Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630373a3a2f34382d3438203d3e20323034333430.roa
File:                     323630323a666166643a6630373a3a2f34382d3438203d3e20323034333430.roa (raw, json)
Hash identifier:          qO+ySfcKkQTE3tD37WvqI7yMoCy9ObKGXDYaDn6IYz0=
Subject key identifier:   F1:69:6E:E5:4D:1C:7E:93:51:52:3E:17:8D:3C:FD:7B:3D:19:D8:C4
Certificate issuer:       /CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
Certificate serial:       48A8E1213A44D133B48A61F1B2E809DF87BD2BC0
Authority key identifier: E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630373a3a2f34382d3438203d3e20323034333430.roa
Signing time:             Mon 02 Dec 2024 04:45:34 +0000
ROA not before:           Mon 02 Dec 2024 04:40:34 +0000
ROA not after:            Mon 01 Dec 2025 04:45:34 +0000
asID:                     204340
IP address blocks:        2602:fafd:f07::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a8:e1:21:3a:44:d1:33:b4:8a:61:f1:b2:e8:09:df:87:bd:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78
        Validity
            Not Before: Dec  2 04:40:34 2024 GMT
            Not After : Dec  1 04:45:34 2025 GMT
        Subject: CN=F1696EE54D1C7E9351523E178D3CFD7B3D19D8C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:7d:42:45:56:fd:6f:ff:86:32:f3:fc:3c:
                    54:2c:3b:35:ca:9c:9a:05:bd:a1:8d:e0:9b:50:07:
                    f8:03:8e:8f:ea:52:6a:f1:95:c0:d1:08:3c:f0:27:
                    1e:65:01:66:75:9d:d3:0a:5e:b9:ab:e2:76:52:09:
                    c6:c7:83:43:d6:1a:b7:5b:c8:76:e3:9d:66:36:50:
                    3f:5b:45:2b:b0:c7:e5:75:b4:ee:21:e8:14:9d:ce:
                    58:4b:9e:f8:02:32:e0:30:71:bb:2c:42:03:eb:ea:
                    6b:3d:65:42:fa:7f:4e:9d:75:10:09:cb:81:73:3d:
                    c7:fb:4e:a8:67:96:76:39:20:f9:5a:18:ab:79:86:
                    82:46:32:69:a5:52:36:f9:78:c8:90:c5:df:97:54:
                    e3:00:f7:2a:54:ba:bc:13:dd:19:a3:9e:be:f1:7b:
                    89:a0:2e:69:94:63:87:5b:a8:3a:4c:39:31:1f:64:
                    a6:f2:ee:73:52:5b:a2:9f:d6:e7:01:eb:a2:79:bb:
                    37:b2:db:74:b6:07:d2:ab:c0:bd:a9:3d:fd:92:fe:
                    ee:85:7c:80:a3:f5:0c:35:4b:19:b8:28:a2:53:48:
                    ce:d5:2f:e6:b1:98:70:6a:6e:c7:79:71:7f:fd:f1:
                    8f:0b:1d:84:65:19:b2:7a:b4:ea:b1:02:71:ba:d5:
                    da:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:69:6E:E5:4D:1C:7E:93:51:52:3E:17:8D:3C:FD:7B:3D:19:D8:C4
            X509v3 Authority Key Identifier:
                keyid:E5:18:7D:4D:A8:76:19:D3:DB:B9:75:0E:83:D1:9E:5B:7F:80:32:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/E5187D4DA87619D3DBB9750E83D19E5B7F803271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/414a8094-a4a0-4822-9bac-5c5a83afca3d/56d97a1d8e6737e52aa3a02bb8acb506a904959bb18b03de78.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/1/323630323a666166643a6630373a3a2f34382d3438203d3e20323034333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fafd:f07::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:4f:3b:a3:1b:80:ac:25:42:90:12:e4:59:a7:fa:46:e9:57:
         8c:df:25:53:d7:08:7f:e5:4c:74:fd:4c:41:dd:f8:26:70:ad:
         0d:21:aa:2e:23:27:c0:29:2e:57:29:f8:33:94:83:ad:6b:c9:
         9e:00:64:c7:fd:f2:cc:5f:9d:a6:f6:ae:36:65:f5:1f:b0:fb:
         b8:0d:a4:0b:77:eb:15:59:c1:48:3c:ed:c5:63:6b:3f:0d:65:
         b8:83:80:cd:86:79:26:af:59:57:b5:d6:8b:de:64:9c:1e:f3:
         e5:5b:5b:73:3f:d7:c8:ec:f1:f3:8a:3d:e8:b6:d1:63:2e:fd:
         13:ec:ee:67:ed:a9:c4:3d:f3:be:16:ff:73:fd:5a:83:dc:73:
         1d:13:95:16:6b:a9:cb:9e:c2:16:ba:97:4a:2f:a0:a5:d8:33:
         65:fd:bd:d1:f3:3c:e9:89:fa:35:fb:6c:2f:d8:b1:95:17:f7:
         ca:41:af:b4:c0:da:d8:c6:42:df:07:fc:ba:46:75:98:41:6d:
         a2:ea:d5:1a:0f:b0:ac:b0:c6:47:c2:a0:06:0b:84:5d:ef:e8:
         18:de:ac:1c:ef:3e:bd:75:9b:33:94:05:45:45:35:9f:5e:b8:
         aa:2b:fe:a9:45:60:85:eb:19:1d:e0:00:c9:f0:fa:65:fc:3b:
         8a:81:d6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:14:44 2025 by rpki-client