Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa
File:                     3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          Mll9QG+npoxfg79tT8ZaFvjC4jC3jZevBJeLQyvKTqo=
Subject key identifier:   34:78:EF:93:53:29:65:BD:18:BB:EF:43:C8:5A:F5:DE:08:40:FB:60
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       589D4509078A0DAA3ADE940914B0205237A4E44A
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa
Signing time:             Wed 21 Dec 2022 16:56:56 +0000
ROA not before:           Wed 21 Dec 2022 16:51:56 +0000
ROA not after:            Wed 20 Dec 2023 16:56:56 +0000
asID:                     61138
IP address blocks:        128.254.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9d:45:09:07:8a:0d:aa:3a:de:94:09:14:b0:20:52:37:a4:e4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=3478EF93532965BD18BBEF43C85AF5DE0840FB60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:c4:2c:d2:15:a0:68:bd:b8:20:3f:d5:08:
                    05:a8:69:7c:5d:c0:d2:0a:23:28:0d:39:80:ac:41:
                    ed:ac:5e:bb:62:5e:c8:ca:7e:4d:0e:ca:df:9e:e8:
                    bb:5c:29:b2:c8:69:f4:01:c6:68:e3:c0:96:79:4b:
                    e4:b4:62:c7:7e:f6:dd:ce:a8:a5:e7:b4:6b:d1:78:
                    9e:f4:56:f4:2b:8f:4e:46:f4:ee:36:3d:b2:52:90:
                    86:6d:42:ab:d5:e9:42:ef:9a:b0:9d:27:d4:b4:7a:
                    69:5b:f1:00:c5:59:55:b7:ac:d9:f1:c5:04:11:19:
                    39:dd:03:2f:5f:14:c7:3a:f6:f0:cb:10:9f:8d:5f:
                    be:d0:1a:ab:01:63:00:c4:7b:f0:58:1e:d3:85:2c:
                    b3:83:6c:87:f4:ef:83:eb:38:28:71:a4:22:28:5f:
                    64:f9:0d:e4:05:58:4a:bb:d4:1c:46:16:dd:b1:b6:
                    0f:9f:bf:1d:b5:cc:0e:80:42:fe:b6:5a:31:a4:89:
                    0c:33:f3:b2:7b:03:c6:d4:11:6e:19:18:ea:db:af:
                    cf:13:ad:48:85:30:5e:ee:ea:d4:c1:fc:00:6e:f7:
                    d3:25:c8:85:e1:81:2c:42:7a:0e:1d:84:22:18:e3:
                    0d:fc:68:c3:f0:e3:5a:8e:91:44:5a:3e:b0:04:b9:
                    cd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:78:EF:93:53:29:65:BD:18:BB:EF:43:C8:5A:F5:DE:08:40:FB:60
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:b3:8e:d1:6d:8d:69:9b:f9:59:8a:de:89:f0:bb:39:7d:25:
         be:d8:2a:7e:18:25:0f:64:57:70:63:ac:f9:86:e0:ad:69:0d:
         a8:24:57:10:00:33:54:a9:6c:ae:c7:dd:98:04:74:bc:3c:be:
         14:02:0c:74:99:7c:76:74:2d:6e:97:8a:10:55:43:d1:ed:41:
         6a:b3:7e:cd:cb:66:c6:ea:68:0a:88:ef:63:17:57:6a:bc:66:
         79:14:af:69:11:c5:1b:15:d4:08:0b:7d:86:6c:51:ce:01:31:
         2f:9d:89:f0:00:80:75:44:14:ea:44:72:7d:48:29:ae:80:73:
         8f:81:f7:bc:cd:73:3e:67:c8:65:c3:0f:65:0d:d9:59:8a:ee:
         ef:54:1d:c9:9b:09:8d:7f:84:7d:d0:64:b7:18:c1:2d:31:fc:
         f5:32:dc:d2:a1:fc:e1:e3:71:7f:a1:4d:7a:71:d9:1e:bc:ed:
         54:eb:36:b6:fa:9a:a4:6e:bf:fe:33:34:64:d4:f4:79:2c:84:
         38:1e:56:d6:eb:6d:5a:dd:2c:e3:47:67:c4:6b:df:58:9d:4c:
         d8:8d:6b:3f:b7:bf:5a:75:9c:e8:9f:57:ce:ba:32:92:5e:f3:
         6a:60:36:f6:42:3a:d3:e2:fc:2a:9b:d6:55:26:c5:05:c3:87:
         f0:a6:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----