Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/SVENS-RPKI/1/326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa
File:                     326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          DYbuPtd/Uixh3bRDY6hzRJ/O8VBE+uJBYNAcfdJtAe8=
Subject key identifier:   6A:E4:98:06:15:E8:49:16:7A:CE:26:9C:69:B0:5A:4B:0B:74:57:87
Certificate issuer:       /CN=0C3177E3D69C2E575BA929C25CA552115583F707
Certificate serial:       384F30BBF843D0268A9C4B0C4B3CD716ADFE72F5
Authority key identifier: 0C:31:77:E3:D6:9C:2E:57:5B:A9:29:C2:5C:A5:52:11:55:83:F7:07
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0C3177E3D69C2E575BA929C25CA552115583F707.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/1/326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Sun 24 Mar 2024 02:20:13 +0000
ROA not before:           Sun 24 Mar 2024 02:15:13 +0000
ROA not after:            Sun 23 Mar 2025 02:20:13 +0000
asID:                     200676
IP address blocks:        2a06:a003:b00b::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4f:30:bb:f8:43:d0:26:8a:9c:4b:0c:4b:3c:d7:16:ad:fe:72:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C3177E3D69C2E575BA929C25CA552115583F707
        Validity
            Not Before: Mar 24 02:15:13 2024 GMT
            Not After : Mar 23 02:20:13 2025 GMT
        Subject: CN=6AE4980615E849167ACE269C69B05A4B0B745787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:5e:1b:55:0d:bf:8d:93:c8:3c:de:b7:29:
                    f6:d6:62:25:69:70:5a:12:20:1e:89:eb:fb:4c:f2:
                    f2:ea:98:b0:c0:e0:af:c9:b3:b3:d1:ea:3e:d7:c0:
                    2f:3b:64:3e:af:5f:aa:62:a7:a1:65:f5:ce:ff:4b:
                    27:02:f7:ac:3b:50:32:ba:c4:44:10:8a:a5:e7:a6:
                    a8:a8:c6:d4:45:2a:a6:77:40:e8:2b:17:ae:18:52:
                    1a:cd:42:d5:f1:72:8f:d5:62:7c:3e:ad:79:e3:6c:
                    18:ad:b4:be:83:77:d5:10:c8:62:38:55:77:20:51:
                    42:93:4d:f8:69:e8:ec:df:8d:27:c3:38:ca:ce:8a:
                    3e:99:5e:11:fc:5c:62:bc:f6:32:1a:4e:5b:f1:24:
                    37:0d:08:41:07:d3:e3:cc:d1:f9:78:ae:ce:13:6f:
                    88:c8:f3:48:58:b2:c3:25:94:52:77:0e:51:b2:b9:
                    b6:6c:50:3d:7a:b1:56:22:c0:54:81:d2:a7:90:f8:
                    4b:cc:77:7c:da:56:fb:b3:f7:e5:60:55:d0:b7:74:
                    29:00:93:c9:35:c2:8f:b3:2c:2b:a8:a3:f6:33:88:
                    3e:ad:f8:b1:e7:06:93:b8:0d:f7:6f:3c:bb:91:2d:
                    c2:ef:d0:c9:88:f8:bf:d7:b3:63:6f:79:96:f8:8d:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E4:98:06:15:E8:49:16:7A:CE:26:9C:69:B0:5A:4B:0B:74:57:87
            X509v3 Authority Key Identifier:
                keyid:0C:31:77:E3:D6:9C:2E:57:5B:A9:29:C2:5C:A5:52:11:55:83:F7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/1/0C3177E3D69C2E575BA929C25CA552115583F707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0C3177E3D69C2E575BA929C25CA552115583F707.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/1/326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a003:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:d3:4d:e8:cc:02:c9:eb:86:72:0b:0e:4a:33:31:ee:5c:bc:
         36:2b:58:36:12:68:db:4a:df:fe:27:d7:c6:45:a4:9a:0c:49:
         69:f2:72:04:dd:d3:55:a8:e8:1a:c1:fc:ff:fd:0a:d3:f1:83:
         ec:a9:a1:5d:20:6b:ea:a6:6c:42:cc:9b:a8:bc:89:8b:2c:f9:
         02:c3:96:5f:27:3e:77:5c:81:89:77:b1:90:5e:13:32:91:f1:
         54:53:d3:bb:c0:c4:e2:7f:11:5a:51:32:82:5a:81:12:4c:06:
         80:92:a8:03:df:f0:22:11:04:61:82:1c:e1:86:3d:9c:93:f4:
         12:86:c0:78:e8:e5:7f:62:77:54:fc:32:38:f2:15:3c:a6:23:
         3f:e0:ce:83:c9:99:1c:a4:2d:59:3f:e1:c0:ad:0c:dc:df:9c:
         c4:c7:8e:74:33:19:b9:33:9c:7b:f3:81:8f:a6:b3:38:f0:b6:
         c2:b6:43:af:1d:a4:48:a3:e8:be:92:f9:b3:1b:18:d5:21:2b:
         ed:40:11:fd:8f:bb:64:45:ce:fb:1c:43:8b:18:e1:2e:81:a5:
         7e:7b:79:f9:05:4e:c9:63:b7:42:59:37:13:bc:76:5d:c0:72:
         ba:3e:7a:49:97:64:fc:1b:99:c6:d0:b6:1b:66:b2:f6:0b:e9:
         d0:dc:49:49
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUOE8wu/hD0CaKnEsMSzzXFq3+cvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMzMTc3RTNENjlDMkU1NzVCQTkyOUMyNUNBNTUyMTE1
NTgzRjcwNzAeFw0yNDAzMjQwMjE1MTNaFw0yNTAzMjMwMjIwMTNaMDMxMTAvBgNV
BAMTKDZBRTQ5ODA2MTVFODQ5MTY3QUNFMjY5QzY5QjA1QTRCMEI3NDU3ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIV4bVQ2/jZPIPN63KfbWYiVp
cFoSIB6J6/tM8vLqmLDA4K/Js7PR6j7XwC87ZD6vX6pip6Fl9c7/SycC96w7UDK6
xEQQiqXnpqioxtRFKqZ3QOgrF64YUhrNQtXxco/VYnw+rXnjbBittL6Dd9UQyGI4
VXcgUUKTTfhp6OzfjSfDOMrOij6ZXhH8XGK89jIaTlvxJDcNCEEH0+PM0fl4rs4T
b4jI80hYssMllFJ3DlGyubZsUD16sVYiwFSB0qeQ+EvMd3zaVvuz9+VgVdC3dCkA
k8k1wo+zLCuoo/YziD6t+LHnBpO4DfdvPLuRLcLv0MmI+L/Xs2NveZb4jcgfAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUauSYBhXoSRZ6ziacabBaSwt0V4cwHwYDVR0j
BBgwFoAUDDF349acLldbqSnCXKVSEVWD9wcwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
U1ZFTlMtUlBLSS8xLzBDMzE3N0UzRDY5QzJFNTc1QkE5MjlDMjVDQTU1MjExNTU4
M0Y3MDcuY3JsMIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5j
Oi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNl
MDE4NTc1NWM5MWJlM2Y5ZC8yLzBDMzE3N0UzRDY5QzJFNTc1QkE5MjlDMjVDQTU1
MjExNTU4M0Y3MDcuY2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuG
dHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vU1ZFTlMtUlBLSS8x
LzMyNjEzMDM2M2E2MTMwMzAzMzNhNjIzMDMwNjIzYTNhMmYzNDM4MmQzNDM4MjAz
ZDNlMjAzMjMwMzAzNjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBqADsAswDQYJKoZIhvcNAQEL
BQADggEBALXTTejMAsnrhnILDkozMe5cvDYrWDYSaNtK3/4n18ZFpJoMSWnycgTd
01Wo6BrB/P/9CtPxg+ypoV0ga+qmbELMm6i8iYss+QLDll8nPndcgYl3sZBeEzKR
8VRT07vAxOJ/EVpRMoJagRJMBoCSqAPf8CIRBGGCHOGGPZyT9BKGwHjo5X9id1T8
MjjyFTymIz/gzoPJmRykLVk/4cCtDNzfnMTHjnQzGbkznHvzgY+mszjwtsK2Q68d
pEij6L6S+bMbGNUhK+1AEf2Pu2RFzvscQ4sY4S6BpX57efkFTsljt0JZNxO8dl3A
cro+ekmXZPwbmcbQthtmsvYL6dDcSUk=
-----END CERTIFICATE-----