Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
File:                     3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          0pPNjWZO6MTPIXOcYEy4NifqG4qLkg6z4aP9R+eJksA=
Subject key identifier:   80:45:1F:2B:2C:E4:CC:7C:9B:91:1C:A9:A6:35:F8:D2:4F:6B:FA:00
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       555E414C9C485F5D78171F050FBF3DC09D5EB346
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
Signing time:             Wed 21 Dec 2022 16:56:57 +0000
ROA not before:           Wed 21 Dec 2022 16:51:57 +0000
ROA not after:            Wed 20 Dec 2023 16:56:57 +0000
asID:                     23470
IP address blocks:        128.254.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5e:41:4c:9c:48:5f:5d:78:17:1f:05:0f:bf:3d:c0:9d:5e:b3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:57 2022 GMT
            Not After : Dec 20 16:56:57 2023 GMT
        Subject: CN=80451F2B2CE4CC7C9B911CA9A635F8D24F6BFA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7d:16:7d:f1:09:6f:02:bc:06:fc:14:d2:0c:
                    ed:f1:80:05:6e:3e:13:e4:fe:8f:33:8e:d8:88:ca:
                    54:87:1b:39:0f:ef:58:65:4b:e8:c2:f7:b5:ab:4d:
                    0a:6c:10:e7:c6:6d:80:10:06:5f:17:9b:ea:29:8f:
                    1c:c7:9f:3c:6b:37:71:fc:57:33:23:b8:ee:28:d8:
                    47:a3:2e:70:92:f6:77:db:9e:53:da:3d:54:0d:d8:
                    2c:89:f8:9d:49:70:07:5c:b0:61:5e:ef:09:0d:80:
                    87:55:a7:c1:aa:0a:84:ff:07:7b:ce:4c:37:c7:14:
                    21:68:c3:cb:5e:f5:ab:2a:a9:4b:95:85:f1:1a:38:
                    49:d7:ef:7a:2b:e4:bb:ed:ed:57:4e:7b:08:80:09:
                    7c:c2:83:0c:52:d2:90:03:10:78:6d:e7:30:99:92:
                    d9:59:72:7d:c4:60:81:17:56:eb:f4:8b:97:14:14:
                    fd:ca:77:15:55:09:42:8f:3f:5c:08:c5:a1:9d:37:
                    ff:3a:20:d7:92:d6:e9:e3:00:66:15:c8:94:4d:f8:
                    d1:27:5e:b6:13:89:24:33:7a:4a:14:ff:5c:16:e0:
                    95:43:ed:91:88:d4:a1:f0:54:93:98:07:16:58:a0:
                    f3:6f:3c:83:e1:cc:96:72:73:8d:2e:6a:59:1a:86:
                    db:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:45:1F:2B:2C:E4:CC:7C:9B:91:1C:A9:A6:35:F8:D2:4F:6B:FA:00
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:99:4a:21:49:23:a0:d0:5c:0e:00:42:ef:22:b3:34:aa:06:
         0c:e0:87:10:a7:2c:8b:73:d1:b4:9c:0e:23:1a:78:0d:b9:bf:
         2c:76:5c:c4:1a:d9:f7:50:4b:e2:00:ad:e2:c7:18:3c:71:f1:
         8b:88:65:87:32:7b:c4:fe:44:cd:f5:d7:b9:08:08:12:f4:82:
         82:08:e7:f5:4b:68:4f:58:2e:7c:8b:ea:9c:4b:eb:53:a3:bc:
         b7:57:bf:2c:7d:80:78:b2:2d:44:ec:9c:0b:0c:a9:28:ef:eb:
         a6:90:a6:97:bf:08:34:e5:63:95:25:1c:82:36:22:0e:e9:8a:
         88:4a:dd:95:28:a5:81:56:7c:96:37:81:cb:1b:16:87:da:22:
         de:8e:2d:84:15:f1:66:8f:14:4e:fb:45:90:b6:77:49:c4:9f:
         08:1b:aa:66:d4:c7:3b:1a:d1:bf:5e:82:ea:0f:b4:36:74:df:
         ff:10:04:40:69:72:07:7f:a7:8d:40:03:5e:df:fc:17:df:1f:
         27:3e:40:ef:3c:63:25:c8:7b:8e:d0:be:fc:6e:8c:66:17:62:
         05:53:01:41:68:fb:55:c7:90:f9:18:c0:15:4a:df:6c:71:91:
         a2:81:90:f3:07:73:f2:8d:69:ac:8e:17:57:33:36:d9:b6:d1:
         3b:de:9a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----