Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3231342e36392e302f32342d3234203d3e20313333343438.roa
File:                     3130332e3231342e36392e302f32342d3234203d3e20313333343438.roa (raw, json)
Hash identifier:          3sqYZpvxQhli6dA44Sr8CVeeSbWmYEcZc/ql2Ml7P8c=
Subject key identifier:   1C:62:89:2B:CC:1D:11:B9:B3:9E:E7:7F:5C:52:25:BA:26:26:A6:29
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       0DA4B7BB9DAA68DBCCF1E6B54020650796017042
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3231342e36392e302f32342d3234203d3e20313333343438.roa
Signing time:             Wed 21 Dec 2022 16:56:39 +0000
ROA not before:           Wed 21 Dec 2022 16:51:39 +0000
ROA not after:            Wed 20 Dec 2023 16:56:39 +0000
asID:                     133448
IP address blocks:        103.214.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a4:b7:bb:9d:aa:68:db:cc:f1:e6:b5:40:20:65:07:96:01:70:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:39 2022 GMT
            Not After : Dec 20 16:56:39 2023 GMT
        Subject: CN=1C62892BCC1D11B9B39EE77F5C5225BA2626A629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a9:6a:98:04:c6:d4:8f:03:2e:bb:fb:7e:d4:
                    96:ac:b4:ad:27:63:89:13:61:80:fc:75:d5:00:81:
                    fe:e6:4f:8d:93:1f:a9:e8:53:32:82:2d:39:6e:d1:
                    ed:d2:d9:c9:da:2b:ba:b8:1f:21:2a:bd:ee:86:5a:
                    48:c8:cf:ea:e4:9e:77:3e:bf:ba:32:7b:52:eb:8d:
                    f0:b4:4d:3f:91:2a:27:8e:54:bf:6c:60:13:77:d1:
                    20:5c:7c:7c:c1:c4:28:41:1d:1f:7b:a7:b4:2a:f7:
                    e4:13:f5:c0:24:9a:b3:63:19:0f:c9:88:28:9f:61:
                    4c:32:e1:b8:95:9a:48:86:16:ee:a7:49:c1:8f:5c:
                    fc:e1:ac:1a:09:7c:92:77:42:65:14:f6:f9:d4:41:
                    90:32:27:6c:c4:bd:2a:09:82:a3:d3:30:9f:93:9f:
                    f0:70:39:ee:2d:bc:45:76:d1:09:f6:74:9b:d8:62:
                    75:5b:e5:85:d3:60:4e:f4:d6:b0:77:b8:92:ad:b6:
                    10:ed:ae:e5:5f:16:d9:2f:20:47:7c:f3:72:33:1c:
                    37:92:93:d4:d9:e9:36:ce:51:e0:f3:73:bb:86:c0:
                    f3:2b:50:50:ef:64:68:32:19:a5:38:01:9a:e7:3e:
                    5e:c3:71:3d:bf:29:59:74:03:9b:bc:93:28:9b:bf:
                    1f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:62:89:2B:CC:1D:11:B9:B3:9E:E7:7F:5C:52:25:BA:26:26:A6:29
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3231342e36392e302f32342d3234203d3e20313333343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:19:8c:7e:fa:33:d8:ac:46:81:29:6e:f1:c7:74:62:28:8c:
         75:06:b3:4f:35:c0:6c:5d:b7:57:e7:a4:cc:d1:83:4f:36:ae:
         db:6e:be:84:b1:54:8b:06:75:e8:71:98:94:43:1e:6e:64:0d:
         ec:03:66:12:2f:72:76:5c:e2:94:23:b0:dc:62:24:ed:f1:f7:
         fd:d7:b6:c4:f0:6f:77:64:ff:76:63:cf:18:65:ea:62:c0:0e:
         48:19:9e:65:df:75:79:fb:e9:69:45:87:c0:ec:24:71:af:e7:
         17:c9:36:c4:40:f7:de:cc:93:78:5a:42:b8:54:0f:26:05:f2:
         eb:41:35:5d:01:3c:08:42:a6:1d:af:c0:b3:c1:55:1e:15:2c:
         0d:53:5f:f1:82:36:28:0b:74:94:fc:37:68:cb:c7:34:7b:73:
         90:51:54:d4:2d:2b:76:1d:89:53:83:11:08:d3:88:94:68:fc:
         1f:62:46:99:2f:b8:15:a0:c2:43:d3:74:27:a5:3c:df:01:af:
         54:57:39:28:a7:e5:90:b5:42:42:c9:37:6d:1a:57:df:24:4e:
         38:72:fc:e1:c9:7d:ab:16:f0:b6:d3:61:9f:ad:26:b7:bf:5b:
         40:ba:f1:17:8f:4f:13:3d:a8:30:61:12:59:ec:dc:4c:db:16:
         83:03:99:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:53 2024 by rpki-client on console-ams.rpki-client.org