Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a326630303a3a2f34302d3438203d3e20323030323639.roa
File:                     326130613a363034303a326630303a3a2f34302d3438203d3e20323030323639.roa (raw, json)
Hash identifier:          M/vaf5Zp+hOwO8iNCSlg7Q0D/r+E+ymq2TyzZFh+zA4=
Subject key identifier:   2A:99:68:9E:69:DA:97:E2:78:33:2E:CA:77:92:E4:9F:ED:19:DE:4E
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       420AB1C107FB82D7C497BF3B375FAEEC0D492A9D
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a326630303a3a2f34302d3438203d3e20323030323639.roa
Signing time:             Tue 27 Dec 2022 13:49:13 +0000
ROA not before:           Tue 27 Dec 2022 13:44:13 +0000
ROA not after:            Tue 26 Dec 2023 13:49:13 +0000
asID:                     200269
IP address blocks:        2a0a:6040:2f00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0a:b1:c1:07:fb:82:d7:c4:97:bf:3b:37:5f:ae:ec:0d:49:2a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 27 13:44:13 2022 GMT
            Not After : Dec 26 13:49:13 2023 GMT
        Subject: CN=2A99689E69DA97E278332ECA7792E49FED19DE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:ca:d4:34:b4:78:3d:6e:32:ec:e8:ae:2e:
                    d2:51:57:ad:e2:6b:4f:8c:20:14:1e:d0:32:f1:55:
                    ac:13:8a:12:50:b4:6d:6f:52:b3:9e:6d:8d:ff:1e:
                    db:62:54:df:4b:e6:3c:d9:2c:17:76:2b:09:f2:06:
                    7e:13:92:e0:db:d3:6e:22:5f:75:c6:9f:f3:c4:8e:
                    96:ab:45:b5:32:f4:6a:2a:05:25:a1:d4:fc:c4:54:
                    f8:3c:8f:46:7b:4b:ac:83:b4:6d:05:3f:5b:ca:a5:
                    f8:d3:c9:ff:a9:51:1f:e2:43:55:69:7d:84:8a:3a:
                    33:2a:98:ea:6e:8f:32:50:ed:35:bb:4e:2c:2f:6e:
                    bb:43:45:17:5d:6b:56:c4:d0:4d:dd:74:0b:c3:21:
                    77:cb:74:1c:de:84:1e:67:e2:b4:3f:a7:83:1c:ee:
                    4c:74:eb:54:ea:2d:d7:6a:02:df:c9:17:34:b4:24:
                    55:76:74:5d:eb:ce:8b:00:99:f4:fe:2f:a4:cd:df:
                    40:1e:9f:93:9a:80:fe:ad:00:96:2b:21:6e:0d:cc:
                    ab:76:0d:62:39:2c:98:11:ad:83:ec:4a:f8:5a:40:
                    f1:ed:50:45:14:c8:29:5b:c6:94:f7:f4:e4:f8:1b:
                    fb:5a:91:9b:de:4c:e3:a3:d7:cc:18:bb:52:75:c8:
                    61:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:99:68:9E:69:DA:97:E2:78:33:2E:CA:77:92:E4:9F:ED:19:DE:4E
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a326630303a3a2f34302d3438203d3e20323030323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:51:70:8b:d7:c2:ec:39:4e:62:3d:d3:2a:3e:c3:21:cd:35:
         ce:0a:a2:66:72:78:1f:76:9e:56:e1:2c:26:0d:26:70:a8:85:
         92:e3:ee:60:12:d7:93:05:cb:cc:aa:00:7c:e5:79:52:0e:f6:
         55:00:12:5b:14:bb:5b:e0:67:59:b1:02:a2:ca:aa:81:94:3e:
         92:c9:2d:d6:82:37:4d:ee:50:c0:94:ad:9a:dd:b6:94:73:dd:
         4f:34:31:4d:8b:ff:6b:27:24:6e:ab:47:9f:1e:09:d8:9a:9a:
         71:e1:bf:93:a0:95:73:d6:d3:2d:a2:94:46:69:14:86:1c:42:
         c4:e3:bd:71:61:3a:7a:39:dd:f4:dc:d7:a8:09:a1:ce:15:2e:
         24:d9:0e:fc:07:24:d1:2f:2e:0e:16:14:71:72:ea:f8:ce:81:
         78:80:fe:ef:46:a9:33:59:6a:99:c8:2a:ac:2b:f1:08:3e:2b:
         ad:94:99:73:94:a0:eb:1a:31:46:c2:4c:d0:af:16:e9:00:47:
         8b:ce:1b:eb:ea:d9:3c:3c:85:56:79:e2:e5:f2:82:3a:60:c9:
         17:99:c2:2b:05:31:e4:e9:0d:8d:e1:73:f4:40:48:7f:a6:48:
         a9:77:14:cf:ae:64:ba:4b:8b:e1:60:d2:a7:57:63:68:fe:02:
         3a:da:5e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org