Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663130303a3a2f34302d3438203d3e20323030393638.roa
File:                     326130613a363034303a663130303a3a2f34302d3438203d3e20323030393638.roa (raw, json)
Hash identifier:          PTwl0T+NHUnRIHDZOrz+jpZFfOkPbQ8JT/hzJoworJw=
Subject key identifier:   E9:61:B8:5F:CF:F7:46:BD:B6:4D:A4:7A:E0:AD:D7:71:A8:FA:69:86
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2821AF34F6072ABEEBFD8A9D86E6E9DB778B0280
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663130303a3a2f34302d3438203d3e20323030393638.roa
Signing time:             Fri 09 Dec 2022 08:21:01 +0000
ROA not before:           Fri 09 Dec 2022 08:16:01 +0000
ROA not after:            Fri 08 Dec 2023 08:21:01 +0000
asID:                     200968
IP address blocks:        2a0a:6040:f100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:21:af:34:f6:07:2a:be:eb:fd:8a:9d:86:e6:e9:db:77:8b:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:01 2022 GMT
            Not After : Dec  8 08:21:01 2023 GMT
        Subject: CN=E961B85FCFF746BDB64DA47AE0ADD771A8FA6986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:98:bf:8b:80:72:f5:1d:38:05:10:de:70:
                    af:5d:ca:43:88:79:d1:21:d4:83:be:47:86:86:01:
                    a0:23:1d:fc:93:f8:39:af:74:17:18:eb:41:49:3b:
                    76:4c:a3:bb:5a:37:d1:14:5f:ec:93:04:95:d2:74:
                    cc:6c:0d:eb:24:b7:77:39:01:5b:ae:2d:f7:18:07:
                    cf:63:f2:0d:bb:ee:9a:a1:35:ed:e5:db:f1:f1:55:
                    41:17:94:69:64:15:2e:d4:81:7d:e6:09:0e:3e:69:
                    c7:99:12:4c:83:8d:3d:01:43:26:14:a1:ef:4c:a3:
                    68:92:04:4a:8d:4e:34:2e:e4:a1:71:1a:c9:65:24:
                    c3:c2:d7:7d:3f:27:36:67:96:d4:94:90:95:4c:f1:
                    14:d9:f1:84:54:0e:34:77:c1:00:14:63:16:0a:ea:
                    41:b1:81:08:61:f1:ab:17:ae:5c:4b:c1:fc:41:c4:
                    dd:d8:9e:d7:ae:15:e1:13:fa:b4:8a:ad:60:07:16:
                    fe:96:b5:a2:d2:dc:5e:58:ab:24:2d:49:f2:9a:81:
                    29:6c:a3:b5:d0:2b:5e:0a:49:33:fc:dc:b3:a6:34:
                    e7:0c:74:84:4b:68:8b:48:3a:1c:dd:64:fd:81:f8:
                    b7:57:e8:1f:16:ab:17:0d:5e:db:6e:89:cf:9f:39:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:61:B8:5F:CF:F7:46:BD:B6:4D:A4:7A:E0:AD:D7:71:A8:FA:69:86
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663130303a3a2f34302d3438203d3e20323030393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:f100::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:d7:e1:d2:06:df:02:35:86:a0:71:27:77:d9:96:ad:8c:ac:
         f6:32:85:22:3f:d2:36:ef:7f:26:c5:4a:6a:70:6e:3c:f0:a5:
         29:ff:aa:f5:82:5e:a1:19:1f:b2:0f:30:3e:09:53:5f:13:64:
         94:5e:f0:03:34:97:8f:80:73:91:7c:43:a4:4f:2e:05:aa:0f:
         15:7f:f2:93:25:13:02:18:23:57:6a:68:ed:aa:5e:aa:1d:dd:
         47:de:4e:99:1a:ad:5e:8a:2c:05:2c:c9:70:d9:5e:41:21:84:
         c8:8a:6d:d9:68:43:f8:19:9d:e9:f3:84:7e:d9:3c:d0:88:c9:
         60:df:9e:b1:77:9d:3e:80:84:9e:dd:a5:f8:53:64:9d:08:c8:
         f7:d2:7b:8d:40:15:91:76:40:d0:0c:4e:59:42:da:3f:d7:6f:
         fa:3b:38:93:3a:8c:e2:7c:9a:34:b8:e0:f0:bf:82:f0:1a:0b:
         1b:81:91:f1:a3:fa:c3:db:7c:8f:0a:8d:16:92:28:7b:13:85:
         bf:59:f1:8c:c0:a1:d9:52:ac:46:1f:86:37:c1:e6:9c:20:f7:
         ca:dc:28:1c:b0:ef:81:db:ff:63:f4:d0:3e:68:90:15:d9:b1:
         be:4f:ac:ee:7e:ab:c9:13:4c:58:99:83:0b:b0:83:eb:0d:67:
         e9:30:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org