Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643630303a3a2f34302d3438203d3e20323030393336.roa
File:                     326130613a363034303a643630303a3a2f34302d3438203d3e20323030393336.roa (raw, json)
Hash identifier:          nhQ/IX5U1/xtLDI5VtPPHgTxFUn1gqCT6qWRKg1zSk0=
Subject key identifier:   71:9E:90:B7:1D:59:6F:99:56:A2:41:DE:9F:9B:49:CC:D4:34:20:58
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       22BF18BE54B692D595D4D7E4C446B89DCA867080
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643630303a3a2f34302d3438203d3e20323030393336.roa
Signing time:             Fri 09 Dec 2022 08:21:00 +0000
ROA not before:           Fri 09 Dec 2022 08:16:00 +0000
ROA not after:            Fri 08 Dec 2023 08:21:00 +0000
asID:                     200936
IP address blocks:        2a0a:6040:d600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bf:18:be:54:b6:92:d5:95:d4:d7:e4:c4:46:b8:9d:ca:86:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:00 2022 GMT
            Not After : Dec  8 08:21:00 2023 GMT
        Subject: CN=719E90B71D596F9956A241DE9F9B49CCD4342058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:7c:b3:aa:44:e1:1e:da:29:2d:95:70:ae:
                    95:6d:e6:92:3e:73:ab:d9:6f:6f:ee:8f:ba:4e:55:
                    e2:93:ae:b5:fb:a5:b1:a7:51:24:7b:63:a2:d0:23:
                    22:72:07:6f:32:66:47:38:7b:28:d3:ba:ce:79:25:
                    41:9b:ef:a9:1e:c8:de:05:99:be:bc:f4:fc:47:c0:
                    ad:f4:04:7b:3e:cb:13:66:d8:4f:64:9e:71:50:f2:
                    ea:b5:7c:7d:53:01:ba:fc:61:e8:8c:cd:3a:53:e9:
                    7d:9e:f7:72:aa:b3:6f:83:3c:3b:d4:2f:13:94:aa:
                    0d:42:4e:ab:b3:20:af:dd:93:95:c1:ed:37:f8:95:
                    40:2c:ff:ee:ea:07:9f:b1:14:b0:5e:1e:4e:6d:30:
                    5d:22:34:74:db:a6:08:0d:7c:f3:9b:1c:9b:b8:30:
                    43:23:85:80:67:22:8a:53:e1:aa:12:65:de:11:49:
                    0c:4f:f4:2d:cd:11:ae:ab:d6:14:bf:65:c9:e1:a7:
                    04:3e:f8:a2:fa:be:22:4b:b3:4d:a3:3a:53:82:a7:
                    52:a8:7c:11:a6:f5:9a:4c:ac:14:f8:44:1f:3f:6c:
                    f3:0a:05:65:9a:3c:cb:30:40:87:f9:59:b4:4d:05:
                    f6:08:e7:8d:63:5d:e8:bb:ee:78:9e:ab:26:57:1b:
                    06:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9E:90:B7:1D:59:6F:99:56:A2:41:DE:9F:9B:49:CC:D4:34:20:58
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643630303a3a2f34302d3438203d3e20323030393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:d600::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:0e:28:60:b1:85:a7:aa:e8:1d:77:2a:c5:dd:22:54:6b:f2:
         fb:19:f9:b7:e1:16:b6:fd:bd:75:ee:1d:fc:1e:ba:25:db:59:
         4a:e5:9d:1b:b1:67:0a:b2:d6:39:4e:58:4f:e7:05:97:f0:64:
         57:f2:80:47:3f:07:37:0b:68:7e:fb:87:19:36:98:dd:a5:82:
         72:f7:25:13:ed:e0:52:05:5f:73:2c:80:d5:b0:38:c2:12:43:
         01:89:4e:80:da:90:2f:8a:b9:2e:ac:d8:2b:70:8c:db:7a:8c:
         7e:bb:0d:9d:08:94:4c:90:f0:bb:94:30:11:d2:a0:b7:f9:94:
         3c:90:1c:4e:5a:4f:45:f8:6e:fb:5d:2a:a6:a4:46:56:d6:43:
         5a:2f:b7:02:71:be:a5:ed:8c:e7:6b:ba:44:1a:31:87:95:a3:
         22:88:65:d7:46:a6:55:a0:f9:9c:62:90:e4:5e:b6:f0:26:82:
         85:19:36:1d:98:41:24:e1:a9:9f:d4:af:ba:b4:dc:30:57:f2:
         0d:6c:99:31:e2:cb:2a:4e:11:09:75:ef:b4:23:d5:29:91:f3:
         e7:d2:ac:e1:88:43:3a:9b:a8:99:b4:ab:65:eb:99:eb:14:ba:
         8d:5f:6b:55:d0:ba:97:a9:bd:66:87:0d:1b:2a:52:df:be:65:
         12:89:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org