Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212762.roa
File:                     AS212762.roa (raw, json)
Hash identifier:          ev+5z3Vb2h7hXy+iFjQMkkbt2VtSOiKt/TB9xYuXefQ=
Subject key identifier:   A7:00:37:A2:59:49:5D:DE:8C:73:D1:B5:0C:F7:B6:DA:72:C0:CE:AA
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1614C9A7CF0B203E3AF2C3C86DEBE4EE07E94360
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212762.roa
Signing time:             Mon 20 May 2024 10:59:39 +0000
ROA not before:           Mon 20 May 2024 10:54:39 +0000
ROA not after:            Mon 19 May 2025 10:59:39 +0000
asID:                     212762
IP address blocks:        2a05:dfc1:5500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:14:c9:a7:cf:0b:20:3e:3a:f2:c3:c8:6d:eb:e4:ee:07:e9:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: May 20 10:54:39 2024 GMT
            Not After : May 19 10:59:39 2025 GMT
        Subject: CN=A70037A259495DDE8C73D1B50CF7B6DA72C0CEAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:13:aa:4b:b1:49:36:21:75:78:f7:ed:01:04:
                    1d:4a:73:2c:aa:f7:9f:4e:9a:38:be:32:76:dd:cd:
                    ae:64:75:c6:2a:69:a7:8a:1d:b3:84:df:74:cf:59:
                    21:d1:25:83:27:59:2b:4b:17:d2:04:95:e4:e9:0d:
                    d2:53:c6:72:c3:38:e2:6a:5f:79:88:bb:b1:56:3a:
                    a0:9c:fa:ee:1d:72:8f:74:35:20:1a:65:df:0a:26:
                    0b:47:98:41:f4:0d:ae:34:da:7a:32:7a:9b:88:f8:
                    da:9f:18:d9:04:fa:07:6c:97:61:f8:5a:78:cc:12:
                    ac:31:a5:82:13:ae:1c:60:de:54:ea:d3:df:58:ae:
                    89:c2:ed:40:c0:9b:e4:2e:af:47:0f:69:47:4c:26:
                    cb:28:37:a2:c3:05:93:4e:70:93:6e:0b:c6:1d:cf:
                    fe:5f:00:9a:21:40:3d:63:89:2d:08:83:69:e6:46:
                    26:74:14:c2:ce:6c:8e:c6:95:bd:33:33:87:e6:c8:
                    f6:d4:fc:27:4c:a6:e6:29:a9:92:27:ca:bf:ce:b3:
                    d0:8f:da:32:16:03:2c:14:e6:ba:9e:e2:da:aa:1c:
                    50:4d:3e:44:a7:f9:4a:9b:07:a0:18:74:f3:32:bd:
                    2e:16:3a:d1:ce:7e:04:ef:2a:4f:a2:c2:42:98:a1:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:00:37:A2:59:49:5D:DE:8C:73:D1:B5:0C:F7:B6:DA:72:C0:CE:AA
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5500::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:69:7a:88:66:87:b1:2d:13:eb:75:62:0e:42:25:6a:5a:7c:
         0b:01:c6:18:ff:ec:19:17:63:79:95:5e:0c:37:26:7f:70:7e:
         30:3f:e6:ee:3d:5e:e3:a3:e8:da:1f:0d:3e:0c:4a:73:39:18:
         a0:69:34:01:9f:55:ad:df:71:ad:73:59:d4:d2:27:5e:02:13:
         4f:44:77:d0:6f:0c:20:fb:6e:6a:6f:1b:5d:25:72:30:20:c9:
         f4:91:e9:55:b4:21:b9:d9:01:84:84:98:a3:b6:63:99:e6:d1:
         d1:d2:f3:a8:36:be:fb:b9:17:47:e8:1d:26:bb:11:8a:89:bc:
         f5:24:eb:0d:85:be:e1:08:73:fc:92:e5:ac:0b:ac:2a:7f:a5:
         b2:a0:15:45:e7:dd:52:8a:7c:94:15:6f:63:fc:55:30:25:45:
         99:f7:14:d7:a5:ce:fc:d5:38:21:15:ff:71:36:03:f6:82:3b:
         59:b7:1c:af:dc:73:dd:3c:89:98:92:93:b3:c2:04:0a:0a:b4:
         6b:eb:90:2c:81:a6:d0:db:d3:a8:db:da:ba:eb:17:e8:03:95:
         4a:a1:8b:53:0c:2f:44:9a:54:fa:8b:e7:49:f6:51:1f:40:ce:
         0d:85:fe:46:c8:ec:a3:6f:4f:80:24:05:4d:9d:e4:2c:74:ff:
         52:63:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----