Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3230382e38342e302f32322d3234203d3e203631313338.roa
File:                     3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          a0UsOQ1oQKgZj0dAU3FFQk5D9lj3QL+DcxTOzvp7jQ8=
Subject key identifier:   F3:D1:21:5E:D8:83:B9:11:36:09:4D:8C:2F:9A:05:EA:EA:EF:F3:C6
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       2457B9E9FAE4B6BD5C2D56C8BF48C6AADF315AF8
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3230382e38342e302f32322d3234203d3e203631313338.roa
Signing time:             Wed 21 Dec 2022 16:56:39 +0000
ROA not before:           Wed 21 Dec 2022 16:51:39 +0000
ROA not after:            Wed 20 Dec 2023 16:56:39 +0000
asID:                     61138
IP address blocks:        103.208.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:57:b9:e9:fa:e4:b6:bd:5c:2d:56:c8:bf:48:c6:aa:df:31:5a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:39 2022 GMT
            Not After : Dec 20 16:56:39 2023 GMT
        Subject: CN=F3D1215ED883B91136094D8C2F9A05EAEAEFF3C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:e0:b8:6c:53:b4:70:df:d1:4b:86:f0:40:
                    ac:b1:8e:90:d0:cd:d3:0d:8e:31:8e:d7:0c:e0:01:
                    ce:70:95:77:ef:09:ee:cc:ea:6f:28:02:cf:bf:d3:
                    64:cb:3a:e5:5f:9d:45:b8:44:aa:ea:66:45:60:47:
                    86:9b:ca:e4:14:ec:d2:8f:52:15:36:24:ce:b2:6e:
                    13:a5:ec:9f:9a:68:be:46:d6:3f:6f:76:be:57:08:
                    b0:00:e6:de:d7:e8:aa:45:15:6a:22:ba:01:01:a3:
                    4f:3c:65:46:00:d8:32:2a:fb:9a:2d:56:71:09:f2:
                    52:90:d8:f4:2b:87:c0:f4:b3:90:40:2b:3e:54:6f:
                    55:36:d1:47:f5:e7:d3:e0:48:34:bb:1f:2b:c3:e1:
                    6b:72:02:0e:83:bc:35:85:13:90:ee:3b:ac:95:33:
                    24:13:38:d1:42:4b:e0:52:c9:2a:7d:4b:99:81:54:
                    b2:57:d6:8f:c1:46:98:ee:ee:f3:65:71:fa:a8:9c:
                    48:5e:d6:95:53:d3:82:56:69:54:72:6c:98:05:1d:
                    e3:d3:5f:a1:e3:6b:c2:66:69:19:bd:fb:bc:16:f5:
                    aa:be:fd:9d:86:fb:bd:7e:99:c8:1b:22:cc:22:1a:
                    e1:60:9f:a1:78:7a:39:74:dc:2b:f4:b1:58:d2:26:
                    14:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D1:21:5E:D8:83:B9:11:36:09:4D:8C:2F:9A:05:EA:EA:EF:F3:C6
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3230382e38342e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:77:5f:40:07:b2:41:72:74:df:fc:32:54:0a:25:c3:68:0d:
         9b:d7:9b:12:1b:aa:f3:3e:7f:36:9c:bd:d7:00:a3:bc:09:f0:
         52:40:8c:ff:a7:66:56:d1:49:25:92:91:00:b4:54:8d:77:a8:
         06:3f:61:42:2d:21:4d:a1:6c:9f:cb:6e:ac:0e:69:86:35:7a:
         d0:b9:24:dd:c5:11:de:30:58:ee:c6:86:7a:7b:6d:2f:f9:f4:
         5b:21:5e:62:bc:62:a7:d4:ea:58:48:73:88:6b:a6:04:30:0e:
         18:92:79:49:c0:ab:0d:98:60:06:c4:c4:0f:e3:46:32:e9:06:
         a3:fc:04:38:c2:f4:59:e2:cc:77:94:64:d3:3e:38:24:e3:c3:
         34:b3:0c:15:7a:7a:10:b2:7b:0e:26:7d:77:52:50:40:9f:72:
         2b:57:a4:a1:2e:fc:05:60:39:7b:2f:90:9f:95:4a:d5:b7:98:
         20:74:4e:91:ec:7b:a9:d6:a1:4e:76:37:2c:35:d6:95:63:e5:
         0c:b5:97:06:0a:87:a5:76:c3:ba:d4:a4:11:49:8d:76:bd:09:
         32:a2:f3:ea:a8:bc:56:8e:e0:84:95:a0:7f:ba:81:08:bf:b3:
         b3:96:c8:b6:12:d0:5d:53:e9:81:46:2c:3c:ad:5f:23:7b:ec:
         32:3e:09:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-fra.rpki-client.org