Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205183.roa
File:                     AS205183.roa (raw, json)
Hash identifier:          McHWw5auDkUSTCKYrstBwKIzyNe2JsZ/1QYW5qF8eDI=
Subject key identifier:   60:5F:6B:A1:1C:F3:10:A2:B3:46:0A:C5:77:02:59:47:AE:E1:E1:B5
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       3DE4139EE14A5A13E3E6EAEC3657270AC561FB96
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205183.roa
Signing time:             Sun 06 Oct 2024 04:45:14 +0000
ROA not before:           Sun 06 Oct 2024 04:40:14 +0000
ROA not after:            Sun 05 Oct 2025 04:45:14 +0000
asID:                     205183
IP address blocks:        2a0a:6040:c000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e4:13:9e:e1:4a:5a:13:e3:e6:ea:ec:36:57:27:0a:c5:61:fb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:14 2024 GMT
            Not After : Oct  5 04:45:14 2025 GMT
        Subject: CN=605F6BA11CF310A2B3460AC577025947AEE1E1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fa:08:07:6c:84:46:08:28:12:c5:ae:ba:ae:
                    9f:b0:14:d8:75:45:54:88:bc:a1:5a:dc:9b:d9:12:
                    dd:3e:b5:01:14:58:78:41:d0:d4:8c:dd:d7:fb:c0:
                    30:b7:5d:3c:2c:d8:34:6c:5b:aa:f6:50:dc:4f:e6:
                    60:b7:ad:b8:6d:e2:d5:30:72:7c:c0:8d:89:33:c8:
                    16:f5:55:d7:f5:f4:d3:52:23:ff:5b:75:04:70:5d:
                    37:45:8a:8a:38:ca:35:5d:84:3d:7f:32:bb:95:dd:
                    4f:84:02:c4:c5:40:05:37:4b:7e:3e:bf:34:46:4c:
                    c8:e1:0e:c4:01:e3:f5:d4:6f:f2:7f:fa:1d:72:c8:
                    3f:96:4d:24:81:53:09:3c:3c:12:26:2d:bc:15:3d:
                    09:94:3c:7a:0d:c0:c6:9c:57:33:f5:12:88:83:ef:
                    78:eb:8d:d6:fb:6e:47:8a:4f:34:3a:2a:7a:2f:25:
                    2b:4f:c9:46:8f:44:c1:fc:e8:de:bc:45:a5:d7:b8:
                    b3:04:10:e3:89:ac:64:ae:04:7d:c5:28:c9:df:e7:
                    df:ac:f5:1f:3b:7d:eb:ab:53:35:37:f5:10:cc:de:
                    7a:97:b3:d2:2e:24:99:91:03:d5:79:62:38:76:23:
                    60:be:9c:c6:87:ca:62:9f:ad:0f:38:b8:e3:ab:c1:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5F:6B:A1:1C:F3:10:A2:B3:46:0A:C5:77:02:59:47:AE:E1:E1:B5
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205183.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:42:15:d5:d4:33:99:bc:45:63:2f:00:7f:e7:d0:b4:2f:10:
         a4:7c:f5:47:67:9d:c3:ff:40:15:13:0b:56:08:ba:77:6a:30:
         4d:22:14:b6:df:07:30:53:1e:d1:83:9e:57:2c:d8:2e:c2:7d:
         fd:cc:0c:5c:26:61:a8:6f:ea:82:74:0c:63:d6:72:a9:16:63:
         25:c2:19:ec:e1:f6:59:2f:1d:54:4c:97:f6:76:13:3f:cb:9a:
         e5:44:f8:d6:e8:34:f3:25:7e:01:bb:7c:0c:3e:a5:b7:1c:51:
         ea:cb:69:35:73:0a:ab:8b:56:a9:79:61:86:d4:88:ea:36:46:
         5c:38:79:d2:20:33:24:60:fc:19:93:d9:eb:ac:5a:aa:06:e1:
         67:5a:a1:fc:ba:4b:c6:86:ab:56:4a:48:28:4f:ba:71:17:57:
         a1:c0:50:35:3e:1c:a3:ad:fb:fe:56:8f:e3:a4:b0:83:a8:77:
         e6:7e:7e:d6:37:ad:da:41:d6:30:cb:2f:e0:ea:0c:a9:52:ea:
         c2:27:f1:61:1c:74:74:b2:f3:5a:70:92:3c:54:0c:7e:a1:69:
         24:2f:f4:42:9f:3b:94:45:3d:35:04:0f:89:c9:66:46:df:94:
         01:3a:1a:38:98:fc:32:7b:bb:2f:93:79:23:7e:2c:ce:c0:70:
         31:38:ad:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----