Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202338.roa
File:                     AS202338.roa (raw, json)
Hash identifier:          udH8hdDKAPT1LGH8+sUGuU4gffMHOQRcj2X23vDEavQ=
Subject key identifier:   47:52:25:85:84:41:D9:6D:7A:89:CE:96:68:7C:31:F8:9C:36:92:C3
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4F6557C81836420D780B6BA0D0452FF442575C
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202338.roa
Signing time:             Fri 11 Apr 2025 13:45:59 +0000
ROA not before:           Fri 11 Apr 2025 13:40:59 +0000
ROA not after:            Fri 10 Apr 2026 13:45:59 +0000
asID:                     202338
IP address blocks:        2a05:dfc1:8800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:65:57:c8:18:36:42:0d:78:0b:6b:a0:d0:45:2f:f4:42:57:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Apr 11 13:40:59 2025 GMT
            Not After : Apr 10 13:45:59 2026 GMT
        Subject: CN=475225858441D96D7A89CE96687C31F89C3692C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:b9:0d:37:c2:70:f3:50:50:42:ff:fe:13:
                    09:b2:13:42:4a:a9:90:da:1c:5e:86:7e:94:8c:28:
                    29:81:61:b8:be:07:2f:20:f8:a5:86:51:3e:98:10:
                    ef:51:dc:52:68:98:8b:cf:15:45:3b:fe:28:81:eb:
                    06:99:f1:24:5c:b5:67:3e:fc:79:33:ba:fb:87:38:
                    13:ee:e1:41:c9:11:26:19:04:6c:75:47:b6:f6:f5:
                    ff:3e:8d:a1:7a:28:9f:18:63:44:98:b0:c5:e5:94:
                    d9:d9:d8:5f:e9:4a:ab:ae:be:82:a2:51:22:55:09:
                    44:e5:e6:ee:81:0a:7f:a0:e2:5c:1b:5c:51:fd:11:
                    a5:c1:4d:c3:33:a8:84:c7:6e:05:1e:72:76:39:14:
                    73:21:fc:82:23:4f:ef:38:cb:71:0e:c3:4d:2a:5e:
                    2c:e7:01:eb:c2:eb:8a:cb:d5:13:75:71:0b:a9:54:
                    0d:94:04:93:0c:da:8e:c1:1f:13:92:75:5e:61:51:
                    ad:be:26:2a:13:5c:5a:3d:4c:b4:d5:d8:74:1e:4a:
                    00:e4:81:06:b7:9c:5c:50:7c:78:a1:41:7f:18:03:
                    c8:e4:bb:5d:51:ca:80:08:2a:f7:01:c4:fb:6d:32:
                    69:56:df:70:13:bd:6e:cf:49:47:3a:00:18:29:6e:
                    6f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:52:25:85:84:41:D9:6D:7A:89:CE:96:68:7C:31:F8:9C:36:92:C3
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:6d:17:e5:fc:d7:42:6f:f3:8c:0c:fb:c8:6e:3c:4a:27:a5:
         c6:20:5a:10:38:82:75:e5:8e:36:f4:5b:32:2d:18:47:8b:22:
         a5:bd:f4:d2:6d:cf:42:0f:07:32:82:53:c5:7c:d4:45:f9:88:
         8c:4a:66:e1:e6:0b:bc:7a:b0:78:fa:70:c3:5b:17:fa:83:e0:
         12:de:19:7b:db:cd:93:0a:30:72:77:40:58:35:20:2f:e0:eb:
         48:83:c7:66:f9:03:96:b9:a5:da:97:b9:ff:31:04:9c:a4:9c:
         e6:69:87:70:cd:2f:f3:6e:8d:38:1f:bc:3b:c7:66:c0:68:4e:
         02:0e:cc:2d:33:9c:cc:c4:c5:57:f1:78:4d:36:ca:44:d4:0f:
         54:36:dd:c6:98:87:31:ce:ea:45:04:5f:55:e8:51:c9:b4:ef:
         82:b0:43:b2:9d:47:53:34:69:a6:6a:6d:ae:ea:62:d1:45:5d:
         94:07:6c:b0:dc:87:62:11:19:b7:fc:93:2f:fc:2b:1e:3a:b5:
         47:8b:1d:76:57:8c:74:a2:32:92:fe:60:8b:aa:ca:32:ec:42:
         48:3a:32:3c:7d:e9:e3:3f:90:be:ff:be:12:79:45:d4:f6:d9:
         ea:50:dd:c2:ec:cc:66:49:6f:a1:db:72:26:79:cb:31:4b:2c:
         a3:d2:6b:a6
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgITT2VXyBg2Qg14C2ug0EUv9EJXXDANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygwRTM1N0REQTA0QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2
RDg1QUY5MB4XDTI1MDQxMTEzNDA1OVoXDTI2MDQxMDEzNDU1OVowMzExMC8GA1UE
AxMoNDc1MjI1ODU4NDQxRDk2RDdBODlDRTk2Njg3QzMxRjg5QzM2OTJDMzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCOuQ03wnDzUFBC//4TCbITQkqp
kNocXoZ+lIwoKYFhuL4HLyD4pYZRPpgQ71HcUmiYi88VRTv+KIHrBpnxJFy1Zz78
eTO6+4c4E+7hQckRJhkEbHVHtvb1/z6NoXoonxhjRJiwxeWU2dnYX+lKq66+gqJR
IlUJROXm7oEKf6DiXBtcUf0RpcFNwzOohMduBR5ydjkUcyH8giNP7zjLcQ7DTSpe
LOcB68LrisvVE3VxC6lUDZQEkwzajsEfE5J1XmFRrb4mKhNcWj1MtNXYdB5KAOSB
BrecXFB8eKFBfxgDyOS7XVHKgAgq9wHE+20yaVbfcBO9bs9JRzoAGClub2cCAwEA
AaOCAfQwggHwMB0GA1UdDgQWBBRHUiWFhEHZbXqJzpZofDH4nDaSwzAfBgNVHSME
GDAWgBQONX3aBLgQdiYST1LPwkObdtha+TAOBgNVHQ8BAf8EBAMCB4AwbwYDVR0f
BGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9D
TE9VRElFLVJQS0kvMC8wRTM1N0REQTA0QjgxMDc2MjYxMjRGNTJDRkMyNDM5Qjc2
RDg1QUY5LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wRTM1N0REQTA0QjgxMDc2MjYxMjRGNTJDRkMy
NDM5Qjc2RDg1QUY5LmNlcjBaBggrBgEFBQcBCwROMEwwSgYIKwYBBQUHMAuGPnJz
eW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAv
QVMyMDIzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BiDANBgkqhkiG9w0BAQsFAAOCAQEAaG0X
5fzXQm/zjAz7yG48SielxiBaEDiCdeWONvRbMi0YR4sipb300m3PQg8HMoJTxXzU
RfmIjEpm4eYLvHqwePpww1sX+oPgEt4Ze9vNkwowcndAWDUgL+DrSIPHZvkDlrml
2pe5/zEEnKSc5mmHcM0v826NOB+8O8dmwGhOAg7MLTOczMTFV/F4TTbKRNQPVDbd
xpiHMc7qRQRfVehRybTvgrBDsp1HUzRppmptrupi0UVdlAdssNyHYhEZt/yTL/wr
Hjq1R4sddleMdKIykv5gi6rKMuxCSDoyPH3p4z+Qvv++EnlF1PbZ6lDdwuzMZklv
odtyJnnLMUsso9Jrpg==
-----END CERTIFICATE-----