Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653930303a3a2f34302d3438203d3e20323030353435.roa
File:                     326130613a363034303a653930303a3a2f34302d3438203d3e20323030353435.roa (raw, json)
Hash identifier:          9mHrQa1veZCwBC1WpPXEvH969K0jXw5poFfgn4IMsxs=
Subject key identifier:   E6:43:2B:D3:A6:26:2D:DD:DC:97:02:EC:13:4B:70:F1:BB:A5:07:DB
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       55920C904D287E644F5ED5BCC78844FE611F02FC
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653930303a3a2f34302d3438203d3e20323030353435.roa
Signing time:             Wed 14 Dec 2022 11:26:24 +0000
ROA not before:           Wed 14 Dec 2022 11:21:24 +0000
ROA not after:            Wed 13 Dec 2023 11:26:24 +0000
asID:                     200545
IP address blocks:        2a0a:6040:e900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:92:0c:90:4d:28:7e:64:4f:5e:d5:bc:c7:88:44:fe:61:1f:02:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec 14 11:21:24 2022 GMT
            Not After : Dec 13 11:26:24 2023 GMT
        Subject: CN=E6432BD3A6262DDDDC9702EC134B70F1BBA507DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:31:77:b5:e3:69:2c:9c:33:d8:72:d8:ce:cd:
                    eb:99:c5:81:4d:f5:b0:61:39:75:ca:8a:70:22:e8:
                    e7:a0:17:ea:66:3f:36:f6:76:a8:ce:bb:7b:02:a0:
                    d3:53:9f:a5:e6:45:cf:63:05:2a:9f:1c:51:6d:42:
                    cc:43:f3:b4:72:1b:0a:04:a7:28:05:57:52:9f:43:
                    41:9a:fb:31:f8:97:57:3d:73:7b:1d:3e:5f:91:99:
                    49:5b:23:cc:b1:42:ae:67:b5:b0:c1:53:b4:77:3d:
                    4a:15:7e:ab:ae:28:b8:b4:38:ab:18:10:d3:bd:f5:
                    70:e7:45:0b:1a:7b:ee:b0:42:4f:56:63:e5:2e:f8:
                    19:d8:d1:21:15:97:74:ff:39:df:43:98:1d:d4:ac:
                    9c:59:ea:08:24:88:1b:58:46:79:53:0a:ee:8e:cb:
                    e1:ec:d1:8e:ac:10:18:de:b8:ff:b9:7a:69:a6:c1:
                    aa:86:ca:b4:34:6b:6b:f3:bc:0c:7b:a0:f8:f1:b0:
                    ee:b4:1b:b6:17:8e:f3:f5:c9:ff:1c:d1:81:56:c6:
                    e5:ef:7a:7d:e8:38:6d:d9:dc:2d:30:84:65:f4:6a:
                    d0:ca:22:75:81:c2:a7:73:1e:1a:52:56:e7:a1:d7:
                    dc:7c:a8:cd:36:38:10:6a:3b:fd:c0:1a:cf:dc:9b:
                    bd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:43:2B:D3:A6:26:2D:DD:DC:97:02:EC:13:4B:70:F1:BB:A5:07:DB
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a653930303a3a2f34302d3438203d3e20323030353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:e900::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:5b:ef:91:96:e9:16:32:60:03:72:fc:27:dc:94:d5:20:a1:
         76:f9:cf:c9:f3:a0:7a:b8:02:ea:fa:26:9c:84:97:7c:b1:7e:
         1b:aa:be:6c:bf:ea:86:f0:3f:c6:5b:9b:c2:5e:d7:bc:2d:b7:
         23:70:2d:98:a5:ed:dd:65:00:20:37:94:2c:2e:bb:8b:09:5e:
         17:a1:79:65:a5:95:69:89:77:7b:2d:a6:54:46:4e:44:ca:1f:
         05:d3:33:c3:57:a8:4f:78:ab:aa:a1:81:2c:43:70:72:4b:97:
         78:1e:52:38:f2:f9:d8:81:45:ec:df:4f:3c:7c:91:40:8f:d1:
         f8:22:15:36:c3:b9:82:df:b3:78:83:53:5f:47:60:99:af:0a:
         3b:da:aa:c9:91:de:ac:41:14:83:d9:a0:f2:7e:3d:7b:db:b5:
         45:f0:50:c1:20:89:89:c1:05:40:4c:1c:a5:f9:ce:55:04:40:
         08:13:d6:51:18:66:06:ff:c6:77:8e:02:2b:ae:ab:36:9b:61:
         e9:e7:8c:45:17:dd:82:cf:e5:64:d4:d5:ab:b3:de:b9:eb:3e:
         d2:cf:40:5f:f6:4b:5d:f9:fa:86:0f:8b:40:1c:7c:a2:b7:6f:
         a0:06:7e:63:27:0f:80:12:1c:82:73:04:b7:a7:31:f9:73:2e:
         b9:76:97:4f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUVZIMkE0ofmRPXtW8x4hE/mEfAvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMjEyMTQxMTIxMjRaFw0yMzEyMTMxMTI2MjRaMDMxMTAvBgNV
BAMTKEU2NDMyQkQzQTYyNjJEREREQzk3MDJFQzEzNEI3MEYxQkJBNTA3REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoMXe142ksnDPYctjOzeuZxYFN
9bBhOXXKinAi6OegF+pmPzb2dqjOu3sCoNNTn6XmRc9jBSqfHFFtQsxD87RyGwoE
pygFV1KfQ0Ga+zH4l1c9c3sdPl+RmUlbI8yxQq5ntbDBU7R3PUoVfquuKLi0OKsY
ENO99XDnRQsae+6wQk9WY+Uu+BnY0SEVl3T/Od9DmB3UrJxZ6ggkiBtYRnlTCu6O
y+Hs0Y6sEBjeuP+5emmmwaqGyrQ0a2vzvAx7oPjxsO60G7YXjvP1yf8c0YFWxuXv
en3oOG3Z3C0whGX0atDKInWBwqdzHhpSVueh19x8qM02OBBqO/3AGs/cm72TAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQU5kMr06YmLd3clwLsE0tw8bulB9swHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3luYzov
L3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzBFMzU3RERB
MDRCODEwNzYyNjEyNEY1MkNGQzI0MzlCNzZEODVBRjkuY2VyMIGVBggrBgEFBQcB
CwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2ku
YXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvMzI2MTMwNjEzYTM2MzAzNDMwM2E2NTM5
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzMDM1MzQzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoKYEDpMA0GCSqGSIb3DQEBCwUAA4IBAQCFW++RlukWMmADcvwn3JTVIKF2
+c/J86B6uALq+iachJd8sX4bqr5sv+qG8D/GW5vCXte8LbcjcC2Ype3dZQAgN5Qs
LruLCV4XoXllpZVpiXd7LaZURk5Eyh8F0zPDV6hPeKuqoYEsQ3ByS5d4HlI48vnY
gUXs3088fJFAj9H4IhU2w7mC37N4g1NfR2CZrwo72qrJkd6sQRSD2aDyfj1727VF
8FDBIImJwQVATByl+c5VBEAIE9ZRGGYG/8Z3jgIrrqs2m2Hp54xFF92Cz+Vk1NWr
s9656z7Sz0Bf9ktd+fqGD4tAHHyit2+gBn5jJw+AEhyCcwS3pzH5cy65dpdP
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org