Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38392e302f32342d3234203d3e20393234.roa
File:                     32332e3133342e38392e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier:          b2cHK6uR1pPE4Y0aYurWzCIxUB9JV7AVnZHih09Mqrg=
Subject key identifier:   EC:C8:7C:3C:00:11:50:D6:BF:0C:AB:33:7B:92:90:92:9C:29:4A:3C
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       223DD0672321BDEC092934C27BFB13E1A0A29A29
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38392e302f32342d3234203d3e20393234.roa
Signing time:             Wed 23 Oct 2024 22:45:26 +0000
ROA not before:           Wed 23 Oct 2024 22:40:26 +0000
ROA not after:            Wed 22 Oct 2025 22:45:26 +0000
asID:                     924
IP address blocks:        23.134.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3d:d0:67:23:21:bd:ec:09:29:34:c2:7b:fb:13:e1:a0:a2:9a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Oct 23 22:40:26 2024 GMT
            Not After : Oct 22 22:45:26 2025 GMT
        Subject: CN=ECC87C3C001150D6BF0CAB337B9290929C294A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:06:34:68:9a:ba:a7:68:2a:d2:45:c2:39:83:
                    e4:78:b3:9b:1b:ad:6d:87:a6:1e:5c:29:d4:7f:6e:
                    82:d7:87:74:28:43:e5:b8:d2:e3:f8:bd:e4:b3:d3:
                    9e:2a:1a:45:c6:61:e1:8c:fe:ae:05:46:7a:d4:cf:
                    c0:75:bf:af:f1:9c:fd:97:19:63:0b:d2:a5:36:db:
                    9d:38:0e:8f:f9:6b:27:e1:68:fb:0b:60:de:77:ef:
                    02:ef:31:87:80:b9:69:39:ae:94:5f:f5:03:68:e4:
                    ec:94:f3:26:37:68:d7:57:19:31:73:59:9e:75:f4:
                    6c:0c:10:11:7a:bd:23:00:55:43:82:42:d3:9b:82:
                    d3:9e:2d:91:e3:d9:56:2e:40:c4:09:69:21:69:23:
                    fa:56:b8:0d:84:17:51:fb:45:2b:c9:45:80:7f:84:
                    87:39:3e:51:4f:c4:08:f4:fe:ea:de:12:e6:b0:ef:
                    3f:bf:64:ec:9b:21:1d:b2:b9:9e:94:6e:e5:6b:d9:
                    12:13:71:63:58:3e:da:fd:43:3e:b0:a8:b6:8d:f5:
                    a3:a8:9d:55:4d:72:70:b4:a6:15:08:f8:70:db:4b:
                    69:76:47:6c:1c:b7:4d:95:8d:e9:b4:56:4b:32:c0:
                    51:9b:d3:65:ab:a9:d1:c1:f4:e2:9c:ed:76:04:aa:
                    d7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C8:7C:3C:00:11:50:D6:BF:0C:AB:33:7B:92:90:92:9C:29:4A:3C
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38392e302f32342d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b1:cb:c7:f6:85:77:64:4a:d8:0a:ae:2b:30:cb:5e:68:2a:
         1a:68:03:18:f7:48:9e:2c:09:e7:ec:a4:3e:a1:01:e7:4d:b6:
         81:ef:0d:db:f6:05:5b:7f:3f:3d:6e:25:db:e4:55:6d:6f:0a:
         d2:ab:46:37:d9:50:20:52:41:af:62:c9:3d:47:1c:58:93:68:
         d4:1d:2f:72:54:9d:2c:a3:4e:3f:75:54:03:d1:18:21:ce:d9:
         37:07:a6:fa:f2:37:e2:ba:0c:be:93:d9:a9:f2:23:ac:02:8d:
         54:b4:ba:1a:4e:d1:1f:4f:43:2c:01:a2:a3:fb:e6:18:8d:45:
         7a:c9:17:db:f8:6a:56:32:0f:00:33:d9:3c:eb:7a:7b:1f:d3:
         cc:72:9b:eb:3e:52:dc:22:e9:30:dc:40:7f:87:b0:3e:10:57:
         e9:75:8b:8a:15:b5:c1:6b:65:58:fe:b7:d3:43:71:72:5b:be:
         26:6c:15:27:f1:68:ff:99:bb:75:79:0f:3a:4b:3e:41:03:eb:
         ca:ea:96:e2:75:40:34:f7:d3:ba:9c:89:c0:98:b6:56:1e:b4:
         1b:a5:61:67:ec:29:dc:fa:00:6b:37:e3:66:5e:bb:84:9c:a7:
         03:89:99:54:26:cd:93:b4:c5:3a:f7:45:88:b7:bc:98:03:ad:
         41:51:e9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----