Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666130303a3a2f34302d3438203d3e20323036323731.roa
File:                     326130613a363034303a666130303a3a2f34302d3438203d3e20323036323731.roa (raw, json)
Hash identifier:          fQ0xw2eCDeG8gryrz7SRv0G9jG/OSpmTKp0PLMroIWA=
Subject key identifier:   65:BE:41:8F:E2:6F:8E:AD:C2:06:03:43:FE:09:09:16:8C:8D:8C:9B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       64A8D60E73FD2084730579EE57F3AB34EE621B76
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666130303a3a2f34302d3438203d3e20323036323731.roa
Signing time:             Fri 09 Dec 2022 08:20:59 +0000
ROA not before:           Fri 09 Dec 2022 08:15:59 +0000
ROA not after:            Fri 08 Dec 2023 08:20:59 +0000
asID:                     206271
IP address blocks:        2a0a:6040:fa00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a8:d6:0e:73:fd:20:84:73:05:79:ee:57:f3:ab:34:ee:62:1b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Dec  9 08:15:59 2022 GMT
            Not After : Dec  8 08:20:59 2023 GMT
        Subject: CN=65BE418FE26F8EADC2060343FE0909168C8D8C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:7a:4a:14:61:e3:35:ea:d9:76:89:aa:c2:
                    2b:f3:91:86:b4:e8:fd:07:8c:96:37:ed:c2:75:e1:
                    2f:76:53:15:0b:bb:78:17:fb:bc:fb:eb:4d:e9:d3:
                    9c:06:53:ff:a3:2a:85:7a:77:11:fe:6e:5d:11:8e:
                    c4:4e:eb:5d:16:f5:ab:71:2f:77:e7:16:1b:68:04:
                    22:29:5e:a8:b6:cd:ff:4a:af:1e:40:d4:35:a0:9d:
                    8d:da:6d:7d:92:49:d1:da:38:47:a0:fe:b0:a9:2e:
                    b7:c1:82:a0:68:41:f3:d7:d1:2a:31:ce:ea:26:8c:
                    16:8f:51:dd:31:11:c6:1b:e1:75:a5:51:7c:5c:a2:
                    17:9d:14:aa:2f:46:92:a8:c4:9c:75:b3:21:23:42:
                    88:41:ad:c2:71:5f:ca:87:e6:50:ab:0a:5a:56:34:
                    af:c4:d5:16:11:0e:88:86:c8:c2:15:1e:93:3a:3a:
                    6e:91:6f:c2:e8:75:01:51:53:25:84:c1:6e:5a:08:
                    84:ed:6d:a8:19:aa:e6:a7:9c:cd:22:0a:1c:7e:f9:
                    99:f6:13:bf:4b:c6:89:2b:cd:2c:24:b9:39:05:c2:
                    df:a6:48:35:a5:ae:ff:7f:cc:bf:c1:51:3b:29:a1:
                    64:b2:b7:3a:ee:c5:fe:f8:60:f1:01:fc:39:1a:b7:
                    d7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BE:41:8F:E2:6F:8E:AD:C2:06:03:43:FE:09:09:16:8C:8D:8C:9B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/326130613a363034303a666130303a3a2f34302d3438203d3e20323036323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:31:15:77:15:18:3c:dd:0f:10:1e:dd:c6:ba:ab:14:2c:
         bb:1a:ce:16:38:e2:83:8c:7e:fa:35:01:97:fc:e2:18:b6:f3:
         99:50:8c:a4:1c:a9:18:fc:6a:e1:3a:bf:83:fa:b7:79:ef:88:
         bf:d8:8d:16:b1:a9:64:c8:31:0f:dd:1d:72:a1:c9:9e:be:67:
         3b:a5:c4:ac:ce:0b:3b:37:f3:5c:62:6b:a7:47:fd:13:77:8b:
         ba:30:5e:81:a1:0f:3a:81:55:ec:a2:ad:21:fa:b3:21:18:84:
         ce:36:06:f7:d7:72:5e:aa:24:85:74:ff:a6:ab:e1:9b:1a:6d:
         fd:ef:db:8d:ea:62:db:98:23:09:be:c5:16:43:92:4c:68:69:
         f7:1c:89:5b:ac:b2:10:50:3f:27:75:08:6d:f1:f3:cc:a2:94:
         90:d8:53:95:02:74:9c:ac:64:a1:e9:87:30:9b:25:f6:5f:f7:
         30:6d:7c:78:10:62:f5:e0:f5:2a:44:72:16:b8:53:5d:9b:c2:
         7a:70:32:5a:ea:47:dd:76:78:d2:55:cc:b9:c1:c0:06:7b:bf:
         b1:1f:3c:29:5d:48:b5:90:23:88:20:d0:b5:21:62:d6:8c:5b:
         9c:eb:2c:f5:35:9b:fe:34:b2:fe:a0:42:2f:7f:37:a3:d8:15:
         f0:e7:f9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:56 2024 by rpki-client on console-fra.rpki-client.org