Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653230303a3a2f34302d3438203d3e20323131343433.roa
File:                     326130613a363034303a653230303a3a2f34302d3438203d3e20323131343433.roa (raw, json)
Hash identifier:          CMcpY/ly675mwhYlBP5QbZJifMuNxbvfyEYFUolGKDY=
Subject key identifier:   B9:91:B5:11:2E:E7:D8:4C:0B:CB:57:B6:A8:11:92:30:86:09:36:66
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       66E317933B91F0E276473E6E379461E0179EFDF9
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653230303a3a2f34302d3438203d3e20323131343433.roa
Signing time:             Thu 15 Dec 2022 12:30:19 +0000
ROA not before:           Thu 15 Dec 2022 12:25:19 +0000
ROA not after:            Thu 14 Dec 2023 12:30:19 +0000
asID:                     211443
IP address blocks:        2a0a:6040:e200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e3:17:93:3b:91:f0:e2:76:47:3e:6e:37:94:61:e0:17:9e:fd:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 15 12:25:19 2022 GMT
            Not After : Dec 14 12:30:19 2023 GMT
        Subject: CN=B991B5112EE7D84C0BCB57B6A811923086093666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:98:a8:70:b9:48:08:07:50:cc:39:ca:3f:
                    c4:f0:23:7d:ea:06:4c:11:b8:cb:c4:34:35:56:a6:
                    35:cb:9d:43:2b:b2:62:5b:6d:f9:17:46:5f:70:71:
                    88:b3:26:34:7e:11:aa:55:a5:19:1e:67:c5:33:fa:
                    52:9d:0e:d1:a6:6d:bd:e3:cb:44:c8:e9:b3:0e:63:
                    f0:43:d3:98:49:e5:0c:e1:20:98:86:c5:46:b8:56:
                    83:12:93:a5:7f:2e:1a:56:3b:5d:c8:9e:89:62:46:
                    90:b0:4b:83:94:4e:96:55:85:85:5e:56:cb:a9:36:
                    15:0d:41:b2:cc:b1:56:01:32:ce:d4:77:29:74:07:
                    10:7f:7b:b5:06:c3:11:93:90:c0:51:92:a1:86:2f:
                    b7:45:70:8b:9c:87:c3:b0:6a:14:d9:76:65:59:a7:
                    f2:c2:6f:63:70:bd:cd:0b:bb:c6:07:36:b2:cb:11:
                    37:b8:71:ab:28:3c:f3:1d:dd:91:b1:c6:e5:24:bd:
                    7c:2e:52:be:26:21:4b:17:4e:41:bb:62:c9:15:85:
                    21:ad:24:4b:9a:29:e5:71:63:29:48:f6:51:b2:c5:
                    22:a8:1d:20:62:6e:78:70:b1:d9:22:a0:b6:9c:dd:
                    f6:02:fb:0d:21:8d:11:dc:88:87:e3:ed:af:54:9d:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:91:B5:11:2E:E7:D8:4C:0B:CB:57:B6:A8:11:92:30:86:09:36:66
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653230303a3a2f34302d3438203d3e20323131343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e200::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:b9:0a:35:74:70:30:2d:c6:73:14:05:d2:80:41:d4:d3:54:
         f8:c2:91:80:76:22:e1:34:69:5a:1a:f8:c5:89:c9:c5:ad:ef:
         55:38:cc:3f:3c:2b:0b:89:9c:97:7f:58:3d:b1:b3:2f:74:a3:
         36:21:aa:14:aa:e3:13:9c:40:d5:64:43:ab:7f:ae:d5:e4:0c:
         c2:bb:03:ca:9f:49:ce:c9:72:e2:9c:09:83:85:8e:1c:70:90:
         35:08:77:8e:97:63:40:68:02:00:7f:3b:8f:3a:1c:d1:55:d1:
         a8:2c:9e:db:6f:b7:f7:00:d1:af:28:04:f9:11:c4:4f:0d:02:
         aa:2e:4a:c7:a1:27:81:b1:47:16:f4:71:6e:9f:d7:10:a9:53:
         2b:e6:3a:44:e6:83:10:e9:e4:de:88:ad:02:e0:f6:4a:91:e2:
         1e:16:3d:94:bb:f0:33:65:c5:d5:37:d8:32:b2:ae:2d:56:6e:
         a0:cc:7b:14:dd:41:76:9e:a4:e3:2b:b7:e4:36:7b:af:f6:62:
         f2:d8:bc:08:04:d5:c3:f2:0f:a2:24:ba:b9:d8:7d:b5:19:fe:
         80:82:0a:b0:5b:a7:05:25:34:7c:89:b1:68:10:14:22:9a:c3:
         65:2d:f8:66:0b:ca:c3:46:a9:1d:fb:da:94:ea:88:aa:89:6f:
         0b:53:7e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org