Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3231362e37332e3135372e302f32342d3234203d3e203631313338.roa
File:                     3231362e37332e3135372e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          kBHPD7/Qo2OL6S25+l4ArNftCTgFCIRfhOP4m/ujQwQ=
Subject key identifier:   0F:76:60:D5:2D:76:87:A4:D9:83:51:32:72:31:EE:C8:53:1D:76:26
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       69F8D75A5C670B6116B0ABFAA57AC334A934451A
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3231362e37332e3135372e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 21 Dec 2022 16:56:56 +0000
ROA not before:           Wed 21 Dec 2022 16:51:56 +0000
ROA not after:            Wed 20 Dec 2023 16:56:56 +0000
asID:                     61138
IP address blocks:        216.73.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f8:d7:5a:5c:67:0b:61:16:b0:ab:fa:a5:7a:c3:34:a9:34:45:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=0F7660D52D7687A4D98351327231EEC8531D7626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:f0:c5:18:0e:48:77:84:d5:4e:b9:21:11:
                    03:1e:55:f4:d9:24:c4:fd:23:9e:11:54:07:f9:31:
                    5f:6b:13:56:96:b3:53:63:90:6e:d7:63:a5:92:9d:
                    e2:3c:cb:2f:af:15:f8:35:81:57:0a:01:e2:64:df:
                    75:9c:a0:32:cf:e4:b9:0d:06:e7:f9:4e:5a:83:92:
                    5a:f8:19:80:73:4e:bb:d4:66:2d:07:ac:51:fa:c6:
                    a1:ee:41:89:b4:ad:1a:89:2d:6f:ca:5a:fa:e8:ac:
                    f6:b4:0d:4d:1b:d1:62:93:fe:63:db:1a:e9:ea:a1:
                    da:b0:89:fe:f9:b0:17:6a:80:aa:df:f8:8c:5f:fe:
                    74:14:7e:0d:5c:6c:af:9a:04:f0:88:e0:c0:4e:cd:
                    a2:b4:d2:6b:fb:89:98:32:17:0a:6f:18:cf:5b:2b:
                    9f:b1:c7:5d:65:f2:86:d9:04:56:b3:7c:b7:7d:72:
                    02:8d:86:49:d8:da:ef:a3:16:ef:97:4b:83:bd:80:
                    48:43:e9:c7:96:7e:da:8e:50:87:95:65:3c:b6:74:
                    b7:e5:66:08:d6:28:40:74:65:07:7c:c7:c9:d8:8a:
                    61:a6:e2:5d:36:ca:b5:54:af:9d:ef:15:62:4e:b5:
                    d0:d9:45:0d:26:fa:55:a1:0c:9c:8e:dd:fe:4a:03:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:76:60:D5:2D:76:87:A4:D9:83:51:32:72:31:EE:C8:53:1D:76:26
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3231362e37332e3135372e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:74:6c:ff:1d:19:c8:e4:19:5b:35:f1:f3:66:0a:c4:38:c3:
         fc:da:fe:3f:2a:35:3c:9f:3e:90:82:2f:2c:23:78:f8:91:c9:
         a4:70:47:d2:3a:ea:78:01:78:cb:c0:2b:39:11:a6:88:10:43:
         01:55:7e:ab:aa:f1:e0:f1:0a:35:74:6f:b0:05:ab:18:ad:dc:
         99:be:ec:ee:ac:d9:78:a5:3b:f1:03:40:67:f6:1b:54:de:0f:
         fd:bb:d2:9c:a2:16:f7:2a:a9:c8:c1:a1:b6:77:8e:6c:0b:1c:
         40:cb:9b:a4:5f:b9:60:65:86:47:14:32:62:01:25:78:65:ed:
         f6:fc:e3:c4:e1:ed:da:5b:9f:61:5c:d9:0c:6a:65:8e:80:12:
         07:f9:2e:b8:c7:76:44:f7:7e:4c:df:ba:2d:aa:b9:45:77:53:
         c0:0a:bc:a5:22:c4:ea:b1:df:76:98:ac:f0:53:48:52:2f:6e:
         f3:3d:90:66:b2:5b:5b:9c:b6:23:4e:13:48:14:e6:d9:1b:ed:
         31:9c:7f:5e:b8:85:0f:20:b2:29:b2:84:31:fa:93:a4:af:28:
         40:b3:1e:b4:1d:d6:06:00:9d:3a:40:3a:c4:5a:2d:a5:5b:5a:
         48:3c:6a:ab:21:8c:bb:73:4d:9e:47:f1:47:6d:b8:b0:05:87:
         ff:42:f5:14
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUafjXWlxnC2EWsKv6pXrDNKk0RRowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTYwN2YwY2E4MWI4NGUyYmNjNzBhNDc0
OTg0NDQyMDc4NDdhODZhOTQwHhcNMjIxMjIxMTY1MTU2WhcNMjMxMjIwMTY1NjU2
WjAzMTEwLwYDVQQDEygwRjc2NjBENTJENzY4N0E0RDk4MzUxMzI3MjMxRUVDODUz
MUQ3NjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNDwxRgOSHeE
1U65IREDHlX02STE/SOeEVQH+TFfaxNWlrNTY5Bu12Olkp3iPMsvrxX4NYFXCgHi
ZN91nKAyz+S5DQbn+U5ag5Ja+BmAc0671GYtB6xR+sah7kGJtK0aiS1vylr66Kz2
tA1NG9Fik/5j2xrp6qHasIn++bAXaoCq3/iMX/50FH4NXGyvmgTwiODATs2itNJr
+4mYMhcKbxjPWyufscddZfKG2QRWs3y3fXICjYZJ2Nrvoxbvl0uDvYBIQ+nHln7a
jlCHlWU8tnS35WYI1ihAdGUHfMfJ2IphpuJdNsq1VK+d7xViTrXQ2UUNJvpVoQyc
jt3+SgOcWQIDAQABo4ICezCCAncwHQYDVR0OBBYEFA92YNUtdoek2YNRMnIx7shT
HXYmMB8GA1UdIwQYMBaAFN5vGLRhlY3dIHTLWhkaZA0yC7WAMA4GA1UdDwEB/wQE
AwIHgDBsBgNVHR8EZTBjMGGgX6Bdhltyc3luYzovL3Jwa2kuemFwcGllaG9zdC5j
b20vcmVwby9aQVBQSUUtUlBLSS8xL0RFNkYxOEI0NjE5NThEREQyMDc0Q0I1QTE5
MUE2NDBEMzIwQkI1ODAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUH
MAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt
dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMy
LWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDFlOTk3Yy1iODllLTQ3YzIt
OGQ3OS1kMzFlNThiYzNjYTQvZWVjZjg0N2Q3YTYwN2YwY2E4MWI4NGUyYmNjNzBh
NDc0OTg0NDQyMDc4NDdhODZhOTQuY2VyMIGFBggrBgEFBQcBCwR5MHcwdQYIKwYB
BQUHMAuGaXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pBUFBJRS1S
UEtJLzEvMzIzMTM2MmUzNzMzMmUzMTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzNjMxMzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EmdMA0GCSqGSIb3DQEBCwUAA4IBAQA3
dGz/HRnI5BlbNfHzZgrEOMP82v4/KjU8nz6Qgi8sI3j4kcmkcEfSOup4AXjLwCs5
EaaIEEMBVX6rqvHg8Qo1dG+wBasYrdyZvuzurNl4pTvxA0Bn9htU3g/9u9Kcohb3
KqnIwaG2d45sCxxAy5ukX7lgZYZHFDJiASV4Ze32/OPE4e3aW59hXNkMamWOgBIH
+S64x3ZE935M37otqrlFd1PACrylIsTqsd92mKzwU0hSL27zPZBmsltbnLYjThNI
FObZG+0xnH9euIUPILIpsoQx+pOkryhAsx60HdYGAJ06QDrEWi2lW1pIPGqrIYy7
c02eR/FHbbiwBYf/QvUU
-----END CERTIFICATE-----