Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a396630303a3a2f34302d3430203d3e203531303139.roa
File:                     326130613a363034303a396630303a3a2f34302d3430203d3e203531303139.roa (raw, json)
Hash identifier:          iOLMoUJvtzU3V9OjOx+PKhcJUzAg2o4qelnbu6GFOgE=
Subject key identifier:   5F:02:98:A3:71:F5:07:94:64:60:44:97:54:C1:DE:51:4A:79:11:8F
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1212CB521517D7BE46438A9015A245F95DB79E16
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a396630303a3a2f34302d3430203d3e203531303139.roa
Signing time:             Wed 21 Dec 2022 22:04:41 +0000
ROA not before:           Wed 21 Dec 2022 21:59:41 +0000
ROA not after:            Wed 20 Dec 2023 22:04:41 +0000
asID:                     51019
IP address blocks:        2a0a:6040:9f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:12:cb:52:15:17:d7:be:46:43:8a:90:15:a2:45:f9:5d:b7:9e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 21 21:59:41 2022 GMT
            Not After : Dec 20 22:04:41 2023 GMT
        Subject: CN=5F0298A371F507946460449754C1DE514A79118F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:15:c1:9a:27:0e:c1:f7:c1:b6:d3:f9:bd:d3:
                    82:bd:e8:c6:0b:a1:d5:d7:98:22:99:45:fd:d2:a1:
                    c9:cd:15:2b:99:57:26:65:ca:ac:8b:28:2d:58:29:
                    80:85:3b:15:f6:4c:2b:6f:52:25:ba:a9:5c:bc:30:
                    8f:5e:e8:5a:98:ab:fc:33:13:fe:b2:c8:fe:a5:bc:
                    7f:d5:70:14:cb:63:48:52:9b:46:c9:58:a4:1e:24:
                    92:d2:c3:e6:ab:b1:30:69:92:a1:65:18:fd:0c:76:
                    f7:06:e2:a0:53:37:e1:da:cd:c4:a1:37:03:1f:20:
                    41:c8:2f:b7:d5:84:bc:ed:ea:bc:31:da:ff:f5:e7:
                    4c:f2:ad:54:67:7d:9c:6c:25:1a:50:15:a7:2d:ed:
                    ce:e2:cf:d5:bf:94:3d:d9:c8:f6:0b:dd:26:0a:fc:
                    d4:f7:24:c7:27:42:34:79:40:7e:34:d0:04:49:37:
                    dd:8e:35:c6:ef:e9:b2:38:a7:f4:6d:8a:15:d3:dd:
                    1d:2a:e0:58:a6:09:cf:ff:5f:dd:61:90:b8:56:73:
                    f0:e1:d7:74:89:43:60:f4:ee:24:a1:af:21:89:da:
                    5e:59:59:66:75:38:da:4c:ce:9e:73:d5:fa:3a:da:
                    68:dc:74:fe:c5:af:ea:db:7b:ae:3d:96:94:98:20:
                    92:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:02:98:A3:71:F5:07:94:64:60:44:97:54:C1:DE:51:4A:79:11:8F
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a396630303a3a2f34302d3430203d3e203531303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:9f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:43:8b:79:1d:e5:03:51:b3:11:2f:02:5e:9f:72:a4:74:
         da:4e:8f:42:29:1d:73:54:c6:5d:01:62:26:32:d2:7e:df:3b:
         b1:b1:14:3a:ce:d2:f9:b9:e2:aa:28:27:77:10:e1:97:4d:05:
         d2:7f:b9:9a:93:bc:d9:8e:b6:1b:b1:db:15:66:a5:b5:07:c1:
         46:cb:fb:9e:56:b9:42:01:a8:34:90:01:5d:dc:08:88:a7:af:
         ee:0c:dc:10:77:47:d6:1a:dc:0b:6c:ba:89:9b:0d:b6:13:85:
         7a:9b:34:69:a0:95:01:92:03:5d:5a:27:56:7a:42:d6:6b:39:
         1f:2b:79:66:9a:e2:d2:6c:60:49:68:7d:6e:a2:af:24:c8:cc:
         ee:e9:6f:4a:c0:79:04:a4:a9:26:c2:a2:4e:8b:56:8c:ef:94:
         31:d9:de:17:6b:b3:48:72:5e:d8:53:7c:78:ef:99:5b:d0:03:
         57:d7:80:d0:c7:e3:c2:19:36:4e:53:b3:c2:c1:c6:22:0a:c9:
         a7:1e:ed:9d:cd:f9:e2:08:d3:79:5e:08:80:a3:fb:6b:87:a6:
         48:17:2a:9b:72:68:6f:3d:2b:25:09:f9:37:67:41:a7:6d:fe:
         fd:ad:c5:e7:98:c7:2e:85:09:d5:55:e3:4f:76:2d:08:82:6e:
         e7:88:3d:5a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUEhLLUhUX175GQ4qQFaJF+V23nhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMjEyMTU5NDFaFw0yMzEyMjAyMjA0NDFaMDMxMTAvBgNV
BAMTKDVGMDI5OEEzNzFGNTA3OTQ2NDYwNDQ5NzU0QzFERTUxNEE3OTExOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXFcGaJw7B98G20/m904K96MYL
odXXmCKZRf3SocnNFSuZVyZlyqyLKC1YKYCFOxX2TCtvUiW6qVy8MI9e6FqYq/wz
E/6yyP6lvH/VcBTLY0hSm0bJWKQeJJLSw+arsTBpkqFlGP0MdvcG4qBTN+HazcSh
NwMfIEHIL7fVhLzt6rwx2v/150zyrVRnfZxsJRpQFact7c7iz9W/lD3ZyPYL3SYK
/NT3JMcnQjR5QH400ARJN92ONcbv6bI4p/RtihXT3R0q4FimCc//X91hkLhWc/Dh
13SJQ2D07iShryGJ2l5ZWWZ1ONpMzp5z1fo62mjcdP7Fr+rbe649lpSYIJL5AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUXwKYo3H1B5RkYESXVMHeUUp5EY8wHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGTBggrBgEFBQcB
CwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2EzOTY2
MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM1MzEzMDMxMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD
BgAqCmBAnzANBgkqhkiG9w0BAQsFAAOCAQEAY9ZDi3kd5QNRsxEvAl6fcqR02k6P
Qikdc1TGXQFiJjLSft87sbEUOs7S+bniqigndxDhl00F0n+5mpO82Y62G7HbFWal
tQfBRsv7nla5QgGoNJABXdwIiKev7gzcEHdH1hrcC2y6iZsNthOFeps0aaCVAZID
XVonVnpC1ms5Hyt5Zpri0mxgSWh9bqKvJMjM7ulvSsB5BKSpJsKiTotWjO+UMdne
F2uzSHJe2FN8eO+ZW9ADV9eA0Mfjwhk2TlOzwsHGIgrJpx7tnc354gjTeV4IgKP7
a4emSBcqm3Jobz0rJQn5N2dBp23+/a3F55jHLoUJ1VXjT3YtCIJu54g9Wg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org