Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613230303a3a2f34302d3438203d3e20323030383030.roa
File:                     326130613a363034303a613230303a3a2f34302d3438203d3e20323030383030.roa (raw, json)
Hash identifier:          ZzWZeZgA7FBMFhZ7y0nNANQfhoCwxDSXDs+CsnTA6zQ=
Subject key identifier:   F4:F4:98:7D:26:47:E4:47:D2:91:3C:F7:5B:72:43:22:48:09:D3:9D
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       78A53D271CE58A782125D65DA02C8D2DE21A4FA8
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613230303a3a2f34302d3438203d3e20323030383030.roa
Signing time:             Fri 09 Dec 2022 08:21:01 +0000
ROA not before:           Fri 09 Dec 2022 08:16:01 +0000
ROA not after:            Fri 08 Dec 2023 08:21:01 +0000
asID:                     200800
IP address blocks:        2a0a:6040:a200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a5:3d:27:1c:e5:8a:78:21:25:d6:5d:a0:2c:8d:2d:e2:1a:4f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:01 2022 GMT
            Not After : Dec  8 08:21:01 2023 GMT
        Subject: CN=F4F4987D2647E447D2913CF75B7243224809D39D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9d:90:e8:ef:af:c2:67:d2:77:4f:34:02:7f:
                    c1:2e:33:13:47:0b:25:bf:9e:33:ed:fa:73:05:d3:
                    4e:c6:8e:d3:80:0c:41:6b:39:c0:cc:ba:16:8e:fb:
                    ea:3f:f3:3d:e2:d1:c6:e5:68:0b:13:30:65:34:75:
                    81:1f:74:82:f2:e6:68:04:2a:6e:86:1f:1d:25:bd:
                    8f:30:a8:b4:fe:bb:86:78:16:0b:88:e3:87:81:b3:
                    83:23:1a:d6:94:ab:bf:ba:08:53:d2:72:48:4b:21:
                    d0:4a:a3:93:bc:1f:f5:4a:85:82:10:0f:e7:7c:98:
                    4d:1b:31:96:81:06:1c:4e:fd:62:c4:c8:12:cf:42:
                    a1:a5:f4:35:32:70:c6:5c:f9:91:ce:12:a5:a4:c6:
                    e1:86:ee:3e:3e:1b:23:09:55:60:56:a9:5a:7c:97:
                    2d:5c:20:49:83:70:af:df:c1:ab:93:31:f6:ad:fb:
                    fc:24:7b:59:f9:b0:6c:af:6e:35:3f:0a:f8:09:fd:
                    65:98:80:29:a5:ab:77:e7:92:98:99:c5:43:25:e3:
                    08:9a:7d:3e:1c:a5:0a:64:a2:d0:b2:a5:07:50:16:
                    bf:7c:cf:17:ff:2d:4a:8a:8f:f0:a2:9c:db:1b:e7:
                    45:09:58:55:e0:c1:c5:4a:d7:d6:81:49:38:85:d1:
                    86:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F4:98:7D:26:47:E4:47:D2:91:3C:F7:5B:72:43:22:48:09:D3:9D
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613230303a3a2f34302d3438203d3e20323030383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a200::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:f8:2a:08:4a:c0:2c:11:f4:fe:9b:ce:cf:cc:9e:79:f5:49:
         e7:9f:41:86:51:d4:78:00:73:f6:3d:89:f9:1f:78:69:7c:4a:
         74:3d:3c:1b:9a:e8:c9:ab:21:6f:57:82:f6:ff:84:13:3a:07:
         ec:84:8e:65:b8:f5:35:b3:ed:b9:d0:ab:27:cc:a9:2d:e6:8b:
         75:49:96:6a:a4:67:70:86:1c:7e:e2:fd:45:9f:37:28:2b:42:
         b6:f6:9e:c2:2d:1a:66:4e:f1:43:e4:82:73:48:76:64:45:e9:
         94:55:b9:6f:4a:26:84:bb:a5:4f:62:71:7e:34:46:b4:be:a9:
         8f:78:cf:12:49:d7:db:c3:48:09:61:93:31:f8:fd:84:df:a2:
         28:5c:33:61:95:0e:c9:06:65:27:d2:02:37:e5:b6:5e:e4:a4:
         3b:08:3f:3f:09:e6:ca:74:e0:5d:8c:1e:07:2a:df:a4:ce:3e:
         7a:6b:c6:fe:f0:cb:96:f0:c5:ad:03:bd:a2:4e:e6:6d:f2:5e:
         24:69:11:3d:da:4d:32:c0:7f:73:b4:1f:c3:61:3a:05:9e:6a:
         a6:28:4d:cf:b6:68:72:4f:da:e5:90:9b:be:0b:c8:67:78:f2:
         00:6e:3d:e3:5a:b7:b7:57:47:dc:70:4e:ce:05:9d:1c:02:88:
         93:4c:66:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org