Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/32332e3134322e32342e302f32322d3234203d3e203631313338.roa
File:                     32332e3134322e32342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          fWdZC3Yinh/n9f5N1O0XURIVKdYK8TklEyD6d/5OalE=
Subject key identifier:   65:3F:E3:57:4B:1E:88:10:05:5F:C2:8D:7A:03:08:DC:A4:4C:91:19
Certificate issuer:       /CN=6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a
Certificate serial:       17EE699E11CF403BFC881D85EE676850A5AE981B
Authority key identifier: 5D:2F:D9:9D:BA:B0:94:3F:2C:82:D1:0B:21:D9:94:E8:70:90:AF:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/32332e3134322e32342e302f32322d3234203d3e203631313338.roa
Signing time:             Wed 21 Dec 2022 16:32:06 +0000
ROA not before:           Wed 21 Dec 2022 16:27:06 +0000
ROA not after:            Wed 20 Dec 2023 16:32:06 +0000
asID:                     61138
IP address blocks:        23.142.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ee:69:9e:11:cf:40:3b:fc:88:1d:85:ee:67:68:50:a5:ae:98:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a
        Validity
            Not Before: Dec 21 16:27:06 2022 GMT
            Not After : Dec 20 16:32:06 2023 GMT
        Subject: CN=653FE3574B1E8810055FC28D7A0308DCA44C9119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:b6:65:2b:bd:4a:3d:94:cc:9d:f1:fa:72:
                    89:d4:9d:10:1f:04:b7:bf:e8:1a:7d:4b:4f:b6:3c:
                    cd:48:10:08:0b:f4:26:57:5a:7c:a8:cd:3d:71:28:
                    73:ef:2d:cc:79:87:38:7f:3f:15:62:4c:bb:3d:43:
                    f1:91:2f:67:2c:ec:f7:71:a3:99:82:01:9d:85:29:
                    0f:5d:88:88:ed:79:12:76:6f:14:05:a5:f2:e4:fe:
                    03:33:87:7c:86:c7:e4:da:94:5e:2a:97:fe:f8:a2:
                    27:fe:4a:6c:ad:b0:11:09:f0:00:f1:d1:8b:ae:5c:
                    d3:61:e2:5b:1f:97:ab:a5:14:d9:8c:b9:02:7c:40:
                    da:37:c0:c6:b0:84:25:a3:8a:9f:e4:3a:07:3d:30:
                    96:27:ec:17:9c:11:60:56:66:30:c7:1b:d4:39:85:
                    0a:bf:27:c1:9f:17:f4:23:93:09:ec:ee:45:b6:3b:
                    07:30:34:50:d0:90:3c:c5:df:f3:7b:c6:b8:58:a6:
                    d0:da:aa:f2:14:8b:e8:42:8c:f6:dd:3d:cc:01:b5:
                    4e:c5:5f:9d:14:6a:d3:7e:bd:de:88:06:b2:21:cb:
                    a6:8c:2b:88:a1:6a:79:39:de:ae:52:ee:9b:7f:19:
                    a4:00:c0:eb:cf:fa:72:37:1a:bc:f4:4b:3f:f2:2a:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3F:E3:57:4B:1E:88:10:05:5F:C2:8D:7A:03:08:DC:A4:4C:91:19
            X509v3 Authority Key Identifier:
                keyid:5D:2F:D9:9D:BA:B0:94:3F:2C:82:D1:0B:21:D9:94:E8:70:90:AF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/5D2FD99DBAB0943F2C82D10B21D994E87090AF12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/32332e3134322e32342e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:76:c0:01:bf:c7:31:49:1c:ef:a7:74:91:5d:02:e5:e6:f8:
         90:72:6e:1d:51:52:93:93:d2:1c:71:4e:64:69:d4:13:de:0a:
         7f:6d:fd:0a:8d:3a:92:e6:87:b7:26:04:f3:2b:28:78:23:40:
         38:65:25:26:5c:bf:34:b1:f7:6a:20:6b:79:2e:75:02:50:ca:
         a2:25:b4:e5:8f:ef:f3:e0:30:45:f5:fc:a8:b8:7b:d2:4c:ef:
         81:cc:50:41:76:60:8b:23:2a:89:b7:96:31:e7:a4:54:d3:ed:
         0a:8d:fa:cb:c1:b7:13:16:f6:11:8a:62:07:e4:56:0f:10:ac:
         00:c0:0e:cc:7e:0a:09:d2:93:0c:8a:e5:2d:71:e1:ad:d6:76:
         af:ff:27:c9:77:a6:fe:cc:76:2b:24:e3:74:36:25:47:cd:37:
         45:17:fe:20:49:81:4a:dd:35:aa:d1:ee:4c:90:15:33:32:64:
         96:04:dd:70:6d:37:71:4c:2a:52:94:40:49:85:22:70:a0:3e:
         9e:6f:bd:38:f9:51:6f:f9:f5:ec:e8:e1:c6:bd:c2:c3:c9:15:
         74:ce:b9:8b:d1:29:84:23:b1:56:5a:0e:f1:aa:3e:07:f1:8d:
         e8:ae:58:84:2e:f6:91:78:e3:56:0e:9d:a5:72:f7:49:f9:41:
         a1:93:7d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----