Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633730303a3a2f34302d3438203d3e20323132313634.roa
File:                     326130613a363034303a633730303a3a2f34302d3438203d3e20323132313634.roa (raw, json)
Hash identifier:          b55VadEpPyWLtWsRktIBag5ibs/4/9/KfQ4JmZ1CMpw=
Subject key identifier:   D4:0A:90:34:7F:C6:CD:F5:67:3E:7E:41:D8:7D:1D:17:5D:AA:7C:A5
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1D51EF1AA24411DD3D475E0AEC7A817E08457404
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633730303a3a2f34302d3438203d3e20323132313634.roa
Signing time:             Fri 09 Dec 2022 08:20:58 +0000
ROA not before:           Fri 09 Dec 2022 08:15:58 +0000
ROA not after:            Fri 08 Dec 2023 08:20:58 +0000
asID:                     212164
IP address blocks:        2a0a:6040:c700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:51:ef:1a:a2:44:11:dd:3d:47:5e:0a:ec:7a:81:7e:08:45:74:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:58 2022 GMT
            Not After : Dec  8 08:20:58 2023 GMT
        Subject: CN=D40A90347FC6CDF5673E7E41D87D1D175DAA7CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:74:9c:63:5d:54:b6:25:38:c8:ce:a6:0e:
                    5e:02:17:49:69:b8:20:cd:de:d8:ab:95:f8:17:e6:
                    fd:68:2d:90:56:29:eb:79:74:74:34:a9:32:ed:44:
                    33:45:d5:c3:4f:76:01:31:e1:a7:f2:ce:5c:d2:56:
                    b5:d7:08:da:6f:a6:bf:20:91:fd:fc:fa:ae:04:11:
                    47:b6:c3:89:9b:b8:be:f0:f1:57:71:f3:fa:91:a2:
                    ef:3a:0a:7a:45:a9:0f:36:e4:8d:1e:41:ee:91:66:
                    56:a8:12:b5:78:a4:a3:36:6b:9c:46:fd:69:a7:c0:
                    68:94:69:fd:ba:d7:f3:80:1a:46:8c:29:65:7a:ee:
                    e0:28:cb:8f:88:12:33:aa:d9:0e:59:a6:3e:7c:fe:
                    23:c7:41:a2:93:89:17:b1:77:d5:87:ca:c2:80:02:
                    9b:37:05:10:21:1a:c0:c9:f4:41:d5:18:c8:29:06:
                    86:0e:79:44:86:7f:1a:13:19:f2:0f:76:c1:d8:5c:
                    72:e4:cb:8b:14:9a:84:a2:0b:77:c5:71:3d:6b:e9:
                    36:db:31:69:24:64:44:ec:1a:02:59:60:c0:0f:0d:
                    be:79:96:8a:d0:d9:e5:d5:61:e5:70:09:a8:13:44:
                    d9:09:bc:b3:23:ea:59:a9:44:e4:c8:83:1d:0b:a1:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0A:90:34:7F:C6:CD:F5:67:3E:7E:41:D8:7D:1D:17:5D:AA:7C:A5
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a633730303a3a2f34302d3438203d3e20323132313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c700::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:eb:04:ab:08:21:d2:44:89:23:5d:80:5a:4b:24:10:12:33:
         e4:26:6e:1e:6f:49:1f:71:5b:d3:1d:55:cc:07:23:5a:51:b7:
         81:aa:c2:bd:63:c9:3a:3f:03:dd:e4:40:3f:82:88:16:85:3d:
         4c:a1:96:2d:d8:48:06:43:e8:be:c4:19:9e:05:d6:14:aa:25:
         1f:88:a5:ff:37:47:2e:ac:90:e4:d3:14:c7:12:0b:d1:0c:2f:
         a4:57:5f:cb:cb:25:f4:14:ce:d9:3e:bd:99:e0:80:09:5c:f5:
         97:f1:dd:97:32:ea:ce:f8:42:8d:7e:b6:63:ec:6d:2d:d2:f7:
         0b:b1:6a:9b:5f:9d:ea:88:ae:40:d1:de:bb:3e:7d:6a:31:0d:
         52:ca:18:20:b7:c0:4c:af:e5:f0:bd:bf:ea:bb:11:cc:62:d9:
         6c:d9:66:b2:dc:1e:bc:c8:5b:60:f1:7c:43:9d:2b:d0:35:43:
         23:53:a3:2f:37:e3:e3:2a:1c:85:a5:b0:8b:8e:fb:b0:62:9b:
         45:41:fb:a5:5f:87:8d:0a:2a:09:92:08:d4:5f:0b:75:b8:7f:
         6b:55:59:40:ec:c6:75:3f:78:08:f2:d9:43:64:29:3b:97:e8:
         c5:65:e2:07:c0:d2:42:43:d4:00:e7:5d:92:99:9a:a7:46:51:
         c9:bd:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org