Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a616430303a3a2f34302d3438203d3e20323039353534.roa
File:                     326130613a363034303a616430303a3a2f34302d3438203d3e20323039353534.roa (raw, json)
Hash identifier:          8kHZOULC7EWt3f64EvoGvq+f/dTl7OmKGds1jFB5w/k=
Subject key identifier:   B9:1A:69:E2:72:88:A3:AB:D5:8E:03:79:98:4D:93:80:D7:FA:41:4A
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       74AE3B68B8C8A1552B41E6996B77F46FFD450009
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a616430303a3a2f34302d3438203d3e20323039353534.roa
Signing time:             Tue 27 Dec 2022 09:56:30 +0000
ROA not before:           Tue 27 Dec 2022 09:51:30 +0000
ROA not after:            Tue 26 Dec 2023 09:56:30 +0000
asID:                     209554
IP address blocks:        2a0a:6040:ad00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ae:3b:68:b8:c8:a1:55:2b:41:e6:99:6b:77:f4:6f:fd:45:00:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 27 09:51:30 2022 GMT
            Not After : Dec 26 09:56:30 2023 GMT
        Subject: CN=B91A69E27288A3ABD58E0379984D9380D7FA414A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d0:bf:f7:12:31:1e:8f:22:08:d5:84:30:c3:
                    78:d8:7f:88:3e:6f:19:fe:b0:06:c9:86:b8:29:19:
                    83:b0:ea:6d:c8:23:5f:1c:43:d2:b9:7c:53:90:2c:
                    80:26:31:af:7b:a8:4e:4a:ff:db:fb:f7:43:3b:20:
                    cf:ea:0d:cb:63:cb:d6:23:07:d7:ed:7b:b4:63:c4:
                    05:78:a6:9a:7a:6f:45:c0:bc:29:dd:b7:f0:13:83:
                    92:74:11:65:d5:64:a2:eb:4b:7f:a6:e9:7f:ed:63:
                    48:8b:fc:cc:95:49:c0:82:cf:88:04:6b:0b:25:02:
                    6e:79:39:ec:f7:da:2a:db:48:1d:1c:5c:23:d0:ba:
                    56:40:02:45:74:1d:96:f3:00:54:c2:4b:45:ed:a4:
                    4c:8e:bd:cc:1b:d4:21:bd:e4:af:01:15:77:73:d7:
                    60:00:df:56:1b:95:0d:3e:55:bc:2d:23:94:5e:bb:
                    8e:42:42:a5:05:f8:87:6b:63:c4:02:5f:54:92:bd:
                    82:f4:6b:98:e7:c3:b5:98:1d:bb:e4:f8:65:4f:38:
                    db:07:c0:f0:fe:f9:a5:72:a7:fb:95:35:3d:24:ce:
                    6d:a6:4c:a4:81:bd:3e:af:2e:91:08:4f:e2:4e:8d:
                    0c:75:f6:c4:c2:7a:9c:76:e8:2d:e7:29:60:ca:35:
                    0c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1A:69:E2:72:88:A3:AB:D5:8E:03:79:98:4D:93:80:D7:FA:41:4A
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a616430303a3a2f34302d3438203d3e20323039353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ad00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:f4:9b:b5:12:9c:09:44:56:de:62:6f:1b:87:9b:92:a3:f7:
         7f:a1:40:f9:3b:2a:ec:c6:fc:41:28:25:f3:f3:8d:39:b7:19:
         0a:98:9e:ce:09:6f:5b:69:38:c7:89:78:1d:89:f7:4a:9c:09:
         f3:98:26:99:70:4d:38:91:9a:ca:1a:81:7d:c3:ac:5e:3a:5e:
         99:60:58:4e:f3:80:e2:18:4a:ef:f3:bc:aa:3d:95:f2:54:70:
         22:3e:99:6d:52:e9:0a:c4:0a:8f:d6:94:b3:d9:79:f3:2a:39:
         fe:16:db:90:ef:11:f5:8d:fa:68:0d:f9:7b:72:1b:20:68:a9:
         53:ed:1e:99:8e:c2:08:5d:dc:ef:11:82:96:3c:3c:8c:65:6f:
         d1:39:04:cb:1e:4b:72:f2:5a:c4:e8:ae:42:d9:31:51:e3:84:
         2a:be:54:6a:b1:e5:ef:b3:18:bf:13:21:2d:ed:33:5a:52:ff:
         72:21:4f:03:96:7e:03:15:d7:06:97:98:24:58:84:bd:9a:e5:
         48:05:0b:f1:1f:9e:dd:e1:3c:6f:de:f4:54:10:8a:21:d5:da:
         69:cc:40:dd:61:f1:c5:4f:f9:f7:c1:cb:09:11:e6:fa:7c:ad:
         09:80:fb:89:f7:91:9b:50:80:3a:1c:b8:f1:7c:5c:2f:a0:0d:
         0a:0a:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org