Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6330303a3a2f34302d3438203d3e20393234.roa
File:                     323630323a666261313a6330303a3a2f34302d3438203d3e20393234.roa (raw, json)
Hash identifier:          bGJ4VrzDNWR7ycUmUvcnsnAHDX0tEu8inPAcC9p/R14=
Subject key identifier:   D7:FC:29:A9:81:0A:C9:05:C6:87:56:5E:04:A2:FD:A3:A9:56:B2:23
Certificate issuer:       /CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
Certificate serial:       33A4A62C52940D55CC2AA65A9AD2DD0F66E32B0A
Authority key identifier: 6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6330303a3a2f34302d3438203d3e20393234.roa
Signing time:             Sun 28 Sep 2025 12:08:57 +0000
ROA not before:           Sun 28 Sep 2025 12:03:57 +0000
ROA not after:            Sun 27 Sep 2026 12:08:57 +0000
asID:                     924
IP address blocks:        2602:fba1:c00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a4:a6:2c:52:94:0d:55:cc:2a:a6:5a:9a:d2:dd:0f:66:e3:2b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42
        Validity
            Not Before: Sep 28 12:03:57 2025 GMT
            Not After : Sep 27 12:08:57 2026 GMT
        Subject: CN=D7FC29A9810AC905C687565E04A2FDA3A956B223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:5f:5a:ef:fa:e3:34:ae:f3:a9:4c:b2:a0:
                    4d:86:55:95:10:97:d0:a7:bb:12:ce:92:86:83:1b:
                    82:0b:b6:fa:0a:df:77:b0:66:36:ad:a2:4a:cb:e9:
                    fa:00:ab:bb:da:9c:b2:61:43:21:2a:8a:2d:43:28:
                    37:f4:06:8c:5e:bb:10:18:5b:8e:1a:74:49:12:1f:
                    46:9c:b4:dd:34:59:07:c6:f7:76:43:c6:b0:ca:b3:
                    5d:d8:e4:99:d6:41:55:52:b9:9e:a8:c8:c7:3b:55:
                    26:02:e7:b3:72:4b:75:f9:04:13:d2:02:b7:03:cc:
                    9f:96:f3:57:82:52:52:ed:ef:73:88:9c:f6:56:e9:
                    8c:2d:aa:40:b6:64:61:a7:b9:63:00:b0:8c:a4:fe:
                    18:90:da:18:f8:e1:a0:1b:44:c4:d4:10:b3:ae:82:
                    3b:b0:c8:4e:28:42:ae:3b:93:5b:5f:f1:f0:53:05:
                    6b:24:c6:f3:bf:22:bd:27:6a:bb:ae:c0:ea:18:41:
                    61:c3:5b:89:1b:33:e6:7f:f3:1d:62:24:4e:2d:1a:
                    ec:e1:b8:fc:a4:dc:07:85:14:bf:b3:6d:18:5b:b8:
                    76:06:00:3f:b9:03:8f:b6:ce:1c:e3:a4:ec:35:e9:
                    16:4b:b9:e5:2b:40:9f:1e:dc:ba:d0:9f:d8:9d:12:
                    fc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FC:29:A9:81:0A:C9:05:C6:87:56:5E:04:A2:FD:A3:A9:56:B2:23
            X509v3 Authority Key Identifier:
                keyid:6B:EC:1A:ED:65:08:BB:07:51:1B:01:B1:77:55:17:92:DA:EB:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/323630323a666261313a6330303a3a2f34302d3438203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba1:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:6d:9f:4c:f5:30:df:01:b6:db:1f:da:4c:b2:49:b2:bf:fd:
         64:eb:13:1b:3c:4b:21:39:43:0a:6b:14:1e:d2:d6:c9:ae:c8:
         40:f7:ca:50:fb:db:f2:36:e5:67:de:8c:52:c2:18:9c:7c:99:
         e9:1e:75:4b:e0:06:cb:af:55:d1:9f:47:f1:a8:a5:07:d4:ff:
         f1:40:4a:76:23:33:25:0d:5a:00:e3:72:f8:3f:8e:96:b4:99:
         f9:3c:34:20:15:03:82:b9:3e:28:66:13:ec:ea:a4:15:ef:0e:
         73:1f:74:02:8c:c2:c7:c9:bc:d3:95:d7:f2:6f:e3:4f:f0:e1:
         5b:56:9a:38:10:72:a9:50:f8:43:32:a9:1b:ef:bb:9b:04:36:
         99:88:2a:7a:ff:48:4e:ed:84:de:ce:4c:3d:7b:36:80:7e:18:
         e5:15:e1:b2:69:9e:e8:8c:77:4a:dc:be:4f:d5:c6:34:44:a1:
         de:87:f7:43:c8:1c:c4:ce:20:e0:87:cf:6f:1e:76:d2:be:cd:
         1d:23:18:d6:5b:b8:43:c7:b5:4f:14:80:d0:9d:4c:20:b4:b6:
         79:f6:68:fd:ec:bd:c2:54:0f:60:1b:5b:d3:23:5d:3a:08:23:
         06:85:be:ff:63:f6:7b:47:f9:cc:bc:c6:08:45:8d:9a:60:7c:
         17:ca:11:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----