Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613530303a3a2f34302d3438203d3e20323030333236.roa
File:                     326130613a363034303a613530303a3a2f34302d3438203d3e20323030333236.roa (raw, json)
Hash identifier:          y0Ay9a3h+r5TUYS9VYhColzB2bl/ZY470m6TilM4+pw=
Subject key identifier:   87:F8:5D:3B:C8:51:E4:65:B9:AD:0A:B8:BA:59:07:94:7B:DA:96:0A
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       56671F148B7B01E440F57B927B591809C7F12939
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613530303a3a2f34302d3438203d3e20323030333236.roa
Signing time:             Fri 23 Dec 2022 11:38:36 +0000
ROA not before:           Fri 23 Dec 2022 11:33:36 +0000
ROA not after:            Fri 22 Dec 2023 11:38:36 +0000
asID:                     200326
IP address blocks:        2a0a:6040:a500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:67:1f:14:8b:7b:01:e4:40:f5:7b:92:7b:59:18:09:c7:f1:29:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 23 11:33:36 2022 GMT
            Not After : Dec 22 11:38:36 2023 GMT
        Subject: CN=87F85D3BC851E465B9AD0AB8BA5907947BDA960A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:1c:fb:34:b4:92:5b:6f:d2:be:51:84:af:
                    49:a2:f6:01:6d:bf:54:18:62:eb:1f:8e:e9:15:86:
                    cd:75:b0:2e:3e:28:cf:ea:fa:e3:61:31:7f:b1:41:
                    23:ec:3c:f0:d4:37:21:be:e5:cf:be:80:64:ad:c7:
                    c8:41:4e:e1:59:24:5e:25:d7:76:24:e2:2c:6e:58:
                    f9:bf:88:fc:cb:01:51:c8:a8:c0:f9:b0:e5:e8:f5:
                    b0:3a:93:93:86:1c:0b:68:f2:c3:de:50:e1:c2:5a:
                    9b:05:ec:86:9b:27:a4:17:2b:48:93:51:c0:ee:f5:
                    1f:a8:67:db:d1:66:c9:9d:80:35:c4:6f:7b:d9:05:
                    d6:17:73:84:5b:de:23:d5:fb:6e:f4:9d:47:c4:0c:
                    e4:aa:82:a7:4e:9c:f4:9c:a6:e4:9d:67:d4:8a:da:
                    55:c2:03:b7:77:02:29:76:14:fb:d3:fe:b3:81:22:
                    41:ae:5c:e0:06:f8:b9:fe:d1:ec:93:4e:67:5d:e2:
                    86:a7:85:32:89:86:07:aa:23:bc:ed:0e:81:da:75:
                    7f:94:d0:30:fe:15:b8:25:ab:7b:f6:a9:24:f4:92:
                    aa:a7:c1:32:6b:20:7c:6b:32:2c:89:70:8a:e0:db:
                    50:9a:60:c7:2c:dd:e8:25:bb:0a:80:a4:7e:5f:36:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F8:5D:3B:C8:51:E4:65:B9:AD:0A:B8:BA:59:07:94:7B:DA:96:0A
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a613530303a3a2f34302d3438203d3e20323030333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a500::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:12:17:5d:d5:7e:cc:3b:aa:dd:b8:d7:dc:52:d8:0e:ad:6d:
         5c:7a:47:89:0a:89:a4:e4:88:4f:83:48:2b:2e:f5:3a:dc:da:
         c9:4f:63:45:16:1b:7f:53:6d:84:23:6b:e3:e1:c7:b4:f0:86:
         84:22:08:ba:37:a9:20:51:04:5d:87:21:b7:90:64:9e:e1:ab:
         09:b9:56:c3:ab:1b:8b:66:60:9e:66:51:48:8d:4f:f4:92:2b:
         bf:57:7c:d6:47:4d:d9:63:87:a6:e6:38:7c:4f:f5:42:bf:40:
         f8:41:47:4f:08:98:14:d3:6b:ba:eb:dc:52:03:d7:99:09:4b:
         7e:0e:51:19:a0:1a:26:1c:e3:5c:5e:03:3b:38:39:36:e4:6e:
         c6:b5:66:92:17:35:2f:4b:2a:ef:7d:b7:14:ab:ae:cc:a4:2f:
         e4:e6:8f:61:84:5a:2b:62:09:4b:ac:9d:c9:e1:d5:89:25:18:
         96:0d:53:4c:aa:41:14:95:21:3e:0d:3b:08:2c:72:97:0f:cc:
         e6:b2:0c:fa:74:59:a0:c2:0e:c7:57:38:c2:81:93:25:82:90:
         2f:44:2d:73:b4:c5:56:a4:14:4b:09:b0:4f:e2:ac:45:13:d2:
         ea:04:36:e1:1a:3d:f9:a6:54:47:fe:a1:d8:3e:67:89:c2:30:
         14:c9:55:e9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUVmcfFIt7AeRA9XuSe1kYCcfxKTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMjMxMTMzMzZaFw0yMzEyMjIxMTM4MzZaMDMxMTAvBgNV
BAMTKDg3Rjg1RDNCQzg1MUU0NjVCOUFEMEFCOEJBNTkwNzk0N0JEQTk2MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIshz7NLSSW2/SvlGEr0mi9gFt
v1QYYusfjukVhs11sC4+KM/q+uNhMX+xQSPsPPDUNyG+5c++gGStx8hBTuFZJF4l
13Yk4ixuWPm/iPzLAVHIqMD5sOXo9bA6k5OGHAto8sPeUOHCWpsF7IabJ6QXK0iT
UcDu9R+oZ9vRZsmdgDXEb3vZBdYXc4Rb3iPV+270nUfEDOSqgqdOnPScpuSdZ9SK
2lXCA7d3Ail2FPvT/rOBIkGuXOAG+Ln+0eyTTmdd4oanhTKJhgeqI7ztDoHadX+U
0DD+Fbglq3v2qST0kqqnwTJrIHxrMiyJcIrg21CaYMcs3egluwqApH5fNm3xAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUh/hdO8hR5GW5rQq4ulkHlHvalgowHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2MTM1
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDMzMzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYEClMA0GCSqGSIb3DQEBCwUAA4IBAQB6Ehdd1X7MO6rduNfcUtgOrW1c
ekeJComk5IhPg0grLvU63NrJT2NFFht/U22EI2vj4ce08IaEIgi6N6kgUQRdhyG3
kGSe4asJuVbDqxuLZmCeZlFIjU/0kiu/V3zWR03ZY4em5jh8T/VCv0D4QUdPCJgU
02u669xSA9eZCUt+DlEZoBomHONcXgM7ODk25G7GtWaSFzUvSyrvfbcUq67MpC/k
5o9hhForYglLrJ3J4dWJJRiWDVNMqkEUlSE+DTsILHKXD8zmsgz6dFmgwg7HVzjC
gZMlgpAvRC1ztMVWpBRLCbBP4qxFE9LqBDbhGj35plRH/qHYPmeJwjAUyVXp
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:55 2024 by rpki-client on console-fra.rpki-client.org