Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663830303a3a2f34302d3438203d3e20323035323332.roa
File:                     326130613a363034303a663830303a3a2f34302d3438203d3e20323035323332.roa (raw, json)
Hash identifier:          8FVhLqSW+WC38AsJg+vGZRrSXs0D7QjHtsW13hWNSMY=
Subject key identifier:   28:3A:8E:EF:15:58:83:49:C2:B4:03:5D:F0:C4:28:D4:00:FE:72:6F
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       0BC28A5E735AF52DA75262F38DBB5924914E738A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663830303a3a2f34302d3438203d3e20323035323332.roa
Signing time:             Fri 09 Dec 2022 08:21:01 +0000
ROA not before:           Fri 09 Dec 2022 08:16:01 +0000
ROA not after:            Fri 08 Dec 2023 08:21:01 +0000
asID:                     205232
IP address blocks:        2a0a:6040:f800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c2:8a:5e:73:5a:f5:2d:a7:52:62:f3:8d:bb:59:24:91:4e:73:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:16:01 2022 GMT
            Not After : Dec  8 08:21:01 2023 GMT
        Subject: CN=283A8EEF15588349C2B4035DF0C428D400FE726F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a0:8a:45:e1:b0:06:9a:8d:87:4c:e0:02:49:
                    5f:fc:16:c4:13:1f:65:85:22:7c:d4:2f:66:5e:2c:
                    bb:6a:1b:95:ff:82:a1:ec:91:52:ef:8e:b1:b7:54:
                    72:63:8d:83:36:2e:18:7e:dc:db:6e:47:3a:c1:7d:
                    ae:5c:7f:db:4b:f6:74:ac:c0:10:2a:98:c8:42:c3:
                    cc:cb:44:b3:e2:5a:8c:44:18:8b:d5:da:ed:1d:0b:
                    36:14:75:e3:e6:1c:6b:0f:f5:bb:da:f1:09:73:50:
                    45:8f:e3:3e:ac:43:8c:bd:2e:98:3f:b8:b1:3e:92:
                    6f:26:a1:0b:03:7b:b0:96:8e:99:7b:ff:0f:ca:7e:
                    15:68:52:ad:31:4c:66:86:be:e4:27:c9:2b:e7:93:
                    4c:e8:a0:a0:36:7f:fe:40:7a:93:e2:f6:6d:7f:f4:
                    38:24:a0:23:51:f6:2b:50:4d:75:17:55:3c:91:bb:
                    8c:10:e6:56:65:34:e1:8f:2d:e3:1a:16:a9:a2:65:
                    2a:6f:17:94:3f:55:7e:64:e2:7a:3b:d9:44:f2:35:
                    2b:a6:f7:be:8f:7f:db:33:cd:6d:ae:66:b9:0e:ee:
                    a8:3b:e0:ac:a5:06:d6:5c:29:08:22:b3:19:f5:35:
                    85:b9:0a:07:45:1b:e7:de:4b:da:93:5e:63:d7:6f:
                    66:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3A:8E:EF:15:58:83:49:C2:B4:03:5D:F0:C4:28:D4:00:FE:72:6F
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a663830303a3a2f34302d3438203d3e20323035323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:77:8c:00:d0:59:46:0b:e7:22:e5:db:29:cc:f1:55:45:54:
         14:6d:dc:08:65:2d:be:d3:2a:1c:1a:bb:86:a4:a9:47:cd:e9:
         cc:ff:59:5e:ed:d2:36:a5:99:3b:eb:b7:7c:c0:c9:e6:e2:6e:
         55:06:f6:c8:b8:a4:c6:c4:f9:46:c3:33:f2:71:00:f8:5a:8b:
         f8:5a:3c:d7:27:a1:85:eb:1b:bd:cb:13:a5:05:01:fb:77:8e:
         57:b4:f2:c5:9d:ee:fd:a5:1b:8d:df:e7:e3:a8:1c:2b:ec:c0:
         a5:e4:bd:86:b1:68:ec:eb:e8:66:a1:6d:75:d2:b3:29:7d:27:
         ba:a4:4f:e0:8e:5d:af:f2:81:6f:2c:5f:69:af:eb:26:e1:fb:
         01:e0:98:cb:17:84:36:29:1e:8b:93:40:48:9f:b4:6e:ee:1d:
         ca:9f:b1:b8:a5:a0:e9:90:47:f9:e0:3b:17:16:02:81:5d:73:
         53:8c:83:d8:6e:56:cb:e8:84:d6:95:55:b2:a4:1f:5c:a8:4d:
         6f:95:21:7f:42:d4:d8:61:db:82:87:98:83:c3:6e:66:17:20:
         34:14:90:9e:82:87:6d:98:cc:af:ae:4b:9f:9d:ce:88:7c:91:
         7e:f0:73:c3:95:d0:db:c7:ec:8b:7e:87:46:e3:e1:0b:42:8b:
         b6:52:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org