Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623730303a3a2f34302d3438203d3e20323030373839.roa
File:                     326130613a363034303a623730303a3a2f34302d3438203d3e20323030373839.roa (raw, json)
Hash identifier:          1pIH2rTxU5jEVpkSHnAdePXp/mkyYnlUOFK4aHMpais=
Subject key identifier:   B5:24:B5:E5:1C:E4:B3:1C:DF:91:E0:6C:50:37:98:B7:F9:A5:0A:DF
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       02DED962CA19EFC5E9913F0E361AE11906C9B317
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623730303a3a2f34302d3438203d3e20323030373839.roa
Signing time:             Fri 09 Dec 2022 08:20:59 +0000
ROA not before:           Fri 09 Dec 2022 08:15:59 +0000
ROA not after:            Fri 08 Dec 2023 08:20:59 +0000
asID:                     200789
IP address blocks:        2a0a:6040:b700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:de:d9:62:ca:19:ef:c5:e9:91:3f:0e:36:1a:e1:19:06:c9:b3:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:59 2022 GMT
            Not After : Dec  8 08:20:59 2023 GMT
        Subject: CN=B524B5E51CE4B31CDF91E06C503798B7F9A50ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e5:e7:73:89:b7:86:fe:d8:c5:9f:77:b1:03:
                    09:8c:35:9f:0a:df:a9:6d:ae:1b:c5:32:dc:e2:da:
                    b2:ef:52:ec:64:3a:16:7f:2b:14:14:c8:ee:e6:62:
                    d5:6f:a9:ea:7c:4f:3c:2b:2f:2a:4d:ba:ac:87:f1:
                    88:00:d4:30:5c:f1:4a:b9:ad:88:c8:7b:73:78:17:
                    d9:1d:99:41:fb:43:4a:e5:6e:0f:00:9b:04:a0:fa:
                    fe:cc:d0:f6:bb:c0:bd:3a:81:38:9d:90:67:fd:08:
                    7c:05:b6:f1:75:f2:01:d4:81:fa:cc:9b:6f:3c:c6:
                    cc:6a:3a:ba:1d:2b:a6:50:1c:46:81:06:1f:46:70:
                    d5:7a:2e:85:17:b7:ec:3a:31:ad:82:14:ee:4b:6d:
                    ec:c9:df:65:f6:4c:9a:75:96:72:e7:3c:3b:08:0d:
                    d5:a0:6d:cf:75:7d:06:88:86:93:2e:99:26:e3:91:
                    43:b7:a3:b1:04:6f:d4:40:7b:6d:5e:be:8b:72:d3:
                    77:21:81:72:65:71:04:7b:eb:c5:3b:c9:a6:1b:6b:
                    66:89:04:00:b8:fb:8c:fb:d4:2a:25:a5:e8:ca:40:
                    4a:cf:db:7c:a9:21:f6:5a:4c:23:4c:75:43:37:76:
                    fd:d2:ca:cd:b9:7d:49:5c:4a:6d:54:cf:c0:59:42:
                    07:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:24:B5:E5:1C:E4:B3:1C:DF:91:E0:6C:50:37:98:B7:F9:A5:0A:DF
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a623730303a3a2f34302d3438203d3e20323030373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b700::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:cb:bb:98:97:f2:f1:bd:9c:49:18:c4:31:97:41:c6:b6:
         b8:18:b5:78:20:0a:2e:37:25:02:be:3e:69:d9:b5:0b:81:5a:
         12:35:42:0b:c7:11:3d:87:77:5e:93:0a:63:62:7e:b4:84:40:
         93:85:7b:a8:e2:90:85:41:9a:de:b6:77:17:11:6e:6c:55:92:
         77:ca:c9:5a:2d:f9:7a:a0:2a:a8:2d:2f:d1:72:3a:a8:d0:6f:
         5a:67:f1:63:9d:f5:d0:a4:59:ee:f1:1c:32:31:d0:e4:c2:2a:
         50:41:f9:7a:4e:d8:0d:cf:84:f1:30:67:c9:33:f6:13:aa:9d:
         a0:02:80:cf:9d:92:5d:41:5e:3f:7b:cd:77:69:f9:20:3d:cf:
         e5:51:ae:37:f5:b6:f4:82:05:d2:ee:2d:74:9b:a4:82:6e:c1:
         f3:b4:38:d8:fc:c2:45:9f:74:1d:5b:3a:15:ef:20:bc:0b:8c:
         5e:98:5d:cb:cf:1b:5e:ed:82:63:81:5f:6b:56:9e:52:eb:88:
         80:d2:1c:3a:8b:d9:c9:28:fa:54:6d:4b:41:56:24:f2:b6:da:
         31:ee:50:e3:7a:fc:ff:f8:36:32:1e:06:16:34:c4:31:13:d0:
         dd:b2:9f:a4:2c:d1:df:3e:8d:4f:51:e3:fc:ba:3a:41:c9:9e:
         9c:54:51:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org