Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a616130303a3a2f34302d3438203d3e20323030343534.roa
File:                     326130613a363034303a616130303a3a2f34302d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          hH/BuSGvnDT+1axFfQ1h7hPZArQ1AcNpyw5NvEGtR+w=
Subject key identifier:   B9:4C:71:9B:3E:60:33:55:44:36:C0:01:92:2D:37:1D:FE:E8:B8:CE
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       67CEE81BB2BC00F901A062EBEADB83C4E292A1EA
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a616130303a3a2f34302d3438203d3e20323030343534.roa
Signing time:             Mon 19 Dec 2022 10:44:44 +0000
ROA not before:           Mon 19 Dec 2022 10:39:44 +0000
ROA not after:            Mon 18 Dec 2023 10:44:44 +0000
asID:                     200454
IP address blocks:        2a0a:6040:aa00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ce:e8:1b:b2:bc:00:f9:01:a0:62:eb:ea:db:83:c4:e2:92:a1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 19 10:39:44 2022 GMT
            Not After : Dec 18 10:44:44 2023 GMT
        Subject: CN=B94C719B3E6033554436C001922D371DFEE8B8CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:e8:aa:34:7f:b6:ea:9b:76:fe:7c:ca:02:
                    66:53:e6:0b:3f:13:44:51:c1:21:6f:3a:18:cc:ae:
                    9e:38:4c:f2:f8:77:04:a7:d0:0b:a8:05:ec:00:12:
                    bb:7d:ab:cb:28:4f:7b:6b:ea:57:63:85:6a:35:5f:
                    f3:cc:44:84:34:8d:ac:f2:18:d4:e8:92:89:62:57:
                    70:6b:6e:9f:b6:16:f7:e4:04:75:bf:05:62:5c:e9:
                    04:a4:0f:cd:b4:ab:90:88:f1:5e:a6:3d:95:b2:8b:
                    86:b2:9f:f7:5d:15:fb:f2:ef:f9:2b:7e:60:cd:2a:
                    61:88:52:48:35:61:0e:4d:37:08:af:9b:06:69:1e:
                    5d:66:a0:e6:97:52:48:a1:78:c2:fe:e5:f8:6a:95:
                    7d:ef:f4:39:07:35:58:cb:37:7d:b6:87:75:24:4c:
                    21:f9:1e:6f:4d:6c:57:d2:b8:34:00:6c:83:f0:1e:
                    59:a9:1c:25:44:e2:ec:cf:7b:2e:ff:7e:c8:9d:f6:
                    53:09:6b:50:19:c3:b9:48:12:1d:8d:9a:dc:05:5b:
                    dd:0f:4a:25:ea:b4:8b:bc:ab:b0:de:4e:92:29:95:
                    e3:65:ba:42:c8:f3:11:62:40:27:3e:77:eb:30:9b:
                    98:db:3c:31:2f:48:ec:4e:ab:d7:5e:0d:52:dc:c2:
                    3f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4C:71:9B:3E:60:33:55:44:36:C0:01:92:2D:37:1D:FE:E8:B8:CE
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a616130303a3a2f34302d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:15:6e:b2:58:26:b1:27:5f:07:86:be:6b:46:ff:40:23:a5:
         85:a5:f8:1b:e2:3b:ad:f9:19:7e:f1:5f:76:e4:9a:5c:9c:b8:
         43:65:32:a4:f2:2b:db:4b:61:b9:83:26:db:8a:fd:bf:8f:a8:
         b8:fc:88:ac:74:af:0a:9c:9a:d7:e3:7c:22:4a:e7:fd:34:51:
         1b:bd:70:03:d7:04:74:ac:8f:eb:9d:53:91:3a:b9:fc:b9:c3:
         e7:ff:e8:9d:9d:ee:12:00:15:1e:dc:1e:e1:fe:f0:43:65:91:
         79:1b:77:c1:87:ca:bc:89:9b:35:30:3a:96:fd:79:c5:84:7e:
         ec:fc:6c:5a:49:29:6f:f8:2c:72:c4:1b:25:ca:04:05:5d:76:
         9d:da:15:64:f8:f9:3f:db:1d:98:d6:67:ea:1f:14:1c:20:da:
         f8:7a:67:92:1b:fb:8b:f8:9c:63:bd:cf:76:1c:c0:27:84:f2:
         e0:4c:27:61:2e:39:75:7f:2e:48:2e:fc:a2:c9:7d:95:2f:97:
         22:95:a3:ca:c1:09:5e:65:c9:5f:d4:6c:d6:36:e6:d9:25:00:
         a5:44:68:18:b7:b8:e0:bb:7f:03:b7:0b:55:0a:aa:1c:40:27:
         10:40:3b:34:0f:88:82:88:1e:38:bb:49:50:22:c0:73:87:18:
         f6:68:b4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org