Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653830303a3a2f34302d3438203d3e20323131363739.roa
File:                     326130613a363034303a653830303a3a2f34302d3438203d3e20323131363739.roa (raw, json)
Hash identifier:          sWrTzBy9C+cZQaqsLt/tiuvreeOyVDUdYsN8N8q9xUE=
Subject key identifier:   F9:72:4C:8D:EC:00:1F:F8:14:97:1C:FE:16:96:B6:50:EB:3D:2F:94
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       4C5736E7BAA43FEB82A5F42CF3BFA42997383D56
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653830303a3a2f34302d3438203d3e20323131363739.roa
Signing time:             Fri 09 Dec 2022 08:20:58 +0000
ROA not before:           Fri 09 Dec 2022 08:15:58 +0000
ROA not after:            Fri 08 Dec 2023 08:20:58 +0000
asID:                     211679
IP address blocks:        2a0a:6040:e800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:57:36:e7:ba:a4:3f:eb:82:a5:f4:2c:f3:bf:a4:29:97:38:3d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:58 2022 GMT
            Not After : Dec  8 08:20:58 2023 GMT
        Subject: CN=F9724C8DEC001FF814971CFE1696B650EB3D2F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:6d:a7:de:fd:02:2a:29:fc:aa:d3:f0:5b:
                    76:18:ec:69:f9:e1:f8:cb:8b:9a:d6:06:a2:81:0a:
                    06:28:64:63:c5:80:0c:54:00:63:35:c2:20:9a:a6:
                    54:8d:9b:78:82:e7:70:15:fa:df:ad:b1:92:2f:e1:
                    04:60:54:fb:90:f6:f2:43:8a:5c:8c:a2:59:28:cb:
                    9b:32:a0:d4:31:6e:40:85:37:1c:cc:47:cb:e6:e2:
                    e4:56:e3:0d:af:2a:20:8f:cd:69:b8:71:4f:8d:95:
                    3e:b3:c8:48:62:54:0a:80:69:0e:76:fe:4b:eb:50:
                    60:9b:db:26:f4:fb:4b:99:69:99:57:46:50:6b:65:
                    80:1b:80:b3:14:69:73:0c:72:d7:87:46:6a:3d:a3:
                    54:5c:99:7c:d6:e7:0d:10:5c:8e:00:55:de:cf:7c:
                    a1:2a:33:2d:92:d3:fa:cc:0d:f2:e5:eb:7f:d3:bb:
                    65:f7:38:1f:95:a2:df:a4:cb:8d:14:ee:61:db:e3:
                    30:ed:0b:e7:13:58:53:d2:1e:6a:cb:05:34:06:9e:
                    f3:b0:cb:71:da:b9:f3:e9:12:17:85:0a:6d:08:fe:
                    25:40:61:44:61:d0:47:3d:15:fa:e2:f4:2f:17:19:
                    f7:a5:67:23:c8:04:d0:d4:9e:51:04:54:b1:47:02:
                    83:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:72:4C:8D:EC:00:1F:F8:14:97:1C:FE:16:96:B6:50:EB:3D:2F:94
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653830303a3a2f34302d3438203d3e20323131363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e800::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:6a:5d:17:3b:04:e6:59:44:05:0d:09:a8:a5:40:82:3d:12:
         5f:d5:b8:b1:75:62:c4:0d:82:11:14:04:11:3a:30:32:b0:64:
         ea:de:7e:4c:ca:8b:32:c6:4a:de:89:05:66:4e:79:1c:a0:66:
         48:8e:52:f4:46:af:91:06:f7:a9:44:15:83:c3:f3:5e:74:b4:
         bf:a1:56:64:2d:46:49:b3:d7:b4:3d:4d:cb:35:b6:73:9a:26:
         fe:40:e2:a6:15:96:d4:53:58:88:77:8d:b9:98:ce:5f:a2:6e:
         4a:38:57:64:77:ff:d2:d2:80:cb:8b:e5:b0:62:5e:cc:62:16:
         d5:3a:69:e2:52:4a:c8:0c:17:4b:95:b5:43:f4:5d:8b:90:ef:
         cb:0b:48:0d:5e:50:d8:bd:36:e4:82:24:b6:e4:d3:8e:96:ac:
         26:3e:e7:39:e6:90:75:35:96:06:a4:68:98:a7:5f:d4:41:80:
         e2:5d:f3:f4:2a:93:73:1a:73:a7:b8:15:49:0c:5a:74:ff:f3:
         9f:ce:d9:4a:ae:cc:fb:5e:01:9d:ce:63:5f:bc:59:85:09:7c:
         8c:df:34:42:ba:f6:ca:ad:f4:ab:20:d1:fa:c5:0f:a9:02:a1:
         a8:3b:85:ff:fa:e2:00:e2:2d:fc:68:34:0c:14:d7:e2:d9:22:
         ac:48:be:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org