Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa
File:                     3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          DV/T7A22+0QtldDY8z1JQWvym84LDfjMRikl3L04bEw=
Subject key identifier:   94:61:33:7A:52:C7:12:31:9F:FF:26:26:91:1F:01:DB:D2:17:73:61
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       1A7DA1187B91E7B6BD06747EFD15241537359C4B
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 21 Dec 2022 16:56:57 +0000
ROA not before:           Wed 21 Dec 2022 16:51:57 +0000
ROA not after:            Wed 20 Dec 2023 16:56:57 +0000
asID:                     7018
IP address blocks:        128.254.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7d:a1:18:7b:91:e7:b6:bd:06:74:7e:fd:15:24:15:37:35:9c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:57 2022 GMT
            Not After : Dec 20 16:56:57 2023 GMT
        Subject: CN=9461337A52C712319FFF2626911F01DBD2177361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ac:9e:b1:ec:41:70:af:ee:ec:67:e7:8d:9c:
                    c8:18:fc:a9:06:4d:d2:96:6d:5b:a1:00:95:71:2f:
                    6a:67:8d:8c:77:bd:67:6d:c3:c4:be:25:b6:20:63:
                    59:23:c3:40:f4:18:95:46:c1:c2:96:89:d4:07:77:
                    87:97:fc:da:de:53:d6:ea:b6:df:56:60:28:86:2b:
                    73:38:be:76:54:05:3b:44:d6:cc:47:c2:2f:85:a7:
                    c8:ad:de:c5:fb:02:7a:f7:19:b6:dd:f2:9e:d8:f5:
                    6d:73:e3:84:61:55:b8:04:5b:9b:6c:58:ed:0a:13:
                    a9:5d:88:5b:3c:33:3b:51:87:9b:08:2f:39:60:1b:
                    ce:43:38:c1:fe:27:0c:49:58:02:f5:1e:38:70:6d:
                    bb:8a:64:96:a6:d9:90:ea:80:b8:c4:b4:00:bf:de:
                    6f:b5:0c:14:b5:b4:60:29:a6:78:b8:4e:40:45:90:
                    b5:a4:57:4d:59:97:c3:09:87:90:72:03:e8:96:ee:
                    44:3e:c2:30:f4:ca:df:ad:6a:d9:48:3e:7f:60:4f:
                    a6:d0:48:5a:73:c1:72:56:4b:d6:46:0b:3e:08:f6:
                    0d:50:e8:0c:72:52:77:61:2c:dd:31:64:22:d5:ef:
                    6f:0a:70:8a:7f:c4:84:67:e3:27:f5:1d:7c:89:76:
                    20:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:61:33:7A:52:C7:12:31:9F:FF:26:26:91:1F:01:DB:D2:17:73:61
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:1e:c5:d7:ed:c6:26:27:cc:28:9a:a1:f8:a6:62:aa:bb:4c:
         ac:43:b5:a9:a1:7c:4a:b6:d4:98:8b:d8:b0:48:04:1c:f3:c5:
         40:69:fe:01:42:99:ee:96:1a:53:4e:6e:0a:58:43:70:a0:ef:
         38:65:29:9e:fc:0e:ae:89:13:c4:ae:0a:e3:fe:9c:f4:84:a9:
         c2:31:8e:36:1a:73:6f:a9:b7:5d:de:26:67:4e:af:91:01:17:
         ae:55:3c:2d:75:e4:e0:95:db:3d:7d:04:b7:e1:0c:a2:b2:2b:
         9f:c8:0e:16:0d:e8:93:3d:55:d0:3e:b9:0b:70:d9:35:27:7c:
         6d:0a:e9:ac:7b:73:4d:c4:08:17:fb:cb:cf:49:49:13:38:6a:
         ef:90:cc:ca:ef:db:7f:24:fb:48:40:33:c6:ee:78:ea:98:ad:
         7d:35:24:79:4e:ed:be:b9:50:fd:5b:0b:7b:21:eb:61:40:b9:
         1b:ec:15:2b:22:d4:3e:53:15:23:0c:49:25:72:c6:2d:47:63:
         40:52:78:48:2d:53:d2:a2:87:f8:61:d4:fc:34:02:6a:df:39:
         0c:8a:fe:c0:f9:a8:ea:8e:9a:ea:e7:dd:f5:c1:58:d0:70:74:
         b9:7a:41:28:41:bc:31:dd:72:0c:f3:d3:38:fb:6c:a3:4d:8e:
         bd:f2:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----