Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030333a3a2f33322d3438203d3e203434353730.roa
File:                     326130363a613030333a3a2f33322d3438203d3e203434353730.roa (raw, json)
Hash identifier:          +8HBO3OfZpAEPAWKp6vQpnHvR4Rt29ZnmJ7dwupCaXw=
Subject key identifier:   FE:6F:BC:02:B2:97:D0:A1:CD:9A:6D:67:53:93:2D:7F:EE:72:E0:8B
Certificate issuer:       /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial:       67513C93474B932D3531CCD579D8E4FCCFBA5B48
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030333a3a2f33322d3438203d3e203434353730.roa
Signing time:             Fri 09 Dec 2022 05:04:03 +0000
ROA not before:           Fri 09 Dec 2022 04:59:03 +0000
ROA not after:            Fri 08 Dec 2023 05:04:03 +0000
asID:                     44570
IP address blocks:        2a06:a003::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:51:3c:93:47:4b:93:2d:35:31:cc:d5:79:d8:e4:fc:cf:ba:5b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
        Validity
            Not Before: Dec  9 04:59:03 2022 GMT
            Not After : Dec  8 05:04:03 2023 GMT
        Subject: CN=FE6FBC02B297D0A1CD9A6D6753932D7FEE72E08B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:ae:8a:94:8e:ab:f1:27:9e:2c:31:36:36:
                    12:b7:b8:c9:9c:a2:e2:c8:06:9a:96:4b:e1:dd:34:
                    e9:c5:05:4c:86:32:30:69:1b:33:90:5d:11:68:13:
                    30:78:c3:c4:d8:cb:39:30:82:44:fd:1e:ac:c3:ec:
                    13:79:0a:b8:62:fe:2a:9d:a3:99:89:59:55:24:29:
                    78:f1:2b:6f:f8:ee:74:75:47:dc:d7:46:05:fa:23:
                    22:e5:77:2e:72:40:44:35:b4:46:7c:a9:0b:99:4d:
                    6f:17:e9:f1:6a:9b:dc:23:9f:ba:39:50:05:8b:2a:
                    29:22:7d:9f:7e:93:79:b3:a9:06:29:d5:b6:f9:c7:
                    42:5e:a6:f7:44:cb:12:0e:bf:4a:87:7f:8a:19:c2:
                    6b:76:0e:c8:dd:0d:d7:d8:8b:5f:1f:34:30:81:11:
                    13:2a:fb:95:b0:fc:f9:82:0b:86:a6:25:58:1d:03:
                    79:df:fb:51:a5:8e:31:66:1c:c3:23:6e:57:9e:34:
                    93:59:73:dd:cc:50:dd:7e:29:6f:fa:6f:5d:b9:1f:
                    00:71:84:65:6f:3e:bc:6d:77:ce:70:86:64:f8:07:
                    b4:8f:35:12:c3:a3:e6:50:62:08:b2:6c:06:27:ad:
                    ed:ba:d6:fe:6b:22:08:76:78:b2:e7:e5:b9:d0:15:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6F:BC:02:B2:97:D0:A1:CD:9A:6D:67:53:93:2D:7F:EE:72:E0:8B
            X509v3 Authority Key Identifier:
                keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/326130363a613030333a3a2f33322d3438203d3e203434353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a003::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:0d:8c:de:2c:8c:f2:0a:41:09:0b:96:4a:71:a9:fd:e9:bd:
         17:94:f5:24:37:f0:92:48:06:fe:bb:29:a0:6c:97:12:0d:29:
         31:3c:b8:ee:7d:0c:7f:75:01:7a:8a:e3:d0:7b:ab:7e:39:1c:
         27:18:10:71:98:f9:7d:22:b3:24:fe:c0:5d:78:d5:e6:ef:59:
         3f:0a:bb:54:db:1c:0c:b3:f6:2f:58:c6:f8:c4:7f:7b:e4:ce:
         4e:5e:67:4e:10:eb:3a:4e:58:be:cd:f6:68:98:58:5a:4e:71:
         14:6b:6b:13:7f:92:bd:9b:cc:87:0b:ff:4c:c8:df:b4:92:d9:
         9c:78:b3:67:e0:a6:4b:4f:83:34:b7:94:62:62:2d:c3:36:d1:
         43:00:0f:03:41:2b:55:46:5b:62:be:01:22:b8:66:03:5f:c5:
         f3:de:6b:01:3b:8c:b1:38:e9:5c:56:e5:26:98:6b:54:b2:07:
         25:fa:19:fe:d4:86:1a:a3:90:00:c3:d8:96:4e:4b:c1:c6:57:
         79:d8:c5:25:b9:2f:a1:53:91:50:9a:f5:48:8c:ea:f8:85:57:
         3d:b2:d6:9a:c8:ec:b7:a8:40:70:21:b4:07:dc:32:a9:9c:83:
         20:2a:2f:41:d0:3b:ab:61:84:e8:e3:80:07:1c:63:71:1b:71:
         09:5b:96:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:20 2025 by rpki-client