Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38382e302f32342d3234203d3e20393234.roa
File:                     32332e3133342e38382e302f32342d3234203d3e20393234.roa (raw, json)
Hash identifier:          pkKPfbDwoOo7tQI8Gf7BC3mpQah9chIEKvJLcpEMWcU=
Subject key identifier:   10:B4:21:1E:A3:24:30:9E:A3:0F:7A:6C:60:1D:DA:86:C6:66:D3:81
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       0695EFBEB6D6C7F03991C60156AD0F7BB0919BBD
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38382e302f32342d3234203d3e20393234.roa
Signing time:             Wed 24 Sep 2025 23:08:55 +0000
ROA not before:           Wed 24 Sep 2025 23:03:55 +0000
ROA not after:            Wed 23 Sep 2026 23:08:55 +0000
asID:                     924
IP address blocks:        23.134.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:95:ef:be:b6:d6:c7:f0:39:91:c6:01:56:ad:0f:7b:b0:91:9b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Sep 24 23:03:55 2025 GMT
            Not After : Sep 23 23:08:55 2026 GMT
        Subject: CN=10B4211EA324309EA30F7A6C601DDA86C666D381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:32:f2:59:35:2d:9d:df:25:6e:dd:4f:9f:
                    34:f7:2f:91:91:de:19:44:d7:64:98:71:70:51:26:
                    15:58:f2:26:ef:2a:8d:ce:0d:15:12:5c:a9:57:62:
                    67:63:f7:99:bb:08:3b:cc:a3:9c:5f:d1:a9:62:bc:
                    f4:b0:60:fe:5a:e1:71:f1:27:e4:0c:2e:7c:14:93:
                    2a:65:69:29:29:63:1b:83:3b:06:db:8f:94:9c:b7:
                    f0:1a:8a:a2:3d:f3:72:ed:8b:a0:3d:68:93:7f:73:
                    05:7b:95:f3:43:32:05:17:a8:3f:a0:ca:8e:f9:7b:
                    ea:a2:6d:3e:ab:5d:52:f1:8f:e0:9d:9f:b4:5a:b2:
                    39:4f:47:5b:b7:66:66:2d:99:cf:f5:85:06:b8:6f:
                    d3:ef:b3:b3:5c:81:96:ff:c3:2a:8e:6c:6a:a3:61:
                    aa:2c:fa:fa:f3:0b:55:bc:52:48:92:80:70:4c:3a:
                    98:82:ad:0e:f8:99:7e:04:a0:7a:32:c4:ec:f0:28:
                    af:87:e4:51:62:1c:c0:21:30:2c:08:5a:e8:e0:18:
                    fa:70:93:c4:03:c6:8a:9a:2a:ef:69:3e:40:c3:26:
                    0f:8a:1e:d9:8e:71:78:02:28:35:8e:a8:93:e7:c5:
                    a9:71:34:ab:53:84:1a:18:40:30:4f:b8:13:f0:e8:
                    37:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B4:21:1E:A3:24:30:9E:A3:0F:7A:6C:60:1D:DA:86:C6:66:D3:81
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/32332e3133342e38382e302f32342d3234203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:66:70:d7:e9:08:46:ef:28:0a:71:4e:b5:e8:26:32:d2:5c:
         dc:d0:13:b5:b8:26:ba:d3:ff:a6:ce:aa:88:35:0e:38:ec:2c:
         5b:68:2d:43:ed:8e:8d:c3:75:20:3b:d9:dd:7d:3d:7b:ad:40:
         8c:ca:1f:ba:69:ad:04:34:40:83:f9:98:2e:c8:c0:e8:03:bd:
         8e:d5:c4:3d:58:ec:f8:12:60:db:a1:4d:3b:61:9f:74:bd:d9:
         80:bb:e5:52:7a:46:c3:cf:f7:10:1d:6d:a0:72:ec:c2:59:d6:
         48:6a:05:ab:02:7b:06:8c:07:77:6c:72:e2:7f:de:b1:b7:6a:
         12:11:d8:32:f0:f1:cb:5c:c5:19:bd:dc:a1:eb:7f:e7:90:0a:
         31:d2:cf:52:e0:19:35:e9:82:1a:eb:76:91:75:9c:e1:f8:80:
         29:4d:52:ec:2b:c9:97:2e:ee:f2:8c:fc:60:45:2d:a0:98:d1:
         81:89:72:19:b9:0f:b5:83:20:f6:d4:01:ec:d0:75:88:d0:25:
         e4:d4:83:4c:8c:6d:c4:84:a8:d3:32:f2:f8:df:13:e2:8e:5b:
         26:7f:f3:22:49:09:6e:7d:e9:e5:a2:a5:8f:bd:86:5c:2c:59:
         2f:82:76:57:52:d6:8a:f5:37:e4:11:e9:6d:79:1d:a4:3b:b4:
         ba:52:61:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----