Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653130303a3a2f34302d3438203d3e20323030393037.roa
File:                     326130613a363034303a653130303a3a2f34302d3438203d3e20323030393037.roa (raw, json)
Hash identifier:          MTxtpAz2itL3XollTmV3Hag1xt/EdiB9hK83/oiCrfE=
Subject key identifier:   DF:19:61:FA:B6:CD:25:7A:23:A6:F3:D2:D1:05:5E:9B:3F:0C:F6:01
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2A098FD669C645030FEEAAC37A7097E20E453DA2
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653130303a3a2f34302d3438203d3e20323030393037.roa
Signing time:             Fri 09 Dec 2022 08:20:59 +0000
ROA not before:           Fri 09 Dec 2022 08:15:59 +0000
ROA not after:            Fri 08 Dec 2023 08:20:59 +0000
asID:                     200907
IP address blocks:        2a0a:6040:e100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:09:8f:d6:69:c6:45:03:0f:ee:aa:c3:7a:70:97:e2:0e:45:3d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:59 2022 GMT
            Not After : Dec  8 08:20:59 2023 GMT
        Subject: CN=DF1961FAB6CD257A23A6F3D2D1055E9B3F0CF601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:28:c9:40:f5:e6:00:5b:75:6d:92:7c:95:c2:
                    d2:27:9f:25:bf:08:49:08:ba:7e:3d:81:38:c5:7e:
                    bc:d3:fd:92:ef:50:5a:9f:67:d8:e6:81:d5:78:33:
                    7a:20:be:92:e4:8e:da:49:5f:26:a3:7d:35:93:8a:
                    3a:06:2a:d8:05:2b:16:87:b5:2b:bb:3e:d9:f0:22:
                    e8:40:a3:09:3d:fa:6e:63:72:9a:ea:06:3a:3f:53:
                    df:0b:37:49:b3:22:2b:ba:a5:be:f2:19:4d:6a:a2:
                    1b:3e:01:29:af:77:ea:72:9c:8c:79:24:6e:a5:9f:
                    c9:d6:69:4c:08:ca:e1:a2:ca:3e:1c:24:07:85:72:
                    0c:20:70:6f:73:3c:f8:7d:17:a9:5a:c9:7c:26:43:
                    35:2e:0b:7a:82:31:b3:cf:13:dd:a7:1b:2e:a4:39:
                    37:b8:18:c6:98:ea:f5:42:17:ac:98:a1:c9:93:75:
                    37:1a:fc:fd:57:f0:f0:46:fb:12:9b:52:30:29:f4:
                    3e:9d:1e:4a:55:17:f8:ff:00:1b:43:ff:85:3c:4f:
                    59:e4:8b:b3:f1:36:61:4b:8b:91:2e:dc:34:55:1b:
                    72:60:7a:56:22:78:c3:81:71:bb:b0:c6:f5:34:2b:
                    5c:a7:9a:a0:8f:2e:5c:35:3e:14:e7:fa:cb:d1:52:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:19:61:FA:B6:CD:25:7A:23:A6:F3:D2:D1:05:5E:9B:3F:0C:F6:01
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653130303a3a2f34302d3438203d3e20323030393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:71:af:99:5a:97:f3:bb:3e:51:17:45:1b:1e:77:70:af:bb:
         b0:71:b0:41:5d:e2:0f:ba:a9:15:e2:07:db:fb:7d:54:fe:5a:
         2e:d1:11:b8:ff:8d:d3:12:75:c7:00:2a:5f:96:0d:9d:e6:9f:
         44:3a:ba:27:57:27:ad:72:20:ec:b4:e4:8a:6f:ef:26:14:fd:
         8b:95:a2:67:91:52:21:8f:55:11:cf:c0:3f:0c:bd:9d:64:07:
         0f:e4:b4:6b:03:4e:2b:56:8f:77:b6:4d:24:9d:fa:76:c5:c6:
         a3:8c:c7:ed:3b:bc:16:41:51:b9:7b:22:24:c8:06:68:ff:80:
         3a:7d:b5:a9:ba:61:3a:e9:e0:0f:c9:ea:c0:09:a2:e4:4e:0a:
         56:3a:01:dc:de:d7:b8:97:70:10:0e:3f:e3:55:99:a4:f0:95:
         95:41:9a:3d:df:98:50:89:6a:c4:b8:80:73:1b:2a:b9:ca:f9:
         46:6b:dd:46:67:d8:db:a9:00:f4:c2:0d:06:47:14:71:a6:c2:
         89:87:d5:21:b3:9d:57:6f:a1:d1:26:4a:aa:2f:e1:98:c5:c6:
         04:de:a6:a5:63:ec:1a:f2:e2:81:c0:e1:73:d6:80:c6:91:09:
         04:0a:37:eb:0e:cc:91:55:b8:6c:2c:aa:fa:2d:5a:47:04:e1:
         5e:4f:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org