Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/32332e3133322e3138342e302f32332d3234203d3e203631313338.roa
File:                     32332e3133322e3138342e302f32332d3234203d3e203631313338.roa (raw, json)
Hash identifier:          9Rx6YwGeO+qddrYZUR4PbxJwLzapCJol7vXRjrSVXrs=
Subject key identifier:   96:11:B7:E5:C7:16:0A:4E:DA:54:98:75:00:AB:ED:9E:37:F8:78:92
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       2BB1254DCAAA5129D5481B8E7DD529A7E551DEE0
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/32332e3133322e3138342e302f32332d3234203d3e203631313338.roa
Signing time:             Wed 21 Dec 2022 16:56:56 +0000
ROA not before:           Wed 21 Dec 2022 16:51:56 +0000
ROA not after:            Wed 20 Dec 2023 16:56:56 +0000
asID:                     61138
IP address blocks:        23.132.184.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b1:25:4d:ca:aa:51:29:d5:48:1b:8e:7d:d5:29:a7:e5:51:de:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=9611B7E5C7160A4EDA54987500ABED9E37F87892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:a7:f7:d0:8a:eb:72:d7:50:f6:91:b0:90:
                    2f:2b:90:57:0a:22:4b:b8:df:15:fa:ae:94:92:51:
                    01:4e:70:1f:85:b8:01:2c:03:24:7e:03:d4:65:17:
                    81:20:40:ee:23:49:b5:1f:fd:7b:b4:7b:9c:86:1b:
                    36:f5:ec:03:f0:39:af:7d:93:e2:29:64:5d:31:5b:
                    c7:df:13:ce:e8:58:73:c6:5b:80:4f:49:1c:0c:44:
                    f7:30:0b:e5:58:78:4b:26:35:15:71:76:8c:c1:bd:
                    5f:e7:fb:30:6e:c3:2b:77:0d:d0:ad:69:10:f4:df:
                    3f:df:4d:44:21:8c:c8:5d:ed:b2:46:76:77:9f:49:
                    b1:06:58:76:30:ee:09:d5:df:e7:62:27:56:57:be:
                    ba:b6:4e:46:c1:4c:f0:ce:ce:7f:75:49:89:fd:33:
                    c1:c6:1d:06:c8:0a:41:dd:a2:f0:88:2e:0a:87:c8:
                    d1:0b:5f:95:4e:f6:fc:6f:0f:31:d0:a3:81:62:a3:
                    e0:7c:2b:2c:5c:d0:58:27:73:99:91:e1:7e:76:1c:
                    c5:99:70:d8:29:86:b2:d7:31:df:d2:95:e8:64:62:
                    3e:89:83:c4:80:69:4a:6d:0a:e0:fc:cd:dc:90:ba:
                    d3:ce:0a:4c:59:c8:c7:f4:0b:b0:3a:b8:b1:eb:33:
                    bd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:11:B7:E5:C7:16:0A:4E:DA:54:98:75:00:AB:ED:9E:37:F8:78:92
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/32332e3133322e3138342e302f32332d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:79:0e:a9:36:2c:13:11:9f:5c:09:ce:93:26:fd:3b:4c:3f:
         20:40:5b:7c:3d:47:56:b5:25:e4:70:f4:90:6f:10:de:2f:32:
         f0:05:62:39:4c:0c:3d:9a:f5:77:e8:d3:d2:c7:b5:36:84:c8:
         1e:72:25:04:ee:c9:4b:9e:ed:c9:ef:a0:f2:5f:4a:e1:cc:bf:
         f4:08:b9:6b:18:09:9a:f1:fc:17:7d:38:58:96:6b:67:da:af:
         47:18:d8:9a:4a:fd:3e:66:f3:9a:dd:7f:2c:cf:48:82:57:a1:
         fb:40:be:74:bb:86:ca:77:87:51:5f:d4:f2:56:d5:02:45:65:
         1d:f2:db:ca:f0:3d:51:13:01:37:ed:da:05:e6:1c:99:6d:69:
         20:4d:71:99:ae:c3:6b:67:e3:61:ee:1b:1f:f5:96:f1:d4:ea:
         a1:af:78:69:e6:4d:b5:fb:e3:74:36:ff:c0:45:c8:aa:ba:d2:
         9f:3f:36:10:a3:32:4b:8a:07:51:39:32:a0:6c:67:5d:ed:f8:
         bc:6d:ef:32:5a:08:b5:dc:5e:97:66:3b:51:ee:c8:17:83:0b:
         36:60:11:7d:d7:10:01:a1:2c:51:0b:37:74:bd:86:d9:0b:57:
         1d:19:b1:bb:0f:19:b2:a7:c6:25:3d:c4:06:cb:13:63:e8:09:
         7b:eb:84:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----