Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663730303a3a2f34302d3438203d3e20323030363731.roa
File:                     326130613a363034303a663730303a3a2f34302d3438203d3e20323030363731.roa (raw, json)
Hash identifier:          DW2NTtovwcdnvcQvm2pH7MElM3tqvrvnJ02JLOs/sdk=
Subject key identifier:   ED:E7:05:A3:4E:9A:B3:18:04:12:57:6B:DF:7C:CA:8C:28:E9:F0:B4
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       27EEF5FE4035B0AB555F719C9ACA4C98BCF1A1BB
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663730303a3a2f34302d3438203d3e20323030363731.roa
Signing time:             Fri 09 Dec 2022 12:14:04 +0000
ROA not before:           Fri 09 Dec 2022 12:09:04 +0000
ROA not after:            Fri 08 Dec 2023 12:14:04 +0000
asID:                     200671
IP address blocks:        2a0a:6040:f700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ee:f5:fe:40:35:b0:ab:55:5f:71:9c:9a:ca:4c:98:bc:f1:a1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 12:09:04 2022 GMT
            Not After : Dec  8 12:14:04 2023 GMT
        Subject: CN=EDE705A34E9AB3180412576BDF7CCA8C28E9F0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:c2:cd:9c:de:4b:fc:06:d9:48:f7:23:28:
                    67:3a:09:2c:10:4b:a3:12:91:f6:54:f0:e7:af:15:
                    89:54:0d:34:89:0d:d6:37:49:43:62:33:c1:6a:e4:
                    63:aa:92:62:2d:ca:d8:3d:c2:e9:c5:ad:22:d1:73:
                    89:1b:51:69:1d:24:c9:af:5f:d5:d6:f7:61:9a:04:
                    10:c8:cc:0e:41:0c:9a:a4:ec:37:92:7a:3b:86:4b:
                    c5:95:b9:ad:de:32:39:84:b6:e6:42:d5:f3:1d:66:
                    00:42:9b:3d:94:59:ae:db:4d:c0:3f:ea:a1:ae:f1:
                    c9:a4:a9:9b:2c:2b:c8:bc:c5:bc:8c:41:e8:ad:b7:
                    4c:8e:9a:1e:6b:af:fd:4d:b6:aa:89:cb:a9:1b:d4:
                    52:32:dc:b1:82:3a:ec:42:0f:93:6c:24:9f:7f:d0:
                    fd:4f:97:1a:3d:4a:8a:d9:a5:d7:46:c5:b6:da:e5:
                    a8:d0:3a:79:04:47:04:07:d9:c3:65:ca:c4:4b:83:
                    65:82:d1:7d:3b:fd:0f:f8:9b:e4:f3:5a:81:8c:bc:
                    e5:97:4a:66:33:13:c6:9c:58:b9:18:b1:63:5d:ab:
                    70:b1:02:4d:f5:7f:7d:da:18:6d:d9:08:93:7a:23:
                    ae:ea:99:bd:0e:6e:32:db:e9:bf:33:63:7f:0a:ea:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E7:05:A3:4E:9A:B3:18:04:12:57:6B:DF:7C:CA:8C:28:E9:F0:B4
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663730303a3a2f34302d3438203d3e20323030363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:b6:aa:36:b9:f1:fb:a5:d6:8d:a1:3f:63:91:06:bf:01:6c:
         f1:7f:4b:17:e3:1a:00:fb:e0:9d:c5:1e:05:87:e3:8a:8f:61:
         a2:e7:e1:9c:fc:20:f0:b2:30:3f:01:10:b5:cb:49:3c:1e:e8:
         08:80:9d:49:19:3c:73:3b:34:93:3d:00:b9:68:7f:ce:73:fd:
         ae:5d:3f:30:d5:a3:37:a3:07:ca:13:fb:36:30:4c:0e:6f:a9:
         fe:e4:4d:d2:da:83:8a:2f:e8:ff:4b:42:7d:25:e3:34:d2:99:
         83:bf:10:f2:b0:46:a2:14:67:41:4c:16:fb:d7:5b:db:4e:32:
         23:a6:01:28:34:44:4d:84:67:96:ee:3f:f0:16:77:bf:e2:f9:
         51:b2:6d:d9:97:85:c7:96:f9:15:cf:35:b1:1f:6f:be:47:5e:
         63:5c:8d:3a:c7:35:2b:7c:c7:fa:c5:4b:c8:f4:89:85:b3:32:
         21:3f:ea:65:90:c8:13:20:f2:ea:cf:65:f8:fd:8a:82:23:e5:
         3a:ae:47:ca:2d:a9:a0:b1:af:fd:48:a2:ea:c4:52:04:ba:22:
         0b:ee:8a:cc:75:39:4f:c2:64:37:cc:b7:62:17:07:98:7d:d1:
         de:94:ce:01:c3:55:5c:14:36:d8:1c:df:08:20:57:89:9f:c3:
         35:f9:56:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org