Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a6230303a3a2f34302d3438203d3e20323030333239.roa
File:                     326130613a363034303a6230303a3a2f34302d3438203d3e20323030333239.roa (raw, json)
Hash identifier:          VXsPkJHydpa+5+cVXfw9DC2iPPYvmCFbIZmNWNDXMco=
Subject key identifier:   7C:F9:62:D5:6F:20:DD:7C:D6:84:B9:DA:77:75:4B:B8:E2:1D:1D:BE
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2DC69CEC26190AEAF7C0760669A6E76997EF3DBA
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a6230303a3a2f34302d3438203d3e20323030333239.roa
Signing time:             Thu 22 Dec 2022 12:27:20 +0000
ROA not before:           Thu 22 Dec 2022 12:22:20 +0000
ROA not after:            Thu 21 Dec 2023 12:27:20 +0000
asID:                     200329
IP address blocks:        2a0a:6040:b00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c6:9c:ec:26:19:0a:ea:f7:c0:76:06:69:a6:e7:69:97:ef:3d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 22 12:22:20 2022 GMT
            Not After : Dec 21 12:27:20 2023 GMT
        Subject: CN=7CF962D56F20DD7CD684B9DA77754BB8E21D1DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:46:98:49:de:08:36:88:04:51:b5:f2:8c:06:
                    12:6d:73:6d:09:60:1f:7c:f4:96:1b:7b:de:6f:27:
                    f1:9a:9a:69:02:b7:01:e6:9e:22:16:a5:84:b5:0c:
                    fc:1a:ee:a2:9e:cc:b5:72:aa:4c:b5:1f:ce:ff:f4:
                    b2:3e:8e:5b:1c:d9:73:b0:fa:74:c0:dc:61:33:17:
                    89:39:ba:74:76:b0:a4:ec:5f:88:5f:fa:6f:8b:17:
                    cf:05:87:03:ea:54:be:0c:4e:2f:c9:c3:e7:80:8c:
                    ac:69:7f:88:0b:27:f9:2e:c2:28:75:6a:dd:23:b6:
                    e8:3d:35:20:a9:a6:c6:62:da:e9:87:15:3d:da:f9:
                    b4:ba:53:9b:49:72:1e:af:f7:92:84:80:60:37:bd:
                    28:b2:ba:53:d9:4b:34:61:71:65:53:ed:4a:3e:2a:
                    e6:00:09:1f:0f:5c:4a:88:40:23:6b:4b:1c:87:b7:
                    1e:c2:75:97:b5:9b:77:1d:85:e2:db:28:53:cf:65:
                    83:1b:db:3d:08:a9:a2:4b:cc:ee:c6:43:ca:38:40:
                    3c:95:c9:b5:ca:f6:91:a4:37:f4:e5:1b:db:5c:4b:
                    ce:c2:be:e9:9a:5d:48:cd:e4:61:56:ce:95:5a:9e:
                    e7:84:e6:da:cc:d0:5c:ef:95:58:3b:f5:36:5b:58:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F9:62:D5:6F:20:DD:7C:D6:84:B9:DA:77:75:4B:B8:E2:1D:1D:BE
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a6230303a3a2f34302d3438203d3e20323030333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:8b:e6:27:ae:8b:b6:5b:5e:ec:a8:ed:32:ef:3b:6e:3e:58:
         9a:a4:6f:4e:75:3d:37:5c:5a:41:95:40:20:86:fe:c1:b1:5b:
         0c:e7:7a:3e:06:95:91:a6:de:e6:4f:c9:b4:57:d0:55:a6:86:
         69:8c:e7:ee:74:12:89:99:fb:44:02:ce:1e:ea:c6:9d:e8:ba:
         97:bb:e2:ca:32:c2:63:e0:40:d0:b6:fb:bf:5c:fb:5e:a8:1d:
         ec:60:7c:60:88:77:b5:13:a1:41:26:39:50:58:16:1a:7d:64:
         db:dc:59:f7:e1:9f:70:cc:d4:91:8c:79:15:a4:e6:2d:6b:67:
         df:1b:d1:2c:61:6a:99:ae:79:a5:29:20:10:7a:ee:7b:5c:cf:
         69:da:43:cb:18:75:43:c2:b7:94:ee:75:62:d3:ee:c8:7b:73:
         ee:23:d6:14:36:41:53:4b:de:11:43:14:60:e7:27:46:1e:53:
         b3:75:98:02:45:d0:c5:61:bd:8d:3c:d2:0f:ce:40:cb:c6:a9:
         3c:93:eb:e7:2d:5a:82:c7:c3:2f:c7:8b:1f:54:1e:fc:f1:c3:
         4f:95:e8:8b:56:88:70:02:41:b0:c0:0e:bf:7e:7d:63:46:e1:
         08:df:f7:cf:47:e6:91:9e:f3:21:2f:0f:9d:27:82:27:a7:f7:
         66:0c:60:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org