Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3231342e36382e302f32342d3234203d3e20313338313935.roa
File:                     3130332e3231342e36382e302f32342d3234203d3e20313338313935.roa (raw, json)
Hash identifier:          Mp+TBD1EWPo2sj7kHwJeXYN1mmJQIgep6a5mBCaAe/Q=
Subject key identifier:   37:F7:39:FF:8C:85:BF:46:83:18:13:C8:16:A4:C5:AD:C4:26:1C:72
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       5490161348ED342AE243047B929E9F43A402ADF5
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3231342e36382e302f32342d3234203d3e20313338313935.roa
Signing time:             Wed 21 Dec 2022 16:56:39 +0000
ROA not before:           Wed 21 Dec 2022 16:51:39 +0000
ROA not after:            Wed 20 Dec 2023 16:56:39 +0000
asID:                     138195
IP address blocks:        103.214.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:90:16:13:48:ed:34:2a:e2:43:04:7b:92:9e:9f:43:a4:02:ad:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:39 2022 GMT
            Not After : Dec 20 16:56:39 2023 GMT
        Subject: CN=37F739FF8C85BF46831813C816A4C5ADC4261C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:4c:c8:99:b4:aa:1d:61:93:2e:95:a4:53:
                    6f:24:55:3d:9f:d9:d5:cf:4e:b8:67:3f:5d:d1:8f:
                    a1:8d:5b:4d:34:c2:99:7c:cc:21:a8:78:18:19:38:
                    95:18:1e:92:c2:cc:e6:39:0a:af:e7:32:f9:db:61:
                    f6:7d:7f:6b:b7:a9:82:de:bd:89:25:55:43:1a:5d:
                    14:70:32:1d:1d:8a:d6:04:91:f8:01:c2:cd:30:d8:
                    48:6b:1d:89:c9:0d:ec:8b:2d:1e:31:14:d2:69:f3:
                    b4:c5:7a:50:b3:84:4f:2e:bd:b9:28:2d:a1:2c:24:
                    0a:61:e3:30:06:10:73:1d:21:08:05:6e:f7:ad:71:
                    50:4c:13:08:06:e4:04:a2:c5:8c:cc:15:77:da:00:
                    69:23:ea:ca:9b:71:18:69:dd:ab:1e:05:0d:0f:2c:
                    20:24:b8:27:43:81:73:a0:9a:dd:ac:05:6b:d7:ee:
                    73:49:e2:0f:65:f4:1e:86:cf:86:0a:b7:b0:eb:89:
                    3a:11:75:5a:87:2d:33:4a:be:7d:96:57:62:cf:1a:
                    e1:71:4f:0b:84:67:57:ec:43:83:fd:74:7f:21:4e:
                    dd:77:ae:ec:6e:94:07:ae:ec:da:53:d8:5c:82:eb:
                    64:4b:e8:9d:77:9e:92:fb:c3:7c:2c:d7:c9:0a:42:
                    70:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F7:39:FF:8C:85:BF:46:83:18:13:C8:16:A4:C5:AD:C4:26:1C:72
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3231342e36382e302f32342d3234203d3e20313338313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:0a:1e:a0:ed:d3:97:4d:c0:94:c3:67:00:af:bb:35:d2:5f:
         10:3f:7e:da:3b:77:ad:a2:23:c6:73:85:d3:b2:05:8a:d4:6e:
         e2:00:2f:c1:0c:a8:22:19:6e:4c:a2:e8:cc:44:0e:8f:39:5b:
         a1:5f:37:b0:30:85:d3:03:24:cb:ac:30:cf:df:de:74:62:5f:
         f3:91:e3:76:8a:de:13:dd:57:15:4a:37:96:68:aa:05:0c:40:
         10:d1:fc:99:3a:8b:0a:54:05:e3:4a:37:00:95:a4:5c:bf:b5:
         ab:1c:2d:c5:68:3b:e3:d6:00:a4:c8:ed:c8:6b:3c:ae:72:b7:
         c7:17:79:8a:b5:85:33:e8:21:ed:c4:6d:b0:ec:74:98:d9:f3:
         f5:63:d5:f2:3c:7d:f1:ab:4f:c2:cc:07:b1:70:d2:72:a0:73:
         7f:f4:05:e6:5a:f2:a6:27:ea:e1:70:33:9b:21:6b:f5:28:67:
         9e:1f:3e:c3:f6:8a:66:49:38:63:07:de:51:9b:9b:e6:7c:92:
         5d:fc:89:9e:4a:1a:6b:65:eb:35:74:ad:de:c3:35:f2:3a:87:
         ff:e6:43:81:48:1c:e7:f7:88:3d:07:e8:8c:32:49:2a:d9:ca:
         23:6c:00:68:5f:dd:b7:a0:20:d6:34:b7:3d:a4:ac:8e:33:02:
         02:63:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-fra.rpki-client.org