Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3a2f34302d3438203d3e20323033363335.roa
File:                     326130613a363034303a3a2f34302d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          ePwv4LL3gsFF5OqpxnmoO1jC2P493581eG2VRAGekr4=
Subject key identifier:   E0:94:A8:9E:E2:7B:3B:80:AB:31:A7:EC:B2:CD:A6:EE:D9:84:DA:E7
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4C849FB8297B06F985D507613AAAD90FEFE6F4D0
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3a2f34302d3438203d3e20323033363335.roa
Signing time:             Wed 21 Dec 2022 22:13:39 +0000
ROA not before:           Wed 21 Dec 2022 22:08:39 +0000
ROA not after:            Wed 20 Dec 2023 22:13:39 +0000
asID:                     203635
IP address blocks:        2a0a:6040::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:84:9f:b8:29:7b:06:f9:85:d5:07:61:3a:aa:d9:0f:ef:e6:f4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 21 22:08:39 2022 GMT
            Not After : Dec 20 22:13:39 2023 GMT
        Subject: CN=E094A89EE27B3B80AB31A7ECB2CDA6EED984DAE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:18:a9:b2:97:74:03:0a:82:04:41:ab:91:
                    07:90:23:0d:33:ef:d7:a5:55:3f:c0:b3:15:f1:db:
                    1b:bc:9c:c6:ec:97:ed:58:d3:64:38:85:71:63:2c:
                    ea:fa:65:5a:9c:1c:bf:ba:6e:64:ea:3d:e6:c0:8c:
                    ab:70:dc:66:fa:03:e8:d9:de:fa:82:01:f2:2e:2f:
                    90:18:c2:ec:58:7b:58:b5:c6:fa:a7:f5:78:d8:36:
                    2d:be:54:04:01:2d:ff:57:8f:15:9f:70:80:39:bc:
                    e7:82:65:8a:cc:04:67:03:28:39:d8:0d:ab:b1:4e:
                    a3:a6:2e:b5:64:7b:0b:ab:7a:74:e3:13:06:3d:c6:
                    f5:3a:17:86:0f:c2:c2:1a:fa:91:99:a9:be:ff:bd:
                    86:e6:06:94:b9:f4:56:06:57:0b:d4:09:e2:3a:e0:
                    89:50:ac:f5:00:8f:30:07:10:7e:74:fe:e0:b9:1b:
                    e4:5c:bf:be:14:c9:fc:cc:6a:c5:28:a2:c8:20:af:
                    54:9d:e3:a3:a0:b2:bf:55:a7:69:7d:f2:48:10:c5:
                    be:58:0a:d6:0e:86:9b:03:87:4a:d9:5d:b0:81:5a:
                    4f:5a:9c:79:23:b5:c8:5b:3d:1c:e1:76:57:96:a4:
                    3e:6c:fa:b6:98:06:2b:a2:43:50:c3:99:a0:9a:1b:
                    8a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:94:A8:9E:E2:7B:3B:80:AB:31:A7:EC:B2:CD:A6:EE:D9:84:DA:E7
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a3a2f34302d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:ef:80:a9:0a:fd:44:fa:db:c6:2e:30:35:7c:76:79:4a:1e:
         4a:8d:81:78:86:d9:c4:b0:0d:9a:fd:2e:3e:97:32:6e:43:8a:
         b1:81:50:bb:99:00:d4:bc:c9:4d:b6:1a:97:78:7c:01:ad:a4:
         4f:a4:e2:a6:f1:7e:62:ff:98:c0:ea:d8:b2:8f:57:b3:03:4d:
         56:f9:ac:49:6a:b0:5d:3b:eb:4e:4d:74:c5:86:b0:8a:db:5f:
         d8:1d:01:11:f0:0e:25:d4:55:62:f7:2a:22:72:6a:8d:49:24:
         b0:7c:76:db:ee:95:d0:69:9e:6d:58:12:0b:a3:3a:80:c9:1b:
         37:0f:46:6c:c1:a1:16:29:68:0b:8a:b1:63:b1:d8:a2:e5:79:
         0f:57:9c:79:5f:b8:a5:18:64:df:51:33:de:61:48:69:00:2e:
         2b:2b:85:1b:d4:4b:e5:20:f5:c5:c8:45:7d:5c:f5:52:e1:bf:
         22:f7:6f:a2:63:6b:02:21:04:09:6f:86:8f:f3:05:e7:eb:d1:
         35:2c:a2:c6:cf:eb:96:99:f8:38:d1:9c:25:57:27:31:32:0d:
         15:a1:18:0c:a8:06:ff:df:f6:18:bc:18:06:22:6c:78:69:e0:
         8f:b1:1c:ad:d8:3c:73:de:28:69:92:d6:52:55:a1:d8:c2:27:
         03:a3:84:06
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIUTISfuCl7BvmF1QdhOqrZD+/m9NAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMjEyMjA4MzlaFw0yMzEyMjAyMjEzMzlaMDMxMTAvBgNV
BAMTKEUwOTRBODlFRTI3QjNCODBBQjMxQTdFQ0IyQ0RBNkVFRDk4NERBRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrbxipspd0AwqCBEGrkQeQIw0z
79elVT/AsxXx2xu8nMbsl+1Y02Q4hXFjLOr6ZVqcHL+6bmTqPebAjKtw3Gb6A+jZ
3vqCAfIuL5AYwuxYe1i1xvqn9XjYNi2+VAQBLf9XjxWfcIA5vOeCZYrMBGcDKDnY
DauxTqOmLrVkewurenTjEwY9xvU6F4YPwsIa+pGZqb7/vYbmBpS59FYGVwvUCeI6
4IlQrPUAjzAHEH50/uC5G+Rcv74UyfzMasUoosggr1Sd46Ogsr9Vp2l98kgQxb5Y
CtYOhpsDh0rZXbCBWk9anHkjtchbPRzhdleWpD5s+raYBiuiQ1DDmaCaG4oTAgMB
AAGjggIGMIICAjAdBgNVHQ4EFgQU4JSonuJ7O4CrMafsss2m7tmE2ucwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGIBggrBgEFBQcB
CwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBw
L3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2EzYTJmMzQz
MDJkMzQzODIwM2QzZTIwMzIzMDMzMzYzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQAAwDQYJ
KoZIhvcNAQELBQADggEBAFHvgKkK/UT628YuMDV8dnlKHkqNgXiG2cSwDZr9Lj6X
Mm5DirGBULuZANS8yU22Gpd4fAGtpE+k4qbxfmL/mMDq2LKPV7MDTVb5rElqsF07
605NdMWGsIrbX9gdARHwDiXUVWL3KiJyao1JJLB8dtvuldBpnm1YEgujOoDJGzcP
RmzBoRYpaAuKsWOx2KLleQ9XnHlfuKUYZN9RM95hSGkALisrhRvUS+Ug9cXIRX1c
9VLhvyL3b6JjawIhBAlvho/zBefr0TUsosbP65aZ+DjRnCVXJzEyDRWhGAyoBv/f
9hi8GAYibHhp4I+xHK3YPHPeKGmS1lJVodjCJwOjhAY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org