Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa
File:                     3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          fNENuJH5SZb3SV87igwprZGlF1UZ/wccqYVRTJ7Fm00=
Subject key identifier:   09:70:20:CD:1C:FB:54:62:11:96:FD:82:72:24:9D:36:B2:93:88:15
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       2B66AED137581865996D8008F27C6BF63DCDD689
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 21 Dec 2022 16:56:56 +0000
ROA not before:           Wed 21 Dec 2022 16:51:56 +0000
ROA not after:            Wed 20 Dec 2023 16:56:56 +0000
asID:                     7018
IP address blocks:        128.254.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:66:ae:d1:37:58:18:65:99:6d:80:08:f2:7c:6b:f6:3d:cd:d6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=097020CD1CFB54621196FD8272249D36B2938815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:ba:3c:03:73:16:ee:c3:84:fb:f0:34:3e:
                    ec:e8:c9:ee:43:c9:b6:dd:92:36:6b:ea:74:c1:0f:
                    28:8e:55:dc:bf:26:ac:26:e6:92:1d:9e:57:ea:74:
                    54:03:7b:a9:4e:c3:12:5d:0c:bf:60:b0:aa:b2:36:
                    ae:64:a0:a1:c4:01:d3:79:a0:03:28:a4:ef:a6:51:
                    b2:65:f8:2a:bb:e8:05:12:7c:a9:8d:0f:0a:65:79:
                    aa:cb:52:97:7b:75:7b:81:a0:6a:bd:0a:e9:68:13:
                    16:3b:29:c4:61:6f:5d:0d:9b:22:06:b4:7d:4b:2e:
                    52:c6:fc:dc:9c:7d:93:09:2b:c4:7b:27:6a:da:99:
                    12:43:a3:d9:27:3d:68:9b:18:a5:74:27:a0:2a:b2:
                    91:99:d4:89:e1:d3:3b:8d:00:f5:bf:f5:c8:02:b6:
                    b5:57:fb:a6:c7:58:4f:46:a2:6d:94:01:3d:d1:48:
                    d6:3f:b3:b2:e5:6a:b1:f8:8c:f7:c2:a6:b8:56:2a:
                    e5:72:e9:23:6a:35:fb:63:27:2f:06:ab:96:7b:1e:
                    35:6b:2d:a2:74:63:6e:04:84:bf:ed:8b:7d:32:25:
                    de:72:b1:21:77:00:3f:f6:06:17:3b:07:20:3b:6a:
                    a5:cc:de:f2:02:a4:92:00:e5:16:ab:3e:b0:31:05:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:70:20:CD:1C:FB:54:62:11:96:FD:82:72:24:9D:36:B2:93:88:15
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:1c:c4:0e:0b:8d:56:4e:61:71:7a:57:98:d5:b5:7b:fa:
         db:e3:7f:2a:c7:72:fc:6c:a6:19:a2:48:3e:99:fc:a1:79:82:
         55:bb:2e:4b:e9:8e:f5:35:7d:2d:6a:3e:f4:c3:73:7a:3d:15:
         eb:55:b3:08:eb:ad:56:a5:98:4f:c3:37:22:1f:27:f7:86:d3:
         72:d8:db:00:c4:c1:fd:02:9a:a1:71:1c:81:ad:97:89:4d:cd:
         d7:74:2b:ce:7e:46:57:2f:f1:de:8b:c4:0c:92:f9:83:62:22:
         9a:1c:fe:99:82:29:41:20:36:41:d4:f9:d1:5f:14:00:09:0b:
         30:96:6d:93:96:69:bc:35:d1:97:97:d0:f6:8c:6a:29:bb:f9:
         14:1c:eb:27:bc:39:26:cc:5a:65:b2:85:d0:ef:0f:6a:c9:3d:
         ef:30:06:47:83:12:4f:c5:3f:9d:f8:5f:af:e5:72:5c:f8:70:
         59:35:96:99:82:31:20:51:e9:87:4d:43:54:57:a1:2b:6a:44:
         44:c7:2b:20:1b:5f:93:7b:ff:7c:ed:06:1b:bb:0d:7c:11:af:
         5f:d0:e3:d8:17:1e:f5:70:54:45:6d:7e:d0:7e:e9:b4:6b:56:
         77:67:17:55:64:68:e2:02:a3:d2:27:c1:62:08:80:a2:2e:95:
         5a:98:26:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----