Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ERATERS_UID_18245/4/32332e3134352e35362e302f32342d3234203d3e20323033343533.roa
File:                     32332e3134352e35362e302f32342d3234203d3e20323033343533.roa (raw, json)
Hash identifier:          EazOGegNeJlV4nwB5UxkJc6ukmRJYhs/l03jVIOeEDs=
Subject key identifier:   2D:53:FB:C8:D3:41:7C:7B:B5:D7:B7:57:18:0D:62:2C:6B:52:36:18
Certificate issuer:       /CN=1822fe9c8a14384cc213fd36f0fec40912777bcdde8085be3f
Certificate serial:       7171610F386EF4ED99BA1A0860E652BC2211C945
Authority key identifier: FE:4E:6E:1A:C4:B2:81:D5:05:68:A6:B7:10:17:F5:8B:85:E1:4A:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a14384cc213fd36f0fec40912777bcdde8085be3f.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/4/32332e3134352e35362e302f32342d3234203d3e20323033343533.roa
Signing time:             Fri 20 Jan 2023 19:28:03 +0000
ROA not before:           Fri 20 Jan 2023 19:23:03 +0000
ROA not after:            Fri 19 Jan 2024 19:28:03 +0000
asID:                     203453
IP address blocks:        23.145.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:71:61:0f:38:6e:f4:ed:99:ba:1a:08:60:e6:52:bc:22:11:c9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a14384cc213fd36f0fec40912777bcdde8085be3f
        Validity
            Not Before: Jan 20 19:23:03 2023 GMT
            Not After : Jan 19 19:28:03 2024 GMT
        Subject: CN=2D53FBC8D3417C7BB5D7B757180D622C6B523618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:40:79:a9:23:66:46:17:c9:d3:9a:30:f2:
                    0c:2a:5d:eb:19:56:be:1e:b3:20:50:8e:08:86:94:
                    13:77:2b:f0:9d:03:2a:47:9a:9b:38:a2:b1:15:69:
                    09:cb:b2:41:2c:ce:c2:66:66:80:bc:23:cc:8f:37:
                    0f:2d:8b:5a:43:c5:5b:b7:2c:37:a9:67:ab:d3:67:
                    13:cd:eb:ec:4d:a4:86:cd:12:08:1c:79:33:6a:b7:
                    43:f2:4b:37:f3:2c:9f:09:e9:ff:4c:b8:76:6c:59:
                    6b:68:4d:7c:f6:4f:3d:5f:a9:77:c0:21:80:d4:d9:
                    14:24:c8:f0:2a:18:ab:70:05:86:ab:b1:d4:0f:1b:
                    19:4d:09:b3:27:c3:ee:09:5c:3b:df:2f:28:b9:ea:
                    a4:c2:0c:e5:5a:42:54:86:32:7f:ea:ad:e8:af:65:
                    05:23:ba:c7:61:73:2b:c7:55:84:fb:24:cd:7d:aa:
                    40:0d:39:41:6a:aa:4d:67:3b:4d:a6:2c:f7:59:58:
                    cd:bc:25:57:11:c7:fc:cb:33:e4:ca:ae:8b:4d:85:
                    36:54:a1:0f:2b:4b:88:aa:62:cb:0e:2e:4d:68:4b:
                    9c:ea:e5:e8:bd:07:9d:ff:7d:48:73:b8:3b:55:6d:
                    50:17:23:12:8c:7c:2d:ef:29:79:d5:35:5e:74:30:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:53:FB:C8:D3:41:7C:7B:B5:D7:B7:57:18:0D:62:2C:6B:52:36:18
            X509v3 Authority Key Identifier:
                keyid:FE:4E:6E:1A:C4:B2:81:D5:05:68:A6:B7:10:17:F5:8B:85:E1:4A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/4/FE4E6E1AC4B281D50568A6B71017F58B85E14ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a14384cc213fd36f0fec40912777bcdde8085be3f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ERATERS_UID_18245/4/32332e3134352e35362e302f32342d3234203d3e20323033343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:5d:12:61:05:a3:f6:18:eb:eb:8e:37:f3:a4:79:81:1b:5f:
         e0:f9:10:85:89:c5:f3:56:37:c7:b6:09:63:ed:63:bc:34:7f:
         82:38:41:79:b1:39:e7:af:61:3b:4c:37:20:83:df:a8:1f:f6:
         22:22:09:b1:c5:02:55:ca:5a:95:c6:db:db:f3:1e:ec:0c:21:
         b0:83:75:1d:f6:8f:2c:0d:0b:0b:20:e0:08:89:9d:d9:1b:56:
         65:db:3d:9d:e4:7c:77:c8:29:ea:6c:23:2f:4a:02:75:60:8b:
         6b:b8:c4:bf:5b:59:99:33:98:b8:1e:bb:b8:c4:52:46:0e:ac:
         5a:ed:a7:91:a5:4f:8c:68:96:51:33:c5:33:ee:56:7c:52:ef:
         42:b7:28:56:de:b1:ef:88:2f:54:be:90:70:a0:78:f3:9f:f0:
         f1:59:23:45:d1:c7:20:d2:6e:a2:d7:0f:ad:65:1d:be:65:73:
         4b:cf:b4:1c:66:f9:eb:71:49:80:69:e5:42:12:cd:f8:84:2c:
         36:c8:cd:8c:e1:e7:0c:c4:24:ca:94:b1:b0:2c:ca:be:23:ca:
         d3:46:1e:81:86:26:d2:1e:03:10:f4:69:ca:f0:46:38:29:82:
         a9:d5:62:83:e6:4a:e6:0f:32:ed:c4:ae:02:bf:bd:d3:f3:63:
         05:c2:3f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org