Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/32332e3133322e3138342e302f32342d3234203d3e203233343730.roa
File:                     32332e3133322e3138342e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          Kbc2l2cgzvF3eKWgXhJFKQhZ1sNLVQqb/FbGf8EPk/g=
Subject key identifier:   0E:E3:62:AD:7F:B2:A8:60:80:D4:50:BB:22:1E:C1:BF:E8:D5:05:F6
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       0CB534E4B12EE0F9A019271020F42F0FA584C484
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/32332e3133322e3138342e302f32342d3234203d3e203233343730.roa
Signing time:             Wed 21 Dec 2022 16:56:56 +0000
ROA not before:           Wed 21 Dec 2022 16:51:56 +0000
ROA not after:            Wed 20 Dec 2023 16:56:56 +0000
asID:                     23470
IP address blocks:        23.132.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b5:34:e4:b1:2e:e0:f9:a0:19:27:10:20:f4:2f:0f:a5:84:c4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=0EE362AD7FB2A86080D450BB221EC1BFE8D505F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:48:78:e7:a0:40:86:1d:f1:8a:54:65:89:09:
                    cd:22:fb:a3:a3:05:f7:9a:3d:4b:fd:b7:22:2c:2a:
                    af:90:45:2a:f7:20:a8:9f:dd:73:42:a0:7f:44:02:
                    b8:4d:27:42:4b:53:70:91:7a:ed:d1:bf:e5:0e:18:
                    45:18:63:1c:9c:e2:da:ce:e0:5e:6e:9d:96:36:91:
                    a7:7c:38:47:8b:d6:a5:38:1d:37:3e:49:51:13:0e:
                    89:2f:70:65:d4:07:c9:de:fe:a1:d8:b4:7d:85:c9:
                    12:6d:fa:5a:34:e0:1d:3b:dd:10:58:18:a1:58:21:
                    97:0d:36:3f:35:4a:50:90:22:ff:6a:ba:9b:fb:97:
                    e8:15:45:af:5f:c6:7a:66:07:26:27:45:ec:95:05:
                    a5:45:f4:7f:32:e6:36:0c:1c:f0:71:9b:3b:58:f6:
                    2c:3d:8c:db:4f:ee:ac:38:b2:1f:a5:20:42:9f:92:
                    4c:f8:6a:12:6a:2d:92:e5:d4:04:9b:06:c0:6d:bb:
                    77:a4:d8:b6:52:c9:03:39:79:a2:94:84:04:64:88:
                    2f:bb:3d:a5:e5:02:63:55:8a:61:d2:88:09:f6:b8:
                    2f:8a:91:65:9f:8d:49:26:17:1a:d5:94:16:de:78:
                    e6:cf:46:af:b3:27:a3:37:18:26:23:8c:1d:b7:83:
                    8d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E3:62:AD:7F:B2:A8:60:80:D4:50:BB:22:1E:C1:BF:E8:D5:05:F6
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/32332e3133322e3138342e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:cc:6a:05:39:36:22:d7:97:59:99:4e:fe:25:0d:d8:6b:11:
         ae:fd:35:0d:84:55:83:ec:b9:9c:e3:c3:15:f8:2e:94:e3:bc:
         36:04:92:00:ba:17:7e:48:5c:ad:40:6a:f9:db:aa:01:ae:fd:
         fb:21:10:dc:57:61:99:ce:09:e5:37:55:4b:a5:1c:ac:9c:a6:
         64:5e:b6:5f:13:a6:9c:b8:e9:40:b9:50:e7:73:dd:07:6c:7b:
         a3:2d:7e:8e:08:63:70:90:0a:d6:3e:e7:55:75:8a:78:6b:0a:
         ad:d7:4d:6c:18:98:4e:a4:f3:6c:11:72:66:67:bf:86:9b:6b:
         82:00:6b:c3:0d:bf:c0:ec:6c:f5:3b:cf:f8:c9:80:91:b8:68:
         de:a9:93:02:7f:84:c3:d7:7a:b8:99:24:56:5b:63:6a:b7:63:
         e2:60:ce:7e:1f:64:1c:33:6d:11:82:e2:60:0e:51:e9:26:ca:
         03:98:ba:2d:31:99:e6:f5:67:aa:ad:de:6c:d0:ab:2d:74:89:
         31:d0:1e:4c:68:23:d8:ee:52:4e:8a:0f:33:28:72:c3:ce:9d:
         c6:7f:20:91:c8:bf:7e:26:f0:c5:be:36:2a:f8:67:47:84:1f:
         73:da:f0:30:e4:cd:23:41:74:e5:01:65:7f:b4:b8:69:7d:65:
         6a:f0:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----