Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa
File:                     32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa (raw, json)
Hash identifier:          uZqEdSfaJ+VWHvjKADio/sD9lYR9NwKTHB/lXUuUrUM=
Subject key identifier:   D4:67:AB:D0:7B:48:CF:31:9D:78:DF:36:19:32:69:64:A0:FB:F2:28
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       137A15F5451B32324550CEB0A00D035A85F89663
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa
Signing time:             Wed 21 Dec 2022 16:56:57 +0000
ROA not before:           Wed 21 Dec 2022 16:51:57 +0000
ROA not after:            Wed 20 Dec 2023 16:56:57 +0000
asID:                     211144
IP address blocks:        23.132.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7a:15:f5:45:1b:32:32:45:50:ce:b0:a0:0d:03:5a:85:f8:96:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:57 2022 GMT
            Not After : Dec 20 16:56:57 2023 GMT
        Subject: CN=D467ABD07B48CF319D78DF3619326964A0FBF228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:ff:53:ce:fa:56:81:58:b5:cd:09:c6:31:
                    b0:d8:ef:6b:5e:d9:c8:21:10:50:7f:39:d2:04:4d:
                    22:32:27:62:c3:c0:2d:e8:ab:a8:bf:02:09:28:7c:
                    ed:29:0d:35:52:a6:79:c1:72:a0:93:55:5e:0d:1a:
                    4c:69:75:01:af:14:f8:15:5a:bf:83:d1:fc:05:f4:
                    12:91:69:e8:28:3c:bd:e6:b3:aa:7a:8e:47:3b:99:
                    36:dc:35:91:23:ce:51:95:ec:52:00:2f:89:6c:e3:
                    a4:30:d7:52:2c:b7:45:da:4b:13:f0:cf:18:b6:18:
                    93:ad:0e:73:21:bf:9b:ad:65:f4:fd:81:bd:47:45:
                    57:72:34:23:13:d7:3d:eb:a3:8f:da:a6:94:7c:74:
                    2c:2e:5c:98:1a:1d:ac:cc:d1:8d:39:23:19:31:26:
                    00:53:f7:c4:8d:53:31:5f:41:eb:2c:a3:b2:db:82:
                    a4:24:59:3b:ff:aa:00:0f:bd:7f:30:69:67:29:f4:
                    0e:79:46:9d:fa:ae:b3:e4:04:bf:e5:52:8c:53:3d:
                    64:09:01:cb:d5:7a:ec:98:5e:b8:ab:3c:dd:eb:54:
                    97:56:3e:a8:ea:03:08:e1:ad:30:b4:f3:22:b6:b3:
                    d7:91:95:0c:85:cf:e6:05:c7:dd:04:db:5a:e9:c8:
                    98:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:67:AB:D0:7B:48:CF:31:9D:78:DF:36:19:32:69:64:A0:FB:F2:28
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/32332e3133322e3138352e302f32342d3234203d3e20323131313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:f7:ab:b1:cf:93:40:29:ff:93:48:48:51:84:92:34:5b:43:
         3a:12:7c:4b:f7:c3:cd:07:fe:6d:7d:54:c6:e9:75:f1:78:f3:
         4f:b3:f6:cd:b7:7d:5d:bb:c1:27:8e:03:3d:fc:0a:88:96:c3:
         bb:ae:78:7e:1c:27:de:e1:fc:de:fb:1f:a7:d5:7e:97:78:31:
         2a:1a:84:1d:fa:3a:88:08:c9:68:37:e8:53:2f:7e:0a:8a:9c:
         85:fc:9a:42:05:3b:1d:ed:f6:e0:03:94:85:e9:67:9e:44:81:
         4c:59:74:e7:7e:28:c3:aa:a3:c2:0a:21:b8:7d:61:00:82:08:
         7c:2f:66:ff:9f:93:fb:7f:a3:05:cd:cf:2d:08:4e:c3:fd:70:
         7a:bc:f5:c6:6b:4e:d6:26:e5:21:8f:77:1e:dd:13:5d:4c:f7:
         4c:79:af:8e:79:00:62:63:5d:06:2e:8c:d3:8c:7f:f9:6a:cc:
         3c:9b:7f:8e:9b:59:d8:19:31:93:b5:89:07:b5:3a:d2:74:c1:
         8d:19:15:ab:cb:e0:f2:4b:87:1d:e5:95:80:b5:91:a3:18:38:
         54:05:cc:49:8c:50:84:1e:da:c2:c0:84:0a:02:98:ca:1e:f4:
         fb:71:7e:8a:91:11:d1:0a:c7:29:42:97:c5:9d:20:20:9a:64:
         d1:54:7c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----