Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa
File:                     3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          UFO4goUH2aK2vRxbmDKT0JDswRoWbm7u/ce0R+FlkMA=
Subject key identifier:   2D:CF:D2:28:CF:56:D8:9E:15:73:3D:06:0C:14:69:12:C5:45:5B:5D
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       1085F173466791C44D9F0871C04F66C2BA80A8EA
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 21 Dec 2022 16:56:39 +0000
ROA not before:           Wed 21 Dec 2022 16:51:39 +0000
ROA not after:            Wed 20 Dec 2023 16:56:39 +0000
asID:                     61138
IP address blocks:        103.208.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:85:f1:73:46:67:91:c4:4d:9f:08:71:c0:4f:66:c2:ba:80:a8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:39 2022 GMT
            Not After : Dec 20 16:56:39 2023 GMT
        Subject: CN=2DCFD228CF56D89E15733D060C146912C5455B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:60:3a:41:c8:21:b9:40:eb:49:65:cb:ed:73:
                    b4:dd:71:55:d6:67:aa:e3:13:fb:5b:d8:cf:ed:80:
                    c8:e9:84:10:9f:7a:4a:cd:b7:17:c1:1e:35:5a:4e:
                    67:1a:1b:c3:e4:25:52:f2:91:3a:64:ad:ce:15:aa:
                    0e:36:fb:d0:74:32:1e:78:b1:d4:cb:46:02:a4:31:
                    1f:de:68:72:49:40:12:5f:6e:a8:ea:73:e4:f0:22:
                    e3:ab:d2:4a:36:d5:bf:88:ea:99:b4:d3:62:ea:2f:
                    b0:88:5c:de:ad:50:72:37:ef:64:d1:56:9f:90:93:
                    c8:57:89:52:a1:f7:ca:94:03:98:a7:3a:06:ac:49:
                    84:56:44:ae:ea:57:ad:30:da:90:62:73:d7:53:d0:
                    0f:4a:fb:67:74:dd:01:42:89:bd:d0:f1:06:99:fa:
                    b3:9c:bd:e6:fb:d1:d7:7f:83:26:08:f6:13:33:a7:
                    79:04:18:4b:3d:d2:6c:f7:83:39:68:6d:27:a9:7f:
                    b7:bf:1e:f3:f5:a4:50:09:d5:86:5e:6d:3c:f8:e2:
                    3b:5e:59:21:f4:49:9f:a6:be:9e:88:78:84:3a:ce:
                    78:96:5e:8f:fe:e4:97:4d:8b:6b:82:5a:4e:2d:99:
                    1e:1e:b5:ed:bc:00:4f:92:ba:e8:90:65:79:de:6d:
                    35:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CF:D2:28:CF:56:D8:9E:15:73:3D:06:0C:14:69:12:C5:45:5B:5D
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3230382e38362e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:26:d0:5c:fc:d2:68:4f:35:2a:92:cc:e8:55:b5:c1:66:
         b9:77:5e:90:40:58:a9:3d:7e:2f:06:f3:d1:b4:9d:f1:17:5e:
         be:dd:17:13:98:5e:e6:59:96:3b:07:53:a8:be:52:96:c8:c5:
         9a:ef:d6:74:85:91:23:68:f1:9b:18:8d:b7:f7:ab:ee:1d:f2:
         c9:f1:b9:c6:c2:c3:41:59:81:d6:0f:d9:35:63:5f:0d:8e:1c:
         8e:b6:f3:13:2a:de:84:8b:1e:fa:f8:4b:8f:aa:5a:9b:1f:87:
         09:91:1c:e9:a1:49:62:f7:4a:d1:f8:a8:53:a4:02:92:58:a2:
         99:58:dc:ed:ae:fa:0e:84:89:fe:f7:85:e9:5a:d9:0e:08:9d:
         8a:ad:ca:54:03:dc:f7:7f:9e:66:29:6a:7c:a5:9d:bf:08:d7:
         8d:b3:05:24:fe:e1:97:c6:7c:09:7e:4f:80:77:41:aa:1c:9c:
         31:20:e2:be:26:86:b1:20:a0:82:37:dd:bd:e9:99:3c:42:bb:
         38:e8:d4:eb:fd:1a:28:4b:4c:08:d1:09:85:69:3f:ee:7f:e6:
         60:63:67:eb:7b:98:1e:c2:2f:fc:2d:6c:b2:d4:1a:47:30:87:
         92:d4:54:20:36:28:e5:a8:d8:f4:01:87:79:cb:6f:de:02:7d:
         8d:96:21:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:36 2023 by rpki-client on console-ams.rpki-client.org