Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/32332e3134322e32342e302f32342d3234203d3e203632313634.roa
File:                     32332e3134322e32342e302f32342d3234203d3e203632313634.roa (raw, json)
Hash identifier:          HToX7DimwCvN+eq/tFCDlRikNxpWZV89l4+bn8Br4YY=
Subject key identifier:   6B:9A:DB:7E:0E:8B:32:A9:B3:E5:A0:15:A0:DC:8A:A8:DA:7A:58:F4
Certificate issuer:       /CN=6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a
Certificate serial:       56EC9DE5F766A358102699A465ED656953D678ED
Authority key identifier: 5D:2F:D9:9D:BA:B0:94:3F:2C:82:D1:0B:21:D9:94:E8:70:90:AF:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/32332e3134322e32342e302f32342d3234203d3e203632313634.roa
Signing time:             Wed 21 Dec 2022 16:32:06 +0000
ROA not before:           Wed 21 Dec 2022 16:27:06 +0000
ROA not after:            Wed 20 Dec 2023 16:32:06 +0000
asID:                     62164
IP address blocks:        23.142.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ec:9d:e5:f7:66:a3:58:10:26:99:a4:65:ed:65:69:53:d6:78:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a
        Validity
            Not Before: Dec 21 16:27:06 2022 GMT
            Not After : Dec 20 16:32:06 2023 GMT
        Subject: CN=6B9ADB7E0E8B32A9B3E5A015A0DC8AA8DA7A58F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:7b:58:b6:6e:be:1a:44:ae:29:33:06:c9:
                    f3:c1:3c:34:7a:11:44:81:b6:e9:b7:87:4a:5d:4e:
                    ef:19:bc:5a:ab:6e:e0:9e:90:12:51:4f:4f:dd:1f:
                    b3:49:f0:b5:fb:bd:a4:79:c2:a4:aa:b0:80:05:68:
                    2d:54:67:b5:ed:d0:eb:15:c7:07:c5:12:48:dd:a6:
                    bd:f7:70:b0:ab:48:93:1e:4a:d2:fc:94:6b:0a:51:
                    21:9b:76:33:09:b4:99:b1:41:b7:a3:ca:11:1f:00:
                    8c:a0:91:0f:27:5d:1e:69:80:66:94:01:02:1e:7f:
                    d6:6f:2c:fc:2f:3f:ad:e2:19:15:49:ce:bc:68:97:
                    13:16:bc:9f:0f:09:b9:09:ea:0d:06:58:e8:09:ae:
                    87:77:cc:5e:5d:94:c3:32:08:7c:71:50:28:21:cf:
                    ed:21:6b:8d:9c:ec:15:7d:16:11:75:83:f9:44:cc:
                    e0:38:ac:bc:21:db:44:cf:8f:fe:c8:1a:79:a0:c0:
                    19:cf:fd:5d:c4:bb:4d:08:0e:08:ba:b1:3e:75:33:
                    b9:64:06:b9:1c:b4:d3:0b:27:bf:9a:b4:75:ae:32:
                    03:06:43:78:70:d6:e5:04:14:ef:ba:39:b7:5c:3e:
                    e5:1b:86:b9:a0:91:3c:db:3b:4c:dc:eb:b5:81:29:
                    0f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9A:DB:7E:0E:8B:32:A9:B3:E5:A0:15:A0:DC:8A:A8:DA:7A:58:F4
            X509v3 Authority Key Identifier:
                keyid:5D:2F:D9:9D:BA:B0:94:3F:2C:82:D1:0B:21:D9:94:E8:70:90:AF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/5D2FD99DBAB0943F2C82D10B21D994E87090AF12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/32332e3134322e32342e302f32342d3234203d3e203632313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ab:3a:61:6a:ac:60:87:34:27:9a:a6:4c:b7:df:68:64:8e:
         95:58:74:dd:18:cf:64:5d:a3:1b:2d:a8:ae:92:2b:8a:36:eb:
         92:d6:6c:66:11:c5:79:51:3a:77:e9:0c:5b:8a:a0:f4:3c:7b:
         64:87:a8:63:74:78:da:a3:c0:9b:74:73:2a:74:2f:9a:1c:c2:
         e6:17:4c:88:ad:3e:b5:06:ed:4f:2b:34:ba:1c:21:94:8a:05:
         c5:cf:a5:ca:89:f3:3b:99:1e:71:12:d3:af:50:70:a9:d3:bf:
         b4:08:a6:0b:5a:1e:71:4d:be:fe:72:74:d2:a1:b4:b0:5e:f4:
         b9:3e:36:16:f9:8e:36:9e:b0:3c:5d:0e:c4:e6:5f:51:01:41:
         a5:0e:4d:b6:1e:b4:95:7b:19:71:a5:30:84:fc:ec:ad:8d:43:
         7f:f0:2e:26:fe:e2:3e:d6:9f:e5:26:41:6e:31:e9:4a:dc:46:
         08:36:94:45:d8:81:46:6d:69:0f:ee:ed:10:fb:ae:f0:dd:71:
         5e:4b:97:d4:2f:b0:dc:d7:4f:44:8d:66:7b:ea:ed:70:b8:07:
         e5:ce:98:9e:92:cd:11:27:0d:be:2e:63:2d:57:ca:32:e3:f9:
         58:72:f0:0d:a9:6f:19:95:ac:25:41:78:9a:1a:00:4c:48:59:
         fe:7a:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----