Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3139322e3133382e3231302e302f32332d3234203d3e203631313338.roa
File:                     3139322e3133382e3231302e302f32332d3234203d3e203631313338.roa (raw, json)
Hash identifier:          VyMnERdbYxVViEHLx3+SS99pV3mPn3J5jdbaVBDV9WI=
Subject key identifier:   D0:C6:B3:C4:4E:E3:40:12:7C:D3:F2:2A:EA:5A:47:3D:FA:57:B8:7F
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       49E456A02D92472B1559492839CCDFC3FC042231
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3139322e3133382e3231302e302f32332d3234203d3e203631313338.roa
Signing time:             Wed 21 Dec 2022 16:56:56 +0000
ROA not before:           Wed 21 Dec 2022 16:51:56 +0000
ROA not after:            Wed 20 Dec 2023 16:56:56 +0000
asID:                     61138
IP address blocks:        192.138.210.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e4:56:a0:2d:92:47:2b:15:59:49:28:39:cc:df:c3:fc:04:22:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=D0C6B3C44EE340127CD3F22AEA5A473DFA57B87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:31:1c:56:86:b9:95:9f:0e:d0:e3:75:81:
                    ef:e5:18:fe:09:60:30:64:8b:e2:db:bc:94:d0:17:
                    82:6f:5e:4c:99:48:10:6b:dd:f9:09:d6:ff:9c:20:
                    86:a3:75:20:8d:a4:71:69:18:b9:0e:38:66:50:81:
                    a9:f9:0c:6b:5d:dd:40:45:df:1c:b7:c1:7c:36:4d:
                    25:8a:7a:97:2b:5b:bb:2a:8c:4f:e0:15:5f:ae:15:
                    45:6b:8e:ec:7f:ef:1b:b4:3c:46:60:a1:af:9b:ee:
                    48:68:59:80:20:3b:86:0f:5e:8f:23:86:89:0d:86:
                    b6:33:b6:c9:4d:52:c3:31:d1:9d:89:30:52:9f:e0:
                    a1:da:46:cf:32:c6:a7:31:0d:90:af:10:bd:d1:b1:
                    fe:e8:8b:2b:80:ee:58:33:f5:9a:33:c5:3c:1e:09:
                    20:9a:cd:3f:29:6d:50:19:19:eb:f8:fd:09:21:9e:
                    22:a7:2d:a7:7a:ab:25:13:0e:1b:1f:61:43:95:a0:
                    fc:81:78:e5:c3:52:2e:a0:43:96:71:08:2d:ee:5a:
                    51:61:1d:bc:89:a2:a4:05:f7:e9:66:bf:7c:02:15:
                    cc:9b:81:da:c3:14:05:db:03:7b:35:ce:9b:cc:37:
                    b9:90:07:cd:a9:40:64:8b:0f:de:c7:88:5c:af:8a:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C6:B3:C4:4E:E3:40:12:7C:D3:F2:2A:EA:5A:47:3D:FA:57:B8:7F
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3139322e3133382e3231302e302f32332d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:52:d1:a1:e6:a2:fd:98:03:08:c5:22:95:43:66:7c:00:5b:
         a6:dc:55:83:83:6a:e9:2c:4c:ad:07:71:9e:78:e2:a4:0e:d7:
         2d:a1:d9:b6:a8:a8:59:e7:61:a9:23:0b:85:cb:f6:6d:72:12:
         98:64:ed:d0:cc:9a:05:20:7c:7f:c9:6a:33:a2:bf:bc:05:ab:
         d7:07:63:77:b7:81:e7:98:70:d9:96:5f:35:a1:69:52:fd:64:
         24:1c:e3:92:90:80:51:eb:7e:5c:c5:f4:73:d9:1f:54:d0:f6:
         9a:f9:75:56:c8:56:a8:dd:13:aa:39:1d:02:0e:16:ee:19:ce:
         f0:07:04:a8:2e:f2:f0:31:0f:5d:42:8e:d7:41:d2:52:27:17:
         e6:41:7a:4f:c2:14:66:38:60:79:8e:ce:f7:2e:7f:95:68:b6:
         a7:4a:0f:69:4b:3a:c5:9d:94:d1:71:0d:1a:e8:39:db:3b:25:
         a4:d9:c0:19:a8:be:47:01:77:4f:f7:5b:3e:80:63:ea:a4:ad:
         d1:f2:aa:12:f2:af:0c:bc:99:d1:c0:ab:f3:38:0d:26:5d:3c:
         85:90:41:78:b4:47:c5:77:a5:05:14:1d:2d:11:ac:1b:cc:26:
         0a:89:d9:1e:3d:be:46:c8:f1:33:cd:7f:33:00:15:58:f8:96:
         f6:cc:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org