Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3139322e3230392e36332e302f32342d3234203d3e2038313030.roa
File:                     3139322e3230392e36332e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          TVWrVY0GVw2hT+rKhbCkTOzTxlH3vH7v9ceaDiBIMFw=
Subject key identifier:   70:99:1E:BB:54:3E:BB:2C:90:E2:3F:DF:7C:43:36:B5:EC:08:D3:AD
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       3447232D20D6957BF5CC6CC0EFF26F63A0F6727B
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3139322e3230392e36332e302f32342d3234203d3e2038313030.roa
Signing time:             Wed 21 Dec 2022 16:56:56 +0000
ROA not before:           Wed 21 Dec 2022 16:51:56 +0000
ROA not after:            Wed 20 Dec 2023 16:56:56 +0000
asID:                     8100
IP address blocks:        192.209.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:47:23:2d:20:d6:95:7b:f5:cc:6c:c0:ef:f2:6f:63:a0:f6:72:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=70991EBB543EBB2C90E23FDF7C4336B5EC08D3AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:55:f3:30:1a:9a:94:ab:ba:c8:85:3b:1e:
                    c3:6b:e1:d7:64:10:64:54:40:9e:25:9c:c2:00:2a:
                    3e:07:93:59:38:b7:bb:c1:b5:8b:34:7c:44:a0:35:
                    83:80:29:0f:2a:72:d9:b4:b9:51:d8:a6:94:a6:be:
                    a2:50:ff:39:a1:d5:ff:a9:8d:fa:ac:aa:f0:78:d1:
                    79:61:fe:da:6b:a1:ab:46:5e:07:c1:4e:65:f6:99:
                    73:c3:ca:aa:db:99:94:f1:c7:16:c1:8c:8c:17:b1:
                    30:f2:5a:c3:04:29:d3:c0:45:a0:e5:e6:77:da:3c:
                    09:6d:35:c6:d9:cb:c8:c6:23:78:c5:19:20:64:83:
                    a0:61:70:9b:08:f3:c1:5a:19:34:99:65:a4:8f:a8:
                    7f:25:f3:8b:1b:82:95:a1:88:75:c8:e6:04:2e:ec:
                    a6:f7:19:96:3c:03:61:cb:85:90:2f:ee:9a:61:80:
                    82:dd:b4:d0:9f:25:af:05:71:af:c8:6c:44:0f:5d:
                    80:b2:10:b9:ad:3b:e5:84:8b:28:5b:0a:26:94:ae:
                    c6:a8:dd:62:d9:f5:3b:99:bb:ed:d3:51:65:cb:93:
                    03:e0:fb:da:d1:c0:a5:8b:ea:52:e5:e4:f9:7f:9e:
                    ab:ab:97:da:fd:27:22:a6:1e:67:98:45:bb:10:0f:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:99:1E:BB:54:3E:BB:2C:90:E2:3F:DF:7C:43:36:B5:EC:08:D3:AD
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3139322e3230392e36332e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:79:28:2f:58:bf:e7:f2:bd:36:85:2c:89:49:d1:79:51:14:
         13:08:43:f7:07:51:0a:69:d4:bf:af:22:01:cd:ff:6d:71:20:
         ce:82:11:75:48:c1:e1:1c:1d:cc:b9:d4:b1:9c:35:ec:18:4a:
         05:7e:4c:91:ad:ca:32:c3:51:ed:ca:db:e5:6b:c3:91:05:54:
         c5:b6:8f:89:89:d4:e9:f8:b2:b9:8d:38:cd:a2:7d:c5:ad:32:
         b0:23:22:fa:c5:4b:c9:b6:03:58:1c:bc:c7:84:d1:ef:a9:3d:
         1e:66:72:54:74:23:04:c1:14:6e:fa:1c:83:8c:d2:f0:c2:b6:
         ce:5b:d9:ac:4a:29:39:34:c4:91:9f:dc:fb:83:a8:81:86:1e:
         c0:94:84:77:8e:f1:75:c3:1a:72:4d:20:df:ef:e0:71:3a:e2:
         b2:c8:de:2e:d7:16:68:16:a9:03:a0:40:78:e4:f3:ed:e1:d4:
         26:99:ad:1e:30:03:ba:cd:23:67:69:b8:59:ab:f5:f2:fb:97:
         b3:0b:ce:f8:c4:05:30:6a:ee:78:7e:a5:07:81:aa:dc:f0:ff:
         59:8b:30:33:cb:26:da:8f:5e:0f:80:ec:b7:60:32:5d:a1:d4:
         e7:53:2d:ac:d7:b2:15:32:e1:96:89:3d:89:57:04:35:df:b4:
         af:13:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----