Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS204931.roa
File:                     AS204931.roa (raw, json)
Hash identifier:          PVDp7c0SawTKHx2/czxPJavg0rjrpTqTT3/fbvz4Eo8=
Subject key identifier:   4A:E6:86:6C:EC:85:F8:73:75:74:B2:E8:E1:0A:97:12:25:9A:F6:B5
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4A4DC1F08BCC3E631579B0BD1E653F7F9DA23B32
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS204931.roa
Signing time:             Tue 08 Apr 2025 10:45:58 +0000
ROA not before:           Tue 08 Apr 2025 10:40:58 +0000
ROA not after:            Tue 07 Apr 2026 10:45:58 +0000
asID:                     204931
IP address blocks:        2a05:dfc1:4c00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4d:c1:f0:8b:cc:3e:63:15:79:b0:bd:1e:65:3f:7f:9d:a2:3b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Apr  8 10:40:58 2025 GMT
            Not After : Apr  7 10:45:58 2026 GMT
        Subject: CN=4AE6866CEC85F8737574B2E8E10A9712259AF6B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:c9:9f:1d:8a:04:dd:2a:ca:a9:39:63:a1:
                    58:52:d9:6d:8d:d3:7b:95:3f:9c:85:db:a3:45:0f:
                    c2:c4:2a:32:cb:f1:bf:26:40:4a:97:e8:60:02:44:
                    14:bd:b5:05:c2:af:3b:7b:3e:29:69:8d:4e:95:46:
                    d9:c1:49:33:f8:60:ab:90:c6:e9:2d:dd:9a:b2:c5:
                    cf:3e:12:ad:a4:d6:11:9f:a5:7d:55:62:de:24:28:
                    de:33:30:5f:45:ea:6b:93:b9:e8:16:77:71:93:cf:
                    8b:1a:05:f5:0b:b2:f3:b9:b6:55:fe:cb:13:2b:3b:
                    e7:e2:b9:5f:a0:f7:f8:07:21:78:02:d9:17:26:92:
                    4f:9d:cc:29:d5:5a:62:53:28:51:62:05:85:31:f5:
                    a1:79:cf:42:35:b0:44:2a:c5:10:16:0d:7d:d5:0c:
                    2d:65:c0:b3:01:0f:39:8d:d9:77:47:08:80:d5:7c:
                    79:77:d8:67:43:2d:fa:92:7b:84:4f:70:00:61:c8:
                    7b:75:7f:38:7d:23:f8:7f:9f:00:9c:5b:f5:51:c3:
                    2d:d4:18:ff:7d:2e:74:58:1a:b5:b9:fd:13:32:bc:
                    ef:e4:aa:e2:a8:f2:14:e3:4a:5f:15:9f:01:58:5a:
                    6a:3d:86:0e:fc:9b:c6:d5:a5:96:89:c5:9a:b3:83:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E6:86:6C:EC:85:F8:73:75:74:B2:E8:E1:0A:97:12:25:9A:F6:B5
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS204931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:4c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:b5:77:d7:bf:ea:2f:0d:4a:bf:a9:1a:60:ab:db:44:78:b7:
         80:8b:0e:34:c7:a9:b4:bd:fb:1b:99:cb:69:3c:b3:aa:0c:1f:
         54:1b:0b:68:a8:fb:25:10:b6:f6:fa:bf:29:39:f6:dd:2f:8c:
         63:6e:7a:11:0a:21:78:b1:26:0d:23:1b:f8:0d:a4:c9:3d:39:
         35:9b:5a:9a:f9:cf:e9:6f:cb:99:41:13:aa:af:77:5a:1d:b9:
         1c:f0:ac:8a:89:b4:d2:07:20:42:d5:1c:7e:c7:e1:3e:f6:99:
         b6:48:57:6f:54:3e:1b:92:5f:91:3b:25:ed:0d:0b:d4:9f:a1:
         05:7c:08:03:df:5a:dd:1e:3f:a2:9c:de:76:5b:00:6c:91:fc:
         4a:68:9d:db:4a:98:7e:2c:5c:2b:15:bd:61:eb:f7:46:36:b2:
         0d:f4:bb:83:3c:ba:13:03:65:e6:6d:41:1c:2a:8f:8a:19:01:
         af:3e:17:29:d0:1a:29:37:ed:65:6e:e1:dd:1e:10:83:79:6a:
         9a:0d:ff:f3:41:12:eb:a0:e0:a9:40:18:8e:da:6e:7b:01:40:
         43:93:18:13:60:e3:92:81:b8:d6:de:5b:59:c0:79:cf:be:ea:
         17:f6:36:e7:9f:4a:ee:b3:83:ff:82:b5:37:8f:a4:e6:38:d7:
         7a:21:2d:5d
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUSk3B8IvMPmMVebC9HmU/f52iOzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNTA0MDgxMDQwNThaFw0yNjA0MDcxMDQ1NThaMDMxMTAvBgNV
BAMTKDRBRTY4NjZDRUM4NUY4NzM3NTc0QjJFOEUxMEE5NzEyMjU5QUY2QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRScmfHYoE3SrKqTljoVhS2W2N
03uVP5yF26NFD8LEKjLL8b8mQEqX6GACRBS9tQXCrzt7PilpjU6VRtnBSTP4YKuQ
xukt3Zqyxc8+Eq2k1hGfpX1VYt4kKN4zMF9F6muTuegWd3GTz4saBfULsvO5tlX+
yxMrO+fiuV+g9/gHIXgC2Rcmkk+dzCnVWmJTKFFiBYUx9aF5z0I1sEQqxRAWDX3V
DC1lwLMBDzmN2XdHCIDVfHl32GdDLfqSe4RPcABhyHt1fzh9I/h/nwCcW/VRwy3U
GP99LnRYGrW5/RMyvO/kquKo8hTjSl8VnwFYWmo9hg78m8bVpZaJxZqzg6qVAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUSuaGbOyF+HN1dLLo4QqXEiWa9rUwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjA0OTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwUwwDQYJKoZIhvcNAQELBQADggEBAAC1
d9e/6i8NSr+pGmCr20R4t4CLDjTHqbS9+xuZy2k8s6oMH1QbC2io+yUQtvb6vyk5
9t0vjGNuehEKIXixJg0jG/gNpMk9OTWbWpr5z+lvy5lBE6qvd1oduRzwrIqJtNIH
IELVHH7H4T72mbZIV29UPhuSX5E7Je0NC9SfoQV8CAPfWt0eP6Kc3nZbAGyR/Epo
ndtKmH4sXCsVvWHr90Y2sg30u4M8uhMDZeZtQRwqj4oZAa8+FynQGik37WVu4d0e
EIN5apoN//NBEuug4KlAGI7abnsBQEOTGBNg45KBuNbeW1nAec++6hf2NuefSu6z
g/+CtTePpOY413ohLV0=
-----END CERTIFICATE-----