL82gCUFnBw772RRaHJ7RQ912oj4R6gfT
vxK9Yg8YYjF2Hi3VUsKvUOpoV40JwY8Y0+28vF6rUXEO0zovuJQ+SWwJTw1grtBW
AKsUtA1dpwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFGZ/WQGdUrMrCWqVnxc033Ye
uhyfMB8GA1UdIwQYMBaAFOUYfU2odhnT27l1DoPRnlt/gDJxMA4GA1UdDwEB/wQE
AwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzovL2Nsb3VkaWUtcmVwby5ycGtp
LmFwcC9yZXBvL0NMT1VESUUtUlBLSS8xL0U1MTg3RDREQTg3NjE5RDNEQkI5NzUw
RTgzRDE5RTVCN0Y4MDMyNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYB
BQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MTRhODA5NC1hNGEwLTQ4
MjItOWJhYy01YzVhODNhZmNhM2QvNTZkOTdhMWQ4ZTY3MzdlNTJhYTNhMDJiYjhh
Y2I1MDZhOTA0OTU5YmIxOGIwM2RlNzguY2VyMIGNBggrBgEFBQcBCwSBgDB+MHwG
CCsGAQUFBzALhnByc3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NM
T1VESUUtUlBLSS8xLzMyMzYzMDMyM2E2NjYxNjY2NDNhMzEzMDNhM2EyZjM0MzQy
ZDM0MzgyMDNkM2UyMDMzMzQzOTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvr9ABAwDQYJKoZI
hvcNAQELBQADggEBACDieVdQrH4uq3ZhiQ+GrWCXLymkpRCoUg6YDXUKussTBpBa
xVybZZsr5aaZ6kDJK2Dp5cZrUaY7mDaTU62miWsmjcN8jLGeARlEoHe5rCousnhC
WxsaM2q1r9NZZZn4oI2Sx2a7EKSQg53zvRc6CBjtHPYnV30DUTrVjFhGlExmn8B1
lYafeiR9nkmz22df/mb5BELgYMRV2laLbhhcVUlZlKYoRxxoqP5ZoAU9yxnpATGI
BwaZY0l2uTE8LNwo8pmW/lXc/nVRtdgetH/olDgMLIQqf/M+/3xLvbtp5QI9751S
URp32E1nrtgBsZ/WehevqVEnnvdTgX8eWYJAJK4=
-----END CERTIFICATE-----