Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643930303a3a2f34302d3438203d3e20323037343636.roa
File:                     326130613a363034303a643930303a3a2f34302d3438203d3e20323037343636.roa (raw, json)
Hash identifier:          xFVRFznLE1ZB3RcJd9ZLx4Ja4kjUhs10GTPYb7I/UzY=
Subject key identifier:   70:59:A0:C5:A9:54:E0:5B:86:AC:C6:D4:F2:3A:81:2E:C7:72:F6:9C
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2A676B3777580F5A3F1799CBCDDD5A024478774F
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643930303a3a2f34302d3438203d3e20323037343636.roa
Signing time:             Fri 09 Dec 2022 08:21:00 +0000
ROA not before:           Fri 09 Dec 2022 08:16:00 +0000
ROA not after:            Fri 08 Dec 2023 08:21:00 +0000
asID:                     207466
IP address blocks:        2a0a:6040:d900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:67:6b:37:77:58:0f:5a:3f:17:99:cb:cd:dd:5a:02:44:78:77:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:00 2022 GMT
            Not After : Dec  8 08:21:00 2023 GMT
        Subject: CN=7059A0C5A954E05B86ACC6D4F23A812EC772F69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:8c:1c:0a:9f:b2:b5:cc:fe:8f:4f:63:2b:
                    d7:6e:08:52:bd:d9:90:93:4a:ea:f7:8a:ff:c9:c6:
                    76:6e:df:4e:e9:54:ab:5d:70:bb:1a:f4:cd:12:ff:
                    53:88:c1:88:7c:37:63:c7:06:51:7c:98:47:b3:2f:
                    ec:55:33:53:a3:65:83:5f:5a:4c:62:ba:2b:69:ee:
                    b7:2f:a8:c5:a2:39:78:90:5a:41:93:ff:68:07:d0:
                    c6:68:43:97:43:b2:4c:2b:00:aa:0d:3c:40:65:17:
                    cb:ac:ae:fb:11:f0:47:58:98:ac:92:61:10:83:76:
                    95:9b:f9:b5:39:18:11:e8:df:3e:db:e6:29:54:8f:
                    81:0a:89:00:1f:dc:56:f1:ad:ce:9b:f0:aa:26:de:
                    43:54:45:80:54:41:05:17:30:d6:2f:30:7c:ea:3c:
                    7b:30:70:96:00:00:70:6c:e6:1b:00:3f:e4:11:e6:
                    bf:5e:e5:e3:90:51:a6:60:63:d1:1d:e2:03:61:5e:
                    ae:6b:29:9f:61:f2:6c:83:03:98:ee:f7:5e:dc:d3:
                    bc:c9:36:8e:1f:c1:31:1a:a3:81:0c:05:5c:9e:9b:
                    8b:96:37:ee:aa:9c:a6:5f:68:a1:d2:d3:c2:0d:7f:
                    85:c8:a9:c7:8c:b9:2b:65:98:1e:e6:82:84:b7:08:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:59:A0:C5:A9:54:E0:5B:86:AC:C6:D4:F2:3A:81:2E:C7:72:F6:9C
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a643930303a3a2f34302d3438203d3e20323037343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:d900::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:07:36:b9:cb:bf:cf:37:23:db:dc:4a:e2:d7:35:54:2c:fe:
         2b:24:a3:52:3b:fb:ca:e4:24:92:9c:a2:f9:e1:e5:46:90:86:
         8e:1b:71:77:97:01:94:35:e7:6c:20:5c:77:04:de:0f:7c:94:
         fb:38:b7:b1:f8:7f:5c:16:76:b9:eb:ed:af:7a:07:81:64:45:
         c3:37:10:9a:e8:c6:c3:fd:ec:6a:45:de:17:26:88:60:6d:33:
         61:3c:46:51:d8:e2:bc:bb:ed:51:97:bb:f2:78:4b:ec:19:ca:
         25:41:cd:e4:76:c4:e2:5c:52:c6:58:e3:d5:c2:b9:ae:9f:9b:
         9f:ea:af:a4:89:da:44:f9:91:8c:9b:a1:46:a8:7d:4f:8f:7d:
         7c:e3:5d:d7:f5:81:1d:8a:06:e9:78:ca:5d:b8:9c:28:6d:a0:
         72:66:b5:88:f0:c7:46:e7:d5:75:96:2d:20:fe:d1:db:8b:c1:
         68:d7:ec:bc:b7:79:cf:6d:4b:ff:1e:a8:01:5c:2e:dc:eb:3e:
         9d:8e:49:5f:b1:4c:e2:d9:ff:a8:21:68:c0:62:82:cf:7e:cc:
         b6:87:c2:79:e9:08:2c:9a:09:94:bc:97:22:26:2a:5e:bf:2d:
         81:06:46:3e:dc:44:09:2b:d9:53:0a:ac:55:84:e7:80:f7:d3:
         fb:5b:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org