Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198209.roa
File:                     AS198209.roa (raw, json)
Hash identifier:          Di4nAxkIpGsnmmCiLT6nAgoGsuz9TMmFHnJARGnl6n8=
Subject key identifier:   B8:78:04:48:08:2E:BE:0C:87:8F:C2:5D:9E:54:13:79:63:1E:44:30
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       586480F208195297CE3EE027B3798954B7FECF
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198209.roa
Signing time:             Fri 11 Apr 2025 01:45:59 +0000
ROA not before:           Fri 11 Apr 2025 01:40:59 +0000
ROA not after:            Fri 10 Apr 2026 01:45:59 +0000
asID:                     198209
IP address blocks:        2a05:dfc1:5600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:64:80:f2:08:19:52:97:ce:3e:e0:27:b3:79:89:54:b7:fe:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Apr 11 01:40:59 2025 GMT
            Not After : Apr 10 01:45:59 2026 GMT
        Subject: CN=B8780448082EBE0C878FC25D9E541379631E4430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:f0:72:6a:60:bc:26:a0:a4:12:22:b0:fa:
                    e1:84:e1:f7:05:03:41:82:e0:b7:69:ff:28:e7:33:
                    74:d4:63:7c:5a:5e:a2:f6:2c:e4:49:59:98:f2:ee:
                    72:69:5f:b8:ad:d4:20:80:3e:f4:13:7f:af:52:9b:
                    7d:a3:a5:86:01:fc:c8:57:19:c9:2e:0b:66:30:d5:
                    b4:91:e5:b5:91:e7:20:00:c4:ab:31:42:a6:cf:99:
                    e2:90:e2:e3:39:6e:fb:95:60:b1:38:f0:5a:4c:61:
                    f0:f8:00:4b:e5:63:79:82:16:1a:a7:76:95:f3:c4:
                    38:f5:94:15:5b:20:c5:ca:af:0e:c6:3a:ee:db:8d:
                    39:e1:be:67:be:62:9d:2f:6f:55:f2:d6:63:0c:97:
                    82:56:93:75:f7:a2:55:a3:eb:66:59:c1:24:65:c6:
                    cf:a1:b8:fb:f7:3a:ef:62:13:aa:49:c0:5d:c3:e2:
                    32:00:0e:e5:a2:6b:ae:fd:4b:fc:65:c6:be:1e:b0:
                    19:d1:d0:0d:1d:44:da:c1:36:9e:ad:b5:55:02:9d:
                    af:73:2b:71:65:7a:00:ba:18:28:53:f7:51:00:ca:
                    23:37:cf:06:47:b3:fe:f1:68:71:b5:f9:ff:0b:a8:
                    ee:c6:2f:a3:be:18:aa:be:8f:95:08:fa:fc:8b:7c:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:78:04:48:08:2E:BE:0C:87:8F:C2:5D:9E:54:13:79:63:1E:44:30
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198209.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5600::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:b5:da:a2:3e:fe:1e:ca:f6:cc:eb:6a:78:41:f2:29:6c:5a:
         be:53:0c:fd:2d:ad:77:95:fa:70:4d:cc:17:95:50:e2:9e:6d:
         a1:c5:f7:28:8e:b6:d5:87:a7:be:32:8a:a2:60:3f:ec:1c:8b:
         92:46:5e:9e:57:c9:4a:db:1c:c0:f3:81:3b:b5:bb:00:a2:30:
         34:8c:b6:e1:20:e1:00:4b:d6:f1:64:1b:8d:95:d2:7d:70:d7:
         47:c9:64:dc:7f:6f:1c:ff:d1:11:32:12:32:a3:97:cb:6b:f7:
         18:5e:b5:c0:cb:9a:f2:dd:c8:dd:0c:92:c0:37:01:0b:be:1c:
         c3:c1:97:55:21:c8:00:f3:27:0b:d1:d2:f5:93:69:31:37:3e:
         fe:de:4a:a6:92:53:6b:9e:98:3a:c5:60:11:07:27:f1:ea:3d:
         ab:6f:d5:ac:f2:45:50:48:58:ac:bb:0c:7c:ce:b5:27:0c:cf:
         ee:b0:3e:a9:b0:58:6c:e7:c3:5e:d0:3d:91:83:ea:4f:5f:78:
         c2:eb:0e:7d:3d:49:a3:e5:5a:ad:f4:2e:12:cc:86:78:0b:3e:
         d4:f4:27:f7:c5:ac:a8:2b:04:56:8a:f3:e0:d3:ed:ca:50:f9:
         b1:ef:f3:d8:6c:85:ff:f3:95:fb:d4:cf:4c:ae:59:6b:d1:f8:
         ef:49:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----