Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3530303a3a2f34302d3438203d3e20323030353335.roa
File:                     326130613a363034303a3530303a3a2f34302d3438203d3e20323030353335.roa (raw, json)
Hash identifier:          T5UtD4f09B2G2Olh853TiZunWZY2eMKz4nDqpYHtk0M=
Subject key identifier:   EE:EE:F6:B5:3C:6F:CF:03:9A:21:C0:A5:B4:B1:3D:40:EA:FA:14:06
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       69BCFCF2E548383135315436BFB9DDA8EF8E9013
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3530303a3a2f34302d3438203d3e20323030353335.roa
Signing time:             Wed 14 Dec 2022 12:04:47 +0000
ROA not before:           Wed 14 Dec 2022 11:59:47 +0000
ROA not after:            Wed 13 Dec 2023 12:04:47 +0000
asID:                     200535
IP address blocks:        2a0a:6040:500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:bc:fc:f2:e5:48:38:31:35:31:54:36:bf:b9:dd:a8:ef:8e:90:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 14 11:59:47 2022 GMT
            Not After : Dec 13 12:04:47 2023 GMT
        Subject: CN=EEEEF6B53C6FCF039A21C0A5B4B13D40EAFA1406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:82:73:ee:17:0f:e6:bd:f7:f6:3d:b4:b1:39:
                    48:18:d0:14:a6:d8:c2:5e:22:7f:dd:db:61:d0:21:
                    0b:84:78:74:48:7b:f5:70:e9:49:c0:9b:37:57:e3:
                    b2:ee:7f:e2:25:51:e0:04:44:ac:e3:0b:68:76:0d:
                    4c:3f:6d:ea:43:c7:94:85:95:ee:cd:61:e4:2f:87:
                    fe:1d:00:54:a2:36:2c:d9:fc:45:f8:48:29:55:05:
                    f7:58:06:51:03:98:f0:6e:d2:72:81:d7:ff:a6:64:
                    83:f5:49:25:2f:01:e7:58:f5:da:58:98:25:77:ae:
                    a9:c0:15:cd:60:dd:8c:29:ba:6e:65:2d:93:2e:bc:
                    d0:77:9e:fd:1c:9d:09:ec:17:0c:f1:18:cd:9a:32:
                    51:2c:f7:80:b2:de:3b:6f:9f:9d:1a:01:e0:17:31:
                    16:df:da:7c:e6:7a:ed:67:45:21:5a:c4:db:12:e1:
                    87:c2:9c:f5:35:1b:ff:ac:b4:8a:17:38:5b:29:77:
                    ec:eb:ea:e9:4c:63:b4:06:04:bf:05:d4:30:49:69:
                    cf:04:3b:ba:e6:15:9f:98:74:3f:3f:e8:fa:64:b8:
                    f5:81:bd:03:f6:9e:c5:db:24:64:ca:1e:26:41:ca:
                    eb:fb:1e:4b:10:7d:3d:96:8f:2e:dc:8c:71:e8:33:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EE:F6:B5:3C:6F:CF:03:9A:21:C0:A5:B4:B1:3D:40:EA:FA:14:06
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3530303a3a2f34302d3438203d3e20323030353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:8d:ca:41:84:d3:12:b0:02:d3:4d:67:10:79:42:1f:35:
         a9:b9:a2:ad:9d:86:33:cb:3c:e6:ea:6e:20:20:2b:b8:65:bd:
         fb:f3:5f:8f:91:7c:2a:4a:45:b8:f5:77:d4:aa:2e:44:e8:70:
         72:c9:e5:3c:a7:0f:af:fc:05:5f:90:87:03:88:5a:33:9c:fa:
         1c:4f:0b:4d:f9:60:ce:81:a6:8f:f9:79:64:cd:a0:29:d1:2d:
         08:e6:74:44:7f:b7:64:4b:3b:a1:fd:7d:99:7a:15:7e:1f:c7:
         63:a9:18:c1:ab:cd:51:c4:d8:23:91:c7:d7:cd:4b:bd:2c:a9:
         51:9c:d5:0d:e0:cf:67:73:7f:34:6d:97:46:16:43:ff:4b:ec:
         bf:5e:b9:82:73:dd:1e:d3:eb:4a:a7:37:4d:a0:e3:11:d7:b1:
         43:bb:f1:c0:2e:6d:d2:19:da:32:01:ee:4b:ec:f8:09:8b:3b:
         e1:5e:35:61:3e:d1:24:9a:a1:bd:30:f8:6c:87:5f:da:7f:0a:
         9a:1c:a5:36:ea:f1:1d:32:88:cc:1d:d0:a1:c8:ce:f4:e6:cb:
         f5:d3:83:99:a5:b7:a2:e3:60:ab:1b:0c:40:fc:e7:dc:2b:c3:
         96:7f:31:21:ff:a5:86:cb:e6:27:9a:8a:e1:2e:8f:0f:2d:35:
         7a:59:6b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org