Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613330303a3a2f34302d3438203d3e20323030363930.roa
File:                     326130613a363034303a613330303a3a2f34302d3438203d3e20323030363930.roa (raw, json)
Hash identifier:          q1SuZeuozEKXR8BxPoV8Cf/LlDHDlEOLiLaj6/f8Cvc=
Subject key identifier:   EC:48:A0:11:0E:BC:AF:BF:35:34:C2:71:DC:70:A1:43:FF:35:DB:96
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       42FCC64F9CBF6DB11348AF88AC76811FDA79B634
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613330303a3a2f34302d3438203d3e20323030363930.roa
Signing time:             Fri 09 Dec 2022 10:39:43 +0000
ROA not before:           Fri 09 Dec 2022 10:34:43 +0000
ROA not after:            Fri 08 Dec 2023 10:39:43 +0000
asID:                     200690
IP address blocks:        2a0a:6040:a300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:fc:c6:4f:9c:bf:6d:b1:13:48:af:88:ac:76:81:1f:da:79:b6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 10:34:43 2022 GMT
            Not After : Dec  8 10:39:43 2023 GMT
        Subject: CN=EC48A0110EBCAFBF3534C271DC70A143FF35DB96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:eb:27:a4:05:49:d5:c9:e2:50:5e:44:f3:
                    a9:dc:90:ee:4f:42:0b:01:5b:71:fc:b9:6f:59:92:
                    8f:93:87:fa:f1:ab:05:58:51:4c:8f:78:00:1e:54:
                    b1:c2:d6:9d:37:db:0d:2b:3e:4b:b5:ef:f3:d3:49:
                    57:7d:5b:6e:04:ad:fc:c7:05:e2:25:06:e5:0e:94:
                    3f:98:58:cf:a6:33:ee:27:43:17:2e:0a:74:39:83:
                    e8:0b:89:08:9e:0a:1f:cd:76:01:51:9f:94:e4:c1:
                    65:83:66:db:e9:2b:b7:2e:f2:c2:af:ae:00:cf:fa:
                    a8:96:53:06:94:eb:50:c0:38:86:49:dd:6d:6c:2d:
                    7e:8f:36:4f:b8:56:5e:58:86:01:bd:7f:d3:f4:10:
                    50:4a:2a:f4:8c:bb:54:49:f9:4b:8b:fb:ad:7f:67:
                    dd:c9:a5:1f:62:81:b7:4e:f6:2a:61:06:c4:d1:dd:
                    c4:98:f7:f5:3c:b6:a3:a7:8e:17:1e:2f:9a:56:dc:
                    e7:cc:f9:31:0b:d8:0c:2c:21:e5:7c:3e:68:34:12:
                    b4:78:47:b9:fb:62:ff:90:0c:3c:3c:e3:55:05:fc:
                    9f:d4:e5:48:0b:c6:5b:8a:e2:91:54:0c:18:fc:20:
                    c7:37:3a:e0:1c:e4:d6:66:76:92:4b:6c:9b:16:62:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:48:A0:11:0E:BC:AF:BF:35:34:C2:71:DC:70:A1:43:FF:35:DB:96
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613330303a3a2f34302d3438203d3e20323030363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a300::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:ae:7c:a3:58:e8:7c:42:20:d5:dc:ed:77:aa:7a:ff:05:
         39:9d:45:c6:86:7b:a7:e2:1a:d1:a6:86:19:6e:d1:05:9e:db:
         f1:cf:1d:f9:fd:cf:6a:f1:0a:5b:14:60:83:a9:78:9c:ee:90:
         49:c6:32:df:c1:b5:86:72:6d:9c:f3:5e:52:0e:17:0e:7f:6e:
         cf:be:5d:4e:79:f6:23:73:9c:43:c1:06:6d:ca:69:b2:56:72:
         97:f8:1a:ba:9e:fc:b1:9c:a0:98:81:02:4e:df:f9:2f:ba:ad:
         37:ea:9a:4f:6c:49:46:66:f2:71:8b:92:08:9b:e8:3c:36:6b:
         d9:ff:a0:1a:e8:59:c6:c1:0d:88:98:7b:70:29:71:ff:ae:c3:
         5b:cd:b6:95:6b:cf:0a:0c:ec:38:66:1f:f4:19:22:a4:97:ff:
         a8:ab:f4:10:3d:c1:db:02:a2:84:4a:2c:74:e1:bf:0f:e5:87:
         69:e1:04:1f:20:2f:80:9c:b5:61:2d:36:9d:46:3c:1f:64:96:
         08:70:2f:28:f7:8a:32:b6:47:f4:7d:59:6c:1c:fa:9c:12:28:
         25:d5:7a:0d:30:2a:04:76:6c:10:e7:7d:e0:82:76:57:6e:39:
         2f:1f:65:16:c1:a1:c7:5e:46:d2:c1:2e:9b:b7:3d:cb:ef:5e:
         de:87:ce:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org