Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3a2f33362d3438203d3e20393234.roa
File:                     323630323a666261313a3a2f33362d3438203d3e20393234.roa (raw, json)
Hash identifier:          /VRgWSz1uxn3srhSiMXPZjnOvTSRNdsB0VklFcP60Cc=
Subject key identifier:   AF:9C:F4:F5:BF:62:BF:55:11:E3:D6:32:70:51:42:6A:99:1F:5A:FB
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       6D19BCD96FF6365A5E708F8F36B9C07E739F8432
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3a2f33362d3438203d3e20393234.roa
Signing time:             Wed 24 Sep 2025 23:08:55 +0000
ROA not before:           Wed 24 Sep 2025 23:03:55 +0000
ROA not after:            Wed 23 Sep 2026 23:08:55 +0000
asID:                     924
IP address blocks:        2602:fba1::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:19:bc:d9:6f:f6:36:5a:5e:70:8f:8f:36:b9:c0:7e:73:9f:84:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Sep 24 23:03:55 2025 GMT
            Not After : Sep 23 23:08:55 2026 GMT
        Subject: CN=AF9CF4F5BF62BF5511E3D6327051426A991F5AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:b7:c0:63:a2:76:40:38:e0:36:e1:64:0c:
                    07:44:17:0c:b3:9d:41:d7:b1:5d:38:af:58:e1:a8:
                    1b:a8:66:c3:91:3c:07:31:c4:7d:43:23:7a:30:c9:
                    6a:80:37:a6:55:69:ae:9f:1c:bc:8b:c3:e5:a3:67:
                    f4:70:7b:be:89:65:21:fa:38:6f:6c:67:27:36:79:
                    6b:fb:c3:ac:ed:11:c4:60:09:46:d5:00:b4:07:a9:
                    97:69:42:6e:ac:60:b5:b2:78:8f:65:f6:a9:3f:36:
                    1a:47:de:9a:93:94:4f:5b:75:84:5c:f3:1a:c9:94:
                    05:fa:df:cf:9a:59:9e:9b:d9:8f:ad:8d:e5:54:01:
                    67:d6:54:de:b7:aa:7b:e6:60:16:ed:47:6d:dd:0d:
                    1f:97:7a:53:72:41:cd:22:94:ee:b8:57:37:4b:97:
                    74:ed:6b:ea:44:e3:a0:84:ea:7e:77:e4:10:e4:f7:
                    c9:15:a6:d1:ca:f2:a7:08:81:8a:97:b0:8c:48:d4:
                    05:16:74:aa:ac:44:01:16:82:7a:6f:d6:88:9e:51:
                    6a:2c:f5:f0:be:b9:03:27:05:9a:47:fd:15:25:26:
                    cf:29:dd:c8:a8:99:6d:d3:88:10:49:a8:19:bc:32:
                    ce:c8:88:a6:4d:1b:ed:7d:6e:10:4f:34:1a:68:35:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9C:F4:F5:BF:62:BF:55:11:E3:D6:32:70:51:42:6A:99:1F:5A:FB
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a3a2f33362d3438203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:7c:0d:53:96:d0:fa:ea:77:ba:fb:a9:d8:f8:0c:9d:e1:77:
         be:b1:06:5b:6f:c8:db:4d:65:59:ab:84:57:16:c2:e6:1a:a0:
         c0:2d:f3:52:c4:25:a5:3b:c2:75:41:a0:8f:15:f2:74:d1:c5:
         10:e5:68:94:d3:d9:15:cb:83:ec:9e:b8:f0:60:d6:c9:c7:0d:
         3d:4e:21:b2:a4:2b:58:82:2a:5d:79:63:d4:70:14:fe:91:f0:
         1a:05:56:69:01:1d:dc:58:b0:89:f6:b1:a7:60:82:62:d2:76:
         76:d3:6e:80:2c:4e:c6:60:1e:72:b7:6c:4b:6c:59:26:8e:18:
         03:33:bf:45:9c:23:90:ab:19:d1:9a:b2:dd:cc:d6:1e:d0:ca:
         43:f7:31:63:6d:fb:e2:3d:1d:1c:24:8a:7f:c4:df:58:12:01:
         8a:ca:7d:a5:fc:0d:57:07:1e:cc:50:1b:61:b6:a8:55:7b:7f:
         64:16:67:d3:07:39:dd:43:07:ce:cf:d2:13:99:e7:cc:c6:44:
         2f:bc:79:7c:2d:43:30:78:de:68:05:60:f0:71:ab:12:29:bc:
         58:fe:4e:64:e9:65:21:ea:0e:89:72:4a:84:ef:2e:7c:50:1b:
         8c:5d:cb:64:0d:2e:e4:2f:72:46:2c:2f:59:c3:b3:46:17:f4:
         14:50:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----