Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198872.roa
File:                     AS198872.roa (raw, json)
Hash identifier:          y5UO7r1R6RQMkxM/esLk8ebVFrkLGPc42xca18F+Y7A=
Subject key identifier:   50:D0:BF:8C:AD:F6:D6:88:93:A4:D4:07:03:FA:8F:C9:58:A7:B5:41
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1AABBD0FD6698740188A73715A0CD11C53BD8150
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198872.roa
Signing time:             Wed 09 Apr 2025 00:45:58 +0000
ROA not before:           Wed 09 Apr 2025 00:40:58 +0000
ROA not after:            Wed 08 Apr 2026 00:45:58 +0000
asID:                     198872
IP address blocks:        2a05:dfc1:4f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ab:bd:0f:d6:69:87:40:18:8a:73:71:5a:0c:d1:1c:53:bd:81:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Apr  9 00:40:58 2025 GMT
            Not After : Apr  8 00:45:58 2026 GMT
        Subject: CN=50D0BF8CADF6D68893A4D40703FA8FC958A7B541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:e4:f0:cd:a0:ff:0c:14:e1:7d:f0:87:58:
                    88:f5:1b:0c:aa:e5:af:d7:b1:91:fe:96:81:95:b9:
                    82:c5:f2:8a:05:f0:b5:9d:d1:bf:75:1a:76:84:69:
                    15:a8:f0:56:e0:43:c8:8b:2b:f4:74:be:9e:c8:86:
                    10:90:75:a4:b2:ff:79:5a:4b:7b:9c:6f:d1:75:d3:
                    de:cd:c7:d7:ed:3a:7c:f9:81:f1:67:aa:b6:2a:4a:
                    46:36:84:bf:55:ea:f4:3b:b7:d6:43:13:8e:a7:3d:
                    e4:11:a8:13:a1:52:62:1b:e0:f7:d1:67:1b:b4:95:
                    a3:95:88:ab:ca:bc:f2:c6:18:00:4a:a9:5d:00:e7:
                    83:74:d0:23:c0:31:14:8e:1f:e0:63:62:44:a5:de:
                    76:19:0d:c4:5b:cb:5f:3b:e2:38:48:f1:26:44:95:
                    03:e0:66:06:6c:6d:63:e7:c9:7d:b3:00:b0:6f:0b:
                    69:e9:23:06:79:32:96:4d:44:a2:9e:41:ef:b2:33:
                    af:9b:48:a1:0d:61:c1:00:74:26:a5:4a:52:fb:dd:
                    8c:9b:78:ff:21:02:47:3a:48:da:14:82:cf:64:5a:
                    a6:b0:f4:92:72:8b:6b:37:1a:89:ab:89:d8:43:88:
                    e1:63:3e:25:65:f7:ef:b4:6e:63:64:81:09:d8:89:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D0:BF:8C:AD:F6:D6:88:93:A4:D4:07:03:FA:8F:C9:58:A7:B5:41
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198872.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:4f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:55:02:6d:c7:2c:a8:8a:4d:10:4c:94:0d:29:0a:5e:e6:37:
         39:a6:5f:ae:b0:9f:5d:a3:49:fe:0d:81:bb:5c:60:f7:14:55:
         fe:fd:fb:53:ac:fc:3a:c2:eb:ee:72:ea:4c:78:19:b2:a5:c1:
         ee:e5:23:ea:d0:26:2c:df:7f:ca:4d:53:c0:23:97:63:80:53:
         2b:f6:0c:44:11:95:ac:1b:ad:9e:86:03:6f:14:4d:8f:3e:2b:
         76:25:f8:22:aa:a0:14:5c:d1:36:f6:b6:e0:8d:03:4c:52:61:
         ae:bd:30:5c:bd:31:5f:13:1d:58:6f:8b:1a:5b:92:1a:a4:fb:
         d3:10:63:21:c1:b4:19:ce:10:25:e4:d6:11:6e:00:c7:09:9b:
         a2:36:73:87:b3:e8:8c:f8:3f:c8:3a:ea:1e:63:85:a9:e0:8d:
         6c:ff:dc:af:bf:3b:48:bf:e4:e5:06:ff:56:83:cb:28:01:a5:
         21:a9:ab:69:c1:11:47:c3:08:b2:18:0d:b0:ba:b9:2d:70:92:
         c4:8a:98:a5:f5:e1:1a:16:be:98:a0:07:d3:18:42:f6:30:64:
         e7:36:cb:bf:0c:e1:70:90:c2:f8:2a:7a:16:8c:2b:31:02:ea:
         fe:46:e0:0a:4f:26:f1:59:59:7c:99:1d:45:a5:99:e9:85:f6:
         27:30:fb:c9
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUGqu9D9Zph0AYinNxWgzRHFO9gVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNTA0MDkwMDQwNThaFw0yNjA0MDgwMDQ1NThaMDMxMTAvBgNV
BAMTKDUwRDBCRjhDQURGNkQ2ODg5M0E0RDQwNzAzRkE4RkM5NThBN0I1NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV9uTwzaD/DBThffCHWIj1Gwyq
5a/XsZH+loGVuYLF8ooF8LWd0b91GnaEaRWo8FbgQ8iLK/R0vp7IhhCQdaSy/3la
S3ucb9F1097Nx9ftOnz5gfFnqrYqSkY2hL9V6vQ7t9ZDE46nPeQRqBOhUmIb4PfR
Zxu0laOViKvKvPLGGABKqV0A54N00CPAMRSOH+BjYkSl3nYZDcRby1874jhI8SZE
lQPgZgZsbWPnyX2zALBvC2npIwZ5MpZNRKKeQe+yM6+bSKENYcEAdCalSlL73Yyb
eP8hAkc6SNoUgs9kWqaw9JJyi2s3GomridhDiOFjPiVl9++0bmNkgQnYiRf5AgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUUNC/jK321oiTpNQHA/qPyVintUEwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMTk4ODcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwU8wDQYJKoZIhvcNAQELBQADggEBAFRV
Am3HLKiKTRBMlA0pCl7mNzmmX66wn12jSf4NgbtcYPcUVf79+1Os/DrC6+5y6kx4
GbKlwe7lI+rQJizff8pNU8Ajl2OAUyv2DEQRlawbrZ6GA28UTY8+K3Yl+CKqoBRc
0Tb2tuCNA0xSYa69MFy9MV8THVhvixpbkhqk+9MQYyHBtBnOECXk1hFuAMcJm6I2
c4ez6Iz4P8g66h5jhangjWz/3K+/O0i/5OUG/1aDyygBpSGpq2nBEUfDCLIYDbC6
uS1wksSKmKX14RoWvpigB9MYQvYwZOc2y78M4XCQwvgqehaMKzEC6v5G4ApPJvFZ
WXyZHUWlmemF9icw+8k=
-----END CERTIFICATE-----