Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613130303a3a2f34302d3438203d3e20323033383433.roa
File:                     326130613a363034303a613130303a3a2f34302d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          QUPkAHXVMmTwkbxuTAg3pUkhRfOywM8kjKKniEtoIxI=
Subject key identifier:   A7:07:51:CF:FC:D8:4E:A4:3D:DB:7E:50:4F:03:88:B5:C0:E7:91:F7
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2515E30378C1D5A298725F70574F21F8DED69EA4
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613130303a3a2f34302d3438203d3e20323033383433.roa
Signing time:             Fri 09 Dec 2022 08:21:00 +0000
ROA not before:           Fri 09 Dec 2022 08:16:00 +0000
ROA not after:            Fri 08 Dec 2023 08:21:00 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:15:e3:03:78:c1:d5:a2:98:72:5f:70:57:4f:21:f8:de:d6:9e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:00 2022 GMT
            Not After : Dec  8 08:21:00 2023 GMT
        Subject: CN=A70751CFFCD84EA43DDB7E504F0388B5C0E791F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:20:b1:4a:bd:15:61:a5:00:92:e4:18:53:81:
                    c7:03:df:83:ae:9e:7f:09:0e:2b:dd:9e:71:99:51:
                    d3:f9:60:cb:b6:8f:6f:a8:e3:38:31:10:88:21:ac:
                    05:93:cc:04:6c:f5:91:ea:88:0b:87:0d:9d:cc:8a:
                    dc:20:33:58:64:70:de:ff:8e:25:ec:37:4e:fe:a8:
                    f5:d4:e3:5c:e3:9a:f7:b1:0a:07:82:bd:f3:e7:80:
                    eb:8e:71:bd:50:b0:37:be:9a:16:15:6a:9d:0d:c4:
                    21:2c:4c:82:0e:91:36:34:b9:ef:dd:16:49:81:66:
                    22:3b:c1:81:88:f1:42:fc:9e:c3:25:19:5e:ba:b4:
                    cc:c0:1b:5b:13:8f:d8:50:83:26:d8:8d:fa:2a:85:
                    2c:d7:e7:0f:21:60:12:cb:e5:f3:d4:ea:a1:fe:d1:
                    1c:7b:ff:d2:25:da:b9:ca:f0:ec:2e:72:91:0c:5c:
                    46:6d:52:d5:9c:cb:45:ef:52:0d:d5:c6:c9:10:c6:
                    11:b6:f7:f4:d8:1c:9b:b9:22:91:d2:2e:e4:58:2a:
                    e1:77:52:95:d8:95:65:a1:79:93:4f:5c:2e:55:33:
                    c5:79:2a:26:bc:70:fc:9c:f0:c5:1f:97:b6:b9:cc:
                    09:16:51:82:50:1d:69:77:c3:6a:b3:74:e9:55:4e:
                    76:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:07:51:CF:FC:D8:4E:A4:3D:DB:7E:50:4F:03:88:B5:C0:E7:91:F7
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613130303a3a2f34302d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:a9:7d:d7:92:79:41:2f:79:d8:67:f2:50:c9:7f:e3:db:02:
         ff:7b:20:99:d7:92:15:67:11:5a:e9:c1:94:12:c7:c6:7e:8d:
         3d:19:12:b7:f6:7c:8d:36:74:0d:b9:47:fb:4b:26:f9:7c:c1:
         f4:c7:8e:50:5d:5e:df:39:0b:51:68:c7:87:67:4d:69:42:2d:
         5b:de:05:9f:7d:25:71:b2:80:d0:f4:5b:c3:8c:c5:38:f4:75:
         19:d8:1b:d8:59:70:0f:a4:bc:13:a5:2c:74:14:e4:a7:e9:5a:
         16:9a:e4:78:39:c7:98:d0:52:4a:11:25:b8:31:e8:de:01:8c:
         4c:41:55:af:0c:2b:48:8c:a5:03:44:ea:21:f5:15:e9:b7:59:
         59:e1:5d:47:38:74:21:59:79:af:53:51:59:80:ca:87:b6:89:
         d3:57:15:2e:a0:b3:fc:0c:e8:60:cb:ee:af:6f:7e:2f:7e:8a:
         96:1a:6d:4e:6c:81:f4:4b:1f:34:bf:05:5d:b9:92:d5:70:71:
         9f:19:64:01:4d:35:71:02:99:a5:97:45:ca:e9:33:8f:1b:d2:
         a0:d9:05:d4:5f:99:be:e4:a6:c2:fc:0a:46:f2:63:d2:1e:26:
         f2:df:ca:1c:c8:8c:44:cf:2a:9e:e5:73:c4:8d:42:de:f3:19:
         9c:c8:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org