Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/32332e3134322e32352e302f32342d3234203d3e2037303138.roa
File:                     32332e3134322e32352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          CJf4W+7CUh2Y6RLjGuX1jIHeSFCQQ2Odhsev3rbIQII=
Subject key identifier:   1A:C0:30:E8:04:33:B5:1A:05:FA:DD:15:F6:C6:4A:7A:D1:36:21:01
Certificate issuer:       /CN=6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a
Certificate serial:       37FE4F1436BE791A9AA26E9082276B91C4C4B3AC
Authority key identifier: 5D:2F:D9:9D:BA:B0:94:3F:2C:82:D1:0B:21:D9:94:E8:70:90:AF:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/32332e3134322e32352e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 21 Dec 2022 16:32:06 +0000
ROA not before:           Wed 21 Dec 2022 16:27:06 +0000
ROA not after:            Wed 20 Dec 2023 16:32:06 +0000
asID:                     7018
IP address blocks:        23.142.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fe:4f:14:36:be:79:1a:9a:a2:6e:90:82:27:6b:91:c4:c4:b3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a
        Validity
            Not Before: Dec 21 16:27:06 2022 GMT
            Not After : Dec 20 16:32:06 2023 GMT
        Subject: CN=1AC030E80433B51A05FADD15F6C64A7AD1362101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d5:10:4f:55:5d:4f:5e:59:75:37:2c:e0:75:
                    e1:e0:58:e5:4a:a5:5d:13:96:91:1f:0f:de:a3:df:
                    a2:7a:9a:33:02:cb:6d:4f:06:f6:7d:88:bf:46:d9:
                    17:e2:86:21:fa:54:b1:f6:fc:30:70:40:d1:aa:7a:
                    42:df:ad:5b:25:54:3c:74:09:3c:5f:ac:cc:35:7b:
                    ae:7c:90:db:ed:4e:30:99:69:ac:49:c3:19:09:66:
                    f7:1c:fc:b3:1f:6d:25:fa:be:d6:f2:b1:8e:6a:5a:
                    41:99:ee:b3:4a:5a:35:cc:99:19:93:17:f1:1c:9a:
                    28:24:c4:67:c6:1a:62:dc:86:2f:d6:ce:dc:e9:ca:
                    36:35:8b:9a:f4:ee:c7:86:4d:00:49:16:61:f3:0e:
                    7c:2e:b0:09:1c:70:41:6c:57:31:a1:73:59:d5:8d:
                    76:a0:81:71:5c:52:4e:a8:14:12:a2:97:3c:27:bc:
                    5e:3e:bb:07:f0:31:72:78:1e:b8:85:6f:9f:0b:81:
                    53:a9:dc:19:60:ef:51:a1:c0:c8:89:2a:18:4e:d9:
                    24:2e:ac:d9:36:bb:8b:26:b6:c6:ff:a0:20:96:6d:
                    b1:18:d7:5d:64:67:8f:81:97:d9:d6:70:e3:ae:4a:
                    4d:04:e5:80:59:a5:8b:3b:d0:40:0b:78:3e:17:e4:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C0:30:E8:04:33:B5:1A:05:FA:DD:15:F6:C6:4A:7A:D1:36:21:01
            X509v3 Authority Key Identifier:
                keyid:5D:2F:D9:9D:BA:B0:94:3F:2C:82:D1:0B:21:D9:94:E8:70:90:AF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/5D2FD99DBAB0943F2C82D10B21D994E87090AF12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca5864ccd086fe701654517c3003a358fc79bcd5b71a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/0/32332e3134322e32352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:85:99:0e:e7:4b:1a:95:2f:34:f1:73:7b:5e:d8:61:00:80:
         60:2a:b3:9e:53:b4:d7:51:a1:55:dc:8e:0b:d5:06:56:56:5e:
         56:2b:99:98:b0:1e:d0:cf:e4:8c:ae:67:37:03:d5:c5:ab:f7:
         c2:36:e3:18:63:4c:8c:6e:0f:f0:2e:52:88:41:5f:6d:ec:f7:
         b3:ab:33:de:32:12:ff:b6:84:58:0e:d5:31:cd:ef:4c:6a:82:
         de:d7:92:60:e4:ae:a1:7d:5e:e0:87:c0:71:66:ef:d1:ab:7e:
         6e:9c:77:c8:9a:b2:0e:40:37:12:cd:95:64:96:12:0a:8e:15:
         f9:43:44:85:2d:01:a2:b5:39:d0:d1:b8:48:b3:05:52:7d:ee:
         35:65:70:a6:8f:9f:92:0b:3e:f4:19:91:5d:56:47:8c:30:01:
         4a:e2:1d:f6:a4:f9:d2:7e:89:21:c5:70:f8:f6:1c:6d:71:66:
         6d:82:df:9b:52:4e:da:33:68:b3:85:07:4e:7c:a2:57:83:8e:
         22:0b:44:94:87:4d:29:d6:1f:a5:b4:6d:6c:4b:13:bd:fa:51:
         6b:5d:e5:6f:b4:71:a3:69:aa:8a:6e:f6:e5:6b:28:6f:79:18:
         58:cb:da:3e:87:c2:4f:e1:e9:d7:36:cd:04:17:75:f0:40:1e:
         9c:c3:45:b7
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgIUN/5PFDa+eRqaom6QgidrkcTEs6wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjkxNmViY2E1ODY0Y2NkMDg2ZmU3MDE2NTQ1MTdjMzAw
M2EzNThmYzc5YmNkNWI3MWEwHhcNMjIxMjIxMTYyNzA2WhcNMjMxMjIwMTYzMjA2
WjAzMTEwLwYDVQQDEygxQUMwMzBFODA0MzNCNTFBMDVGQUREMTVGNkM2NEE3QUQx
MzYyMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tUQT1VdT15Z
dTcs4HXh4FjlSqVdE5aRHw/eo9+iepozAsttTwb2fYi/RtkX4oYh+lSx9vwwcEDR
qnpC361bJVQ8dAk8X6zMNXuufJDb7U4wmWmsScMZCWb3HPyzH20l+r7W8rGOalpB
me6zSlo1zJkZkxfxHJooJMRnxhpi3IYv1s7c6co2NYua9O7Hhk0ASRZh8w58LrAJ
HHBBbFcxoXNZ1Y12oIFxXFJOqBQSopc8J7xePrsH8DFyeB64hW+fC4FTqdwZYO9R
ocDIiSoYTtkkLqzZNruLJrbG/6Aglm2xGNddZGePgZfZ1nDjrkpNBOWAWaWLO9BA
C3g+F+S4awIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFBrAMOgEM7UaBfrdFfbGSnrR
NiEBMB8GA1UdIwQYMBaAFF0v2Z26sJQ/LILRCyHZlOhwkK8SMA4GA1UdDwEB/wQE
AwIHgDBsBgNVHR8EZTBjMGGgX6Bdhltyc3luYzovL3Jwa2kuemFwcGllaG9zdC5j
b20vcmVwby9aQVBQSUUtUlBLSS8wLzVEMkZEOTlEQkFCMDk0M0YyQzgyRDEwQjIx
RDk5NEU4NzA5MEFGMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUH
MAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt
dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJj
LWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zMDk4ZmMxNC0yOWM5LTQ5MTYt
YjAzYS1hZTRhMmFmMTAxY2QvNjkxNmViY2E1ODY0Y2NkMDg2ZmU3MDE2NTQ1MTdj
MzAwM2EzNThmYzc5YmNkNWI3MWEuY2VyMIGBBggrBgEFBQcBCwR1MHMwcQYIKwYB
BQUHMAuGZXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pBUFBJRS1S
UEtJLzAvMzIzMzJlMzEzNDMyMmUzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAXjhkwDQYJKoZIhvcNAQELBQADggEBAI6FmQ7n
SxqVLzTxc3te2GEAgGAqs55TtNdRoVXcjgvVBlZWXlYrmZiwHtDP5IyuZzcD1cWr
98I24xhjTIxuD/AuUohBX23s97OrM94yEv+2hFgO1THN70xqgt7XkmDkrqF9XuCH
wHFm79Grfm6cd8iasg5ANxLNlWSWEgqOFflDRIUtAaK1OdDRuEizBVJ97jVlcKaP
n5ILPvQZkV1WR4wwAUriHfak+dJ+iSHFcPj2HG1xZm2C35tSTtozaLOFB058oleD
jiILRJSHTSnWH6W0bWxLE736UWtd5W+0caNpqopu9uVrKG95GFjL2j6Hwk/h6dc2
zQQXdfBAHpzDRbc=
-----END CERTIFICATE-----