Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200959.roa
File:                     AS200959.roa (raw, json)
Hash identifier:          oaV/mu/VSmt7Ot8H6UaZw+k98VgvS/q1XJduvkNxlcY=
Subject key identifier:   74:E7:23:A8:EF:91:C1:F6:F4:13:C0:C5:E1:01:DA:49:C0:FC:B1:0F
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1E2F90FE30EC4FD97FB8C25C5F0DBD7744557408
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200959.roa
Signing time:             Sun 06 Oct 2024 04:45:04 +0000
ROA not before:           Sun 06 Oct 2024 04:40:04 +0000
ROA not after:            Sun 05 Oct 2025 04:45:04 +0000
asID:                     200959
IP address blocks:        2a0a:6040:6c00::/40 maxlen: 48
                          2a0a:6040:e500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2f:90:fe:30:ec:4f:d9:7f:b8:c2:5c:5f:0d:bd:77:44:55:74:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:04 2024 GMT
            Not After : Oct  5 04:45:04 2025 GMT
        Subject: CN=74E723A8EF91C1F6F413C0C5E101DA49C0FCB10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:da:2a:b3:41:a8:f0:a9:98:20:10:c8:8c:
                    78:36:7e:0b:78:fb:f4:00:a2:36:62:79:88:72:a6:
                    b3:d4:58:57:6d:30:60:e6:93:a3:40:dc:ab:38:7f:
                    ff:6b:f3:05:f6:57:f4:08:e6:4e:04:96:0c:a3:48:
                    d5:61:aa:ad:1b:bf:d9:ba:13:3d:48:ff:12:77:94:
                    b7:d9:17:72:01:05:15:53:7f:fc:8d:55:ca:b7:78:
                    81:2c:67:f9:dc:ab:c5:e2:7b:df:55:44:1e:19:92:
                    66:cb:1b:9e:d7:da:3f:21:54:98:c2:1a:0d:d2:74:
                    47:33:16:5b:16:f3:1d:0a:09:c8:2d:34:44:90:e2:
                    35:7e:96:c7:a8:46:b5:43:f1:ba:67:02:2d:e3:4f:
                    9e:36:73:a4:bf:42:ad:6f:b9:fd:94:99:ad:33:64:
                    42:26:7e:35:74:e5:de:f4:ef:1a:43:d5:88:35:8b:
                    59:88:ab:b9:29:cb:83:42:70:01:94:23:84:b8:3b:
                    0e:38:08:ba:16:42:8a:04:ed:b0:cd:e1:0b:59:fd:
                    56:0a:a8:d3:c6:18:41:d7:26:af:02:b8:c5:67:5c:
                    c2:db:f9:20:5f:a1:de:7c:f0:87:ae:74:f2:d8:75:
                    2b:f5:a0:57:82:d0:3b:e3:86:40:8b:70:5a:33:e1:
                    a7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E7:23:A8:EF:91:C1:F6:F4:13:C0:C5:E1:01:DA:49:C0:FC:B1:0F
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200959.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6c00::/40
                  2a0a:6040:e500::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:01:6f:55:aa:6f:cf:eb:4b:26:a2:ab:09:22:38:b9:96:4a:
         a2:ed:d1:da:97:a6:b5:24:62:e1:1d:18:e0:b2:19:75:5d:83:
         15:c4:a0:c6:44:ac:37:2a:9b:60:78:df:92:03:ce:02:93:94:
         4a:51:dc:fc:07:a5:1e:ec:a4:6b:d2:c9:d2:1f:08:f7:0b:c2:
         16:b2:4f:7e:f0:65:9e:b2:60:89:4d:ca:00:59:85:41:e0:7c:
         42:20:e8:d9:73:99:44:c1:18:fc:7b:cc:50:49:e9:b4:c0:9a:
         fd:1e:b6:83:64:b2:79:ab:0f:46:eb:9b:05:08:3f:83:5c:58:
         5d:c9:1e:9f:f4:2b:7d:56:3a:16:d1:c2:cc:eb:c4:9c:83:aa:
         e8:56:e3:65:2b:97:08:1f:8f:f1:c1:be:64:10:74:9b:e1:37:
         6f:28:12:bc:bb:b9:1d:eb:9e:df:f6:65:b5:0e:20:ad:fa:5d:
         1b:49:1a:9b:f2:92:18:dc:d7:93:f8:41:8c:dc:10:da:30:3b:
         88:d5:7b:84:e3:67:1b:b6:79:a9:39:cf:dd:79:27:a2:e0:72:
         3a:b8:18:26:ad:03:96:4a:ad:43:66:f2:f1:63:a4:f7:6d:51:
         58:ce:f9:00:01:ee:43:d3:e1:db:22:3a:ab:ae:bd:4c:14:d1:
         d2:1e:d0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----