Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa
File:                     3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa (raw, json)
Hash identifier:          ze8iahsz6r20hwfiOYIpGJF8zcd9bIOwwY8xSP/KYuU=
Subject key identifier:   0E:7E:A3:5D:25:8F:1B:95:B6:A7:05:F9:79:68:14:A0:C0:FA:FD:D5
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       6F1965092DA64DECF5728209D2CC5A3D392E33B3
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa
Signing time:             Wed 21 Dec 2022 16:56:56 +0000
ROA not before:           Wed 21 Dec 2022 16:51:56 +0000
ROA not after:            Wed 20 Dec 2023 16:56:56 +0000
asID:                     200975
IP address blocks:        128.254.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:19:65:09:2d:a6:4d:ec:f5:72:82:09:d2:cc:5a:3d:39:2e:33:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=0E7EA35D258F1B95B6A705F9796814A0C0FAFDD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:02:6a:ed:b8:45:11:ce:fa:7e:96:a0:44:
                    03:51:32:c3:06:13:70:c3:8a:29:b9:09:39:3f:f5:
                    53:26:51:c9:2e:0b:e5:21:80:a3:fb:77:4a:55:0d:
                    e9:55:c8:0b:2e:db:6f:19:0b:9a:42:f2:05:be:39:
                    78:56:7e:14:d7:50:da:32:f1:f6:41:80:0e:92:3d:
                    07:6f:70:af:0f:10:63:85:58:50:b2:c3:d3:d9:b9:
                    56:ea:41:08:70:f9:e2:ca:2d:e5:df:e6:34:18:ea:
                    c2:fc:70:07:03:ef:c6:42:c9:fd:b5:63:fb:fd:5e:
                    52:99:93:49:81:d8:26:50:ff:d9:3f:23:ac:18:f2:
                    af:46:fa:2f:ee:fd:8b:06:07:43:ed:ad:87:a5:5e:
                    68:04:d6:93:ff:7f:c8:5a:34:a7:ac:ad:0a:83:43:
                    b3:4f:7e:bd:09:1b:27:2f:4e:92:27:55:94:b6:40:
                    d9:56:ba:81:d7:ad:91:a0:d8:e6:f2:36:a0:20:e8:
                    e6:f8:11:78:76:b6:c1:07:29:74:22:26:f9:a5:d8:
                    f2:43:b4:b0:db:53:b9:b3:d1:a5:f0:fc:ef:d2:62:
                    82:33:17:62:49:f8:04:ee:22:e0:41:0e:49:71:60:
                    f4:9b:6b:82:6b:b0:ad:e5:0d:19:ad:19:ab:57:6e:
                    2e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7E:A3:5D:25:8F:1B:95:B6:A7:05:F9:79:68:14:A0:C0:FA:FD:D5
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230342e302f32342d3234203d3e20323030393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:9c:c4:e9:7e:36:3b:49:71:c8:f9:94:6b:3d:65:12:16:
         1b:49:7b:c0:2b:0a:0d:35:88:fc:72:11:c7:78:e6:77:10:8a:
         28:24:35:00:48:f0:e5:b7:42:a7:24:82:ae:ad:ea:af:8a:c8:
         cb:b0:ac:00:b2:5c:fa:69:78:6f:79:a6:1d:af:22:78:46:b3:
         d5:c9:9d:3d:93:50:87:3f:9f:48:8f:d2:62:2c:14:4e:55:e9:
         5e:b5:ab:27:93:f7:bf:5a:0d:68:37:df:30:62:fc:16:8c:c5:
         94:23:df:89:54:34:bf:23:20:ef:40:49:24:32:7a:8a:b0:fb:
         d9:ae:3a:60:62:80:ce:4f:d8:86:57:d1:26:13:8d:23:cf:db:
         5a:00:1f:77:ca:b1:03:1f:3f:49:76:e4:45:b0:da:fc:23:fd:
         bf:30:d5:24:8c:42:ee:a0:bb:67:f5:da:af:07:98:41:1d:38:
         6f:53:51:75:d8:b5:e1:df:23:30:03:37:ee:7c:ea:47:9d:11:
         c4:53:28:8c:5a:15:6e:15:42:d5:80:9d:11:8b:f1:46:1e:59:
         cc:f5:6e:4d:8c:28:61:c3:7b:dc:ac:79:41:8a:a9:de:5d:3c:
         9e:be:87:bd:da:25:36:cb:f1:63:28:99:87:36:20:2c:9b:cb:
         96:a7:4f:18
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUbxllCS2mTez1coIJ0sxaPTkuM7MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTYwN2YwY2E4MWI4NGUyYmNjNzBhNDc0
OTg0NDQyMDc4NDdhODZhOTQwHhcNMjIxMjIxMTY1MTU2WhcNMjMxMjIwMTY1NjU2
WjAzMTEwLwYDVQQDEygwRTdFQTM1RDI1OEYxQjk1QjZBNzA1Rjk3OTY4MTRBMEMw
RkFGREQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/YCau24RRHO
+n6WoEQDUTLDBhNww4opuQk5P/VTJlHJLgvlIYCj+3dKVQ3pVcgLLttvGQuaQvIF
vjl4Vn4U11DaMvH2QYAOkj0Hb3CvDxBjhVhQssPT2blW6kEIcPniyi3l3+Y0GOrC
/HAHA+/GQsn9tWP7/V5SmZNJgdgmUP/ZPyOsGPKvRvov7v2LBgdD7a2HpV5oBNaT
/3/IWjSnrK0Kg0OzT369CRsnL06SJ1WUtkDZVrqB162RoNjm8jagIOjm+BF4drbB
Byl0Iib5pdjyQ7Sw21O5s9Gl8Pzv0mKCMxdiSfgE7iLgQQ5JcWD0m2uCa7Ct5Q0Z
rRmrV24uSQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFA5+o10ljxuVtqcF+XloFKDA
+v3VMB8GA1UdIwQYMBaAFN5vGLRhlY3dIHTLWhkaZA0yC7WAMA4GA1UdDwEB/wQE
AwIHgDBsBgNVHR8EZTBjMGGgX6Bdhltyc3luYzovL3Jwa2kuemFwcGllaG9zdC5j
b20vcmVwby9aQVBQSUUtUlBLSS8xL0RFNkYxOEI0NjE5NThEREQyMDc0Q0I1QTE5
MUE2NDBEMzIwQkI1ODAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUH
MAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt
dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMy
LWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFlOTk3Yy1iODllLTQ3YzIt
OGQ3OS1kMzFlNThiYzNjYTQvZWVjZjg0N2Q3YTYwN2YwY2E4MWI4NGUyYmNjNzBh
NDc0OTg0NDQyMDc4NDdhODZhOTQuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYB
BQUHMAuGbXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pBUFBJRS1S
UEtJLzEvMzEzMjM4MmUzMjM1MzQyZTMyMzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMyMzAzMDM5MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAID+zDANBgkqhkiG9w0BAQsFAAOC
AQEAHnWcxOl+NjtJccj5lGs9ZRIWG0l7wCsKDTWI/HIRx3jmdxCKKCQ1AEjw5bdC
pySCrq3qr4rIy7CsALJc+ml4b3mmHa8ieEaz1cmdPZNQhz+fSI/SYiwUTlXpXrWr
J5P3v1oNaDffMGL8FozFlCPfiVQ0vyMg70BJJDJ6irD72a46YGKAzk/YhlfRJhON
I8/bWgAfd8qxAx8/SXbkRbDa/CP9vzDVJIxC7qC7Z/XarweYQR04b1NRddi14d8j
MAM37nzqR50RxFMojFoVbhVC1YCdEYvxRh5ZzPVuTYwoYcN73Kx5QYqp3l08nr6H
vdolNsvxYyiZhzYgLJvLlqdPGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:26 2024 by rpki-client on console-fra.rpki-client.org