Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653030303a3a2f34302d3438203d3e20323130313532.roa
File:                     326130613a363034303a653030303a3a2f34302d3438203d3e20323130313532.roa (raw, json)
Hash identifier:          hX4qtusz551DUF4b2/T8Kyjt+U6zdt+cn7vHyfwDlUw=
Subject key identifier:   F1:8B:6E:9A:84:B3:EC:C0:F9:BD:50:27:35:97:DD:27:7C:8C:8B:34
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       3999BC886EEB2712E208E6CFAD202A51C19E7879
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653030303a3a2f34302d3438203d3e20323130313532.roa
Signing time:             Fri 09 Dec 2022 08:20:59 +0000
ROA not before:           Fri 09 Dec 2022 08:15:59 +0000
ROA not after:            Fri 08 Dec 2023 08:20:59 +0000
asID:                     210152
IP address blocks:        2a0a:6040:e000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:99:bc:88:6e:eb:27:12:e2:08:e6:cf:ad:20:2a:51:c1:9e:78:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:59 2022 GMT
            Not After : Dec  8 08:20:59 2023 GMT
        Subject: CN=F18B6E9A84B3ECC0F9BD50273597DD277C8C8B34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:30:55:4d:ac:80:6d:00:e8:83:96:b7:cf:
                    c6:9a:cc:ec:b2:ca:dd:05:fe:d9:5d:46:6b:5f:dc:
                    d3:dc:e9:41:2e:83:b3:fb:52:63:06:0f:f6:10:6b:
                    3b:cb:18:e5:62:39:49:c0:c4:57:2b:84:43:ed:ab:
                    ca:fa:e9:2b:ee:b7:e2:43:ff:62:7b:ee:7b:27:06:
                    c3:54:9f:8e:f5:6f:09:f1:85:50:f2:fa:fd:c2:54:
                    cc:fd:54:ec:45:49:e2:55:6f:e6:fb:b3:7d:cf:7a:
                    fd:af:4e:c2:e4:28:49:81:01:19:ad:c2:6d:5e:6b:
                    7a:be:43:24:41:c5:21:d1:43:ab:6c:cb:11:05:e8:
                    05:d2:6b:06:88:d5:c7:97:de:d1:36:c4:e1:b8:47:
                    16:37:c4:bc:de:08:3b:e1:43:53:20:03:06:4a:04:
                    d2:07:57:50:af:b4:07:dc:7a:70:e5:58:ad:e0:ed:
                    d0:1d:4f:1f:77:6b:23:01:37:e7:1e:bd:af:6c:f0:
                    79:85:85:ad:a0:42:6f:ea:f0:85:44:44:00:fc:63:
                    97:62:fe:02:e9:ad:0c:b6:a9:24:b7:7e:57:df:8e:
                    b9:dd:ae:b1:6e:b7:a0:bc:59:1c:37:8b:40:74:ca:
                    ce:5c:13:fd:12:b8:47:12:2d:94:d3:19:e4:13:ca:
                    5d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8B:6E:9A:84:B3:EC:C0:F9:BD:50:27:35:97:DD:27:7C:8C:8B:34
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653030303a3a2f34302d3438203d3e20323130313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:c8:43:e9:31:80:46:d4:7a:41:56:e9:c4:72:06:d1:5c:09:
         8b:41:a5:51:2c:d0:75:91:05:ef:6c:c3:49:92:10:e1:4a:60:
         3b:dc:0f:3f:03:e2:b0:1e:22:00:18:53:d8:42:86:26:d1:f0:
         18:ad:02:e4:72:b2:25:d7:da:34:78:04:61:e2:95:5f:55:f5:
         99:d1:1e:43:f7:0c:9c:fd:c5:27:9a:fe:4b:90:07:99:7f:25:
         81:32:c7:36:d4:ca:57:90:99:bc:19:88:a6:23:55:66:5a:87:
         5e:44:78:86:52:e5:b2:6a:7b:77:52:c5:fc:da:b1:5a:f3:8d:
         37:3b:b7:61:61:af:30:7e:b5:02:24:b3:24:73:c4:62:4e:21:
         54:7b:5a:f1:12:85:75:b6:e0:8a:b9:6d:8b:30:fa:04:fe:15:
         b0:e2:04:07:b7:87:23:d4:28:b6:78:eb:1b:d4:6c:7a:88:89:
         cf:35:74:6f:5e:b6:e4:42:5e:17:0b:20:b9:95:93:e2:e4:f5:
         b2:bc:98:6e:79:e2:61:eb:5e:bb:9c:51:01:4d:df:c1:24:35:
         5a:7f:c4:c6:45:e9:b5:ba:47:83:e1:3f:94:7a:43:20:1f:e4:
         9b:7c:d7:be:05:22:55:3a:d8:76:bc:8c:13:a6:51:31:27:7b:
         09:32:8a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org