Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a656130303a3a2f34302d3438203d3e20323030383835.roa
File:                     326130613a363034303a656130303a3a2f34302d3438203d3e20323030383835.roa (raw, json)
Hash identifier:          OV3E9pH/49xaBf7RnFGi70ONtJEhFpG73yYyRE66pvs=
Subject key identifier:   18:EA:5C:7D:EE:83:20:2A:E6:DE:DD:CF:E3:7B:1F:D5:0E:72:5C:7A
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       460D932B17AE56B64C0B2DBBA9AE106AA59FE806
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a656130303a3a2f34302d3438203d3e20323030383835.roa
Signing time:             Fri 09 Dec 2022 08:21:01 +0000
ROA not before:           Fri 09 Dec 2022 08:16:01 +0000
ROA not after:            Fri 08 Dec 2023 08:21:01 +0000
asID:                     200885
IP address blocks:        2a0a:6040:ea00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0d:93:2b:17:ae:56:b6:4c:0b:2d:bb:a9:ae:10:6a:a5:9f:e8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:01 2022 GMT
            Not After : Dec  8 08:21:01 2023 GMT
        Subject: CN=18EA5C7DEE83202AE6DEDDCFE37B1FD50E725C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:07:4a:07:14:a4:d7:be:2e:b9:ab:d7:43:48:
                    fb:0b:5d:16:74:7e:b5:d4:cc:16:65:4c:73:8c:ab:
                    3f:a6:ec:6a:bf:0d:3e:4d:0e:40:48:e2:e0:27:13:
                    74:bf:4a:7b:64:8a:eb:d6:81:e3:43:83:ff:32:bc:
                    20:06:f5:c3:7f:fd:5d:26:2e:ae:83:dd:87:3f:0e:
                    e2:da:c1:06:7e:fd:d9:e8:80:f8:22:30:1c:9c:ba:
                    37:df:6d:a7:cc:7b:5f:db:34:a3:37:f2:55:9a:1d:
                    1a:6e:19:9a:94:ba:92:3e:d0:54:73:4f:3e:58:27:
                    a6:02:1b:b8:fc:e9:b0:a7:de:6e:3d:6d:53:8f:d0:
                    79:8b:70:7d:76:64:db:5c:c3:29:82:76:96:c3:51:
                    f8:b9:89:2f:99:47:23:fd:b8:28:c1:61:f1:ef:32:
                    5f:08:11:7c:65:34:32:6e:02:bc:33:ed:78:bd:eb:
                    9d:e8:59:d1:09:ac:31:19:6f:c6:e4:52:98:47:41:
                    e0:db:91:b6:5a:ed:72:64:52:b2:96:81:d6:c1:8d:
                    be:40:3c:7b:80:89:dc:04:68:ce:7d:80:67:fa:80:
                    3a:a4:eb:00:5b:35:0e:5d:a2:b2:1a:ff:3f:3a:48:
                    91:67:bf:d1:c1:45:8a:42:cd:e0:0d:62:08:35:92:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EA:5C:7D:EE:83:20:2A:E6:DE:DD:CF:E3:7B:1F:D5:0E:72:5C:7A
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a656130303a3a2f34302d3438203d3e20323030383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ea00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:14:9e:d9:ef:79:6a:15:b0:8e:b4:60:c6:cc:68:d7:e3:4c:
         88:b7:c2:26:ae:a2:a6:1c:23:03:6c:44:af:c8:1e:07:a1:b1:
         0e:b9:2e:1d:09:f5:ec:3f:7f:b7:78:9f:80:96:28:21:21:c0:
         e7:8c:3b:b0:59:00:8b:7a:a4:37:e0:51:0b:d4:74:b9:09:5a:
         54:35:ed:bf:f7:64:1c:a3:9d:18:7b:05:45:f0:04:d6:21:cc:
         f8:16:86:21:ec:68:93:c6:69:ad:69:c6:7c:b3:59:e8:d1:32:
         19:85:b3:f0:7c:5c:77:d4:17:93:c2:79:a8:ca:3f:1b:b7:d6:
         ea:67:67:dd:c4:18:b2:c6:56:2f:78:53:dc:3f:98:34:70:f7:
         bf:a8:29:66:03:2c:10:4a:01:76:6f:60:bf:93:1b:fc:eb:1d:
         c6:b1:cd:ea:45:0d:be:69:54:76:1e:3f:ae:48:46:64:11:2f:
         ed:b4:cb:cf:f0:55:23:92:2f:98:48:e5:d1:06:f3:79:b7:cc:
         05:62:2c:20:d7:7b:b4:c4:ab:4a:0e:a5:e4:4a:47:46:c8:ba:
         f0:e5:f1:a2:d6:7a:90:20:50:13:da:a1:fd:db:aa:f8:a7:70:
         0a:18:e6:22:01:cf:29:62:5e:4c:2b:2b:b5:40:5a:c1:98:27:
         09:b5:92:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org