Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa
File:                     32332e3134322e32342e302f32322d3234203d3e20323035363633.roa (raw, json)
Hash identifier:          TYx+v67guHPQ4vGxt6AeQOZa1rah/xeKiKEdjzSEFEo=
Subject key identifier:   4D:25:55:F6:AD:D8:35:62:B9:6F:0F:A6:25:B4:62:6A:6C:F5:01:99
Certificate issuer:       /CN=6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a
Certificate serial:       553701B1395927DF935C5FE46C534B9FCF7AF7AE
Authority key identifier: 5D:2F:D9:9D:BA:B0:94:3F:2C:82:D1:0B:21:D9:94:E8:70:90:AF:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa
Signing time:             Wed 21 Dec 2022 16:32:06 +0000
ROA not before:           Wed 21 Dec 2022 16:27:06 +0000
ROA not after:            Wed 20 Dec 2023 16:32:06 +0000
asID:                     205663
IP address blocks:        23.142.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:37:01:b1:39:59:27:df:93:5c:5f:e4:6c:53:4b:9f:cf:7a:f7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a
        Validity
            Not Before: Dec 21 16:27:06 2022 GMT
            Not After : Dec 20 16:32:06 2023 GMT
        Subject: CN=4D2555F6ADD83562B96F0FA625B4626A6CF50199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:0a:33:7a:6e:62:72:5c:0c:31:11:5b:90:
                    bc:de:7d:3b:0f:95:86:19:4d:2f:ce:54:a1:6e:08:
                    ac:68:44:1c:55:0d:90:aa:84:83:ab:5c:3c:0d:92:
                    c8:00:86:ef:6e:1c:a5:aa:1e:3c:80:87:ab:86:d3:
                    45:8c:68:7c:68:01:29:79:f9:f1:b0:8e:37:df:f6:
                    81:e8:8f:cc:16:b2:2c:8c:8f:9d:49:fd:80:c5:3e:
                    5a:54:04:32:d9:d2:10:92:f3:a3:95:0a:a1:44:6b:
                    63:b1:73:01:0e:a4:3f:81:05:97:9f:a5:86:ee:1d:
                    f7:18:84:57:a8:04:4d:b5:d7:d8:a0:7f:8e:ed:45:
                    4b:e8:3b:c5:46:ff:09:04:49:ab:be:70:c7:c1:01:
                    f6:2e:b5:03:19:c3:7c:cf:00:85:c6:72:cf:82:c7:
                    eb:8b:da:0e:c2:6f:d1:6d:80:9d:89:28:85:fe:13:
                    c2:d8:2a:f5:44:11:65:e3:e7:f7:43:43:da:3b:b6:
                    54:6c:7e:d6:44:a8:74:41:3f:d3:96:a1:b3:de:eb:
                    11:0e:ea:a6:ae:ed:1b:00:5c:b6:1c:68:72:32:00:
                    e4:05:c2:c9:80:8b:72:e1:95:3f:60:05:a1:03:26:
                    0e:fc:e7:a2:91:a1:6a:b6:73:4b:28:70:bb:5c:5d:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:25:55:F6:AD:D8:35:62:B9:6F:0F:A6:25:B4:62:6A:6C:F5:01:99
            X509v3 Authority Key Identifier:
                keyid:5D:2F:D9:9D:BA:B0:94:3F:2C:82:D1:0B:21:D9:94:E8:70:90:AF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/5D2FD99DBAB0943F2C82D10B21D994E87090AF12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:86:7b:e0:e3:8c:8a:3c:5f:d6:be:9a:82:7c:73:19:98:b9:
         c8:ee:76:fd:6a:e0:80:81:00:9a:99:32:d0:f4:cf:24:b1:59:
         fc:f1:aa:14:e5:0c:c5:f9:69:9e:d0:c3:c2:69:69:4c:5f:1c:
         5d:ad:dd:de:b8:48:a0:02:d7:0a:ce:5a:55:bf:62:08:d2:68:
         a3:a4:c6:51:7d:6a:b0:2b:e9:46:4c:0b:3e:a2:9c:85:d9:3e:
         15:2d:61:b5:ca:a3:d6:5f:95:70:c5:63:ec:78:bf:55:d0:38:
         20:00:92:08:73:39:c3:81:a7:16:13:56:5b:38:88:d4:4f:c5:
         31:f5:a3:c2:94:cc:c4:a2:5f:41:66:ab:d0:94:a1:8a:f5:36:
         2e:ef:b5:40:ba:2c:1f:18:b1:09:4a:ff:7c:55:c3:d6:e5:68:
         2f:50:42:48:e4:bb:07:76:d5:14:f3:6b:1f:ca:8e:23:2b:57:
         9b:05:d5:80:ff:4c:ab:53:82:31:6b:7e:98:95:3a:0c:fe:9d:
         7d:23:a0:c8:34:43:cc:16:20:c8:52:d2:94:91:f5:02:4a:6c:
         6c:aa:bf:a9:7e:b0:30:17:d5:b5:0d:7d:f9:6a:8a:e3:6a:4e:
         c4:82:24:55:6f:b4:c7:da:e5:51:13:a2:b8:f9:38:02:f3:13:
         f9:6f:dd:34
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUVTcBsTlZJ9+TXF/kbFNLn896964wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjkxNmViY2E1ODY0Y2NkMDg2ZmU3MDE2NTQ1MTdjMzAw
M2EzNThmYzc5YmNkNWI3MWEwHhcNMjIxMjIxMTYyNzA2WhcNMjMxMjIwMTYzMjA2
WjAzMTEwLwYDVQQDEyg0RDI1NTVGNkFERDgzNTYyQjk2RjBGQTYyNUI0NjI2QTZD
RjUwMTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq8KM3puYnJc
DDERW5C83n07D5WGGU0vzlShbgisaEQcVQ2QqoSDq1w8DZLIAIbvbhylqh48gIer
htNFjGh8aAEpefnxsI433/aB6I/MFrIsjI+dSf2AxT5aVAQy2dIQkvOjlQqhRGtj
sXMBDqQ/gQWXn6WG7h33GIRXqARNtdfYoH+O7UVL6DvFRv8JBEmrvnDHwQH2LrUD
GcN8zwCFxnLPgsfri9oOwm/RbYCdiSiF/hPC2Cr1RBFl4+f3Q0PaO7ZUbH7WRKh0
QT/TlqGz3usRDuqmru0bAFy2HGhyMgDkBcLJgIty4ZU/YAWhAyYO/OeikaFqtnNL
KHC7XF10IQIDAQABo4ICezCCAncwHQYDVR0OBBYEFE0lVfat2DViuW8PpiW0Ymps
9QGZMB8GA1UdIwQYMBaAFF0v2Z26sJQ/LILRCyHZlOhwkK8SMA4GA1UdDwEB/wQE
AwIHgDBsBgNVHR8EZTBjMGGgX6Bdhltyc3luYzovL3Jwa2kuemFwcGllaG9zdC5j
b20vcmVwby9aQVBQSUUtUlBLSS8wLzVEMkZEOTlEQkFCMDk0M0YyQzgyRDEwQjIx
RDk5NEU4NzA5MEFGMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUH
MAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt
dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJj
LWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zMDk4ZmMxNC0yOWM5LTQ5MTYt
YjAzYS1hZTRhMmFmMTAxY2QvNjkxNmViY2E1ODY0Y2NkMDg2ZmU3MDE2NTQ1MTdj
MzAwM2EzNThmYzc5YmNkNWI3MWEuY2VyMIGFBggrBgEFBQcBCwR5MHcwdQYIKwYB
BQUHMAuGaXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pBUFBJRS1S
UEtJLzAvMzIzMzJlMzEzNDMyMmUzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIw
MzIzMDM1MzYzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF44YMA0GCSqGSIb3DQEBCwUAA4IBAQAc
hnvg44yKPF/WvpqCfHMZmLnI7nb9auCAgQCamTLQ9M8ksVn88aoU5QzF+Wme0MPC
aWlMXxxdrd3euEigAtcKzlpVv2II0mijpMZRfWqwK+lGTAs+opyF2T4VLWG1yqPW
X5VwxWPseL9V0DggAJIIcznDgacWE1ZbOIjUT8Ux9aPClMzEol9BZqvQlKGK9TYu
77VAuiwfGLEJSv98VcPW5WgvUEJI5LsHdtUU82sfyo4jK1ebBdWA/0yrU4Ixa36Y
lToM/p19I6DINEPMFiDIUtKUkfUCSmxsqr+pfrAwF9W1DX35aorjak7EgiRVb7TH
2uVRE6K4+TgC8xP5b900
-----END CERTIFICATE-----