Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3231362e37332e3135382e302f32342d3234203d3e203233343730.roa
File:                     3231362e37332e3135382e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          cqJB+zUYjl3H1xdAUShGczy7UocN/cVZ+JX1OVcVjO4=
Subject key identifier:   98:94:CF:B2:15:C5:39:87:31:75:88:CC:AF:F7:22:4D:F1:9D:4B:CA
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       04C272FF7570A91E13526B6F243CDA0F5313AA71
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3231362e37332e3135382e302f32342d3234203d3e203233343730.roa
Signing time:             Wed 21 Dec 2022 16:56:56 +0000
ROA not before:           Wed 21 Dec 2022 16:51:56 +0000
ROA not after:            Wed 20 Dec 2023 16:56:56 +0000
asID:                     23470
IP address blocks:        216.73.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c2:72:ff:75:70:a9:1e:13:52:6b:6f:24:3c:da:0f:53:13:aa:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=9894CFB215C53987317588CCAFF7224DF19D4BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:e2:b0:c1:c7:30:d0:b1:4b:70:8c:20:c8:
                    6c:0f:be:19:17:a8:5d:24:18:41:07:ec:fd:b9:07:
                    7d:4b:17:f6:71:02:ee:fa:24:85:4d:2a:e2:56:21:
                    d3:1e:b8:11:82:2f:03:c0:26:ff:9c:5a:db:78:f1:
                    80:71:65:8e:f9:44:36:50:08:d7:1f:6c:38:ef:1c:
                    12:8f:5e:e2:38:b2:70:09:04:b1:13:04:2c:7c:fa:
                    b8:fd:82:24:7b:fe:51:d5:b0:3d:84:3e:27:7c:0e:
                    d4:cb:12:a4:90:ca:f4:49:df:bc:e6:34:ff:86:02:
                    6e:eb:42:22:79:f2:b0:15:01:20:26:75:6b:d6:bf:
                    74:53:35:8b:0e:73:8c:06:fc:4d:27:5b:fe:d6:99:
                    82:00:6c:bb:c6:cc:72:7c:1b:39:68:23:ea:82:09:
                    ba:7d:5f:f6:75:e1:10:96:49:65:88:2a:fd:68:33:
                    24:fc:9f:e0:e9:9a:8e:97:5c:7e:a7:eb:80:bf:8c:
                    b9:c9:35:c5:40:4c:ff:d2:b4:dc:52:0f:46:39:2e:
                    3b:32:c7:a0:f4:cc:f3:70:39:44:7f:c6:6c:5b:8a:
                    db:70:24:b8:b6:d9:c2:e8:4b:89:4a:23:4c:9e:0f:
                    a0:bf:a1:66:67:10:65:9f:16:3b:e0:16:b1:10:ac:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:94:CF:B2:15:C5:39:87:31:75:88:CC:AF:F7:22:4D:F1:9D:4B:CA
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/3231362e37332e3135382e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:67:2c:d3:2e:55:51:8b:e8:1f:96:44:30:f2:02:d3:a7:
         d8:44:da:0a:ad:ee:04:4c:74:6a:38:32:5b:e9:94:6b:2d:6a:
         81:00:cd:34:7f:a5:08:cd:91:4c:5a:41:7d:74:75:01:73:f8:
         b1:d5:5b:8f:5e:95:53:eb:a3:c9:ae:67:c6:64:6b:84:d8:5f:
         76:1f:18:24:3f:d9:23:64:c2:51:80:71:ff:34:89:15:8c:1d:
         63:d6:d1:a0:f0:d5:bb:f3:00:ec:e1:7d:9b:a6:d7:48:fb:81:
         d1:c0:34:43:25:df:27:2b:fc:a8:93:1f:7f:28:cf:3c:1f:3e:
         15:b5:41:a2:85:a5:57:f3:77:b9:d5:d7:18:96:2e:7b:2d:6e:
         2c:74:b0:4a:83:f0:65:72:18:45:07:77:38:09:b9:2d:84:b2:
         8b:b0:2c:00:8f:39:a5:6f:76:e6:87:37:0b:5a:e3:2c:30:ca:
         84:9d:5a:b5:8a:fb:18:ab:e7:74:7e:68:2c:8a:33:4b:5a:a8:
         68:ed:95:66:d4:02:1e:fe:76:9d:8c:fa:54:ed:55:88:e2:db:
         92:32:03:38:04:bf:93:cd:04:d9:3d:9f:71:50:ef:ca:9b:c5:
         8c:b5:63:d3:c1:16:3f:ec:a1:f5:db:98:9b:df:a1:35:d5:35:
         52:b7:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----