Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3231342e37302e302f32342d3234203d3e20313338393935.roa
File:                     3130332e3231342e37302e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          sOblBPPsZEb3dX6pZEQD15ebJhwpwET/ruTVx16SbBI=
Subject key identifier:   85:28:12:60:D8:A5:51:DB:C1:32:BD:1D:CA:14:AA:E8:8F:AA:03:8E
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       2EFA9C8A5F78125BB99AAD8398D0840407364DFB
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3231342e37302e302f32342d3234203d3e20313338393935.roa
Signing time:             Wed 21 Dec 2022 16:56:39 +0000
ROA not before:           Wed 21 Dec 2022 16:51:39 +0000
ROA not after:            Wed 20 Dec 2023 16:56:39 +0000
asID:                     138995
IP address blocks:        103.214.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fa:9c:8a:5f:78:12:5b:b9:9a:ad:83:98:d0:84:04:07:36:4d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:39 2022 GMT
            Not After : Dec 20 16:56:39 2023 GMT
        Subject: CN=85281260D8A551DBC132BD1DCA14AAE88FAA038E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:2d:3f:ae:2c:6e:12:fb:78:f4:e2:fb:cc:
                    0f:11:66:66:b5:5b:fc:10:ff:b5:cd:8d:f0:25:5d:
                    34:65:49:48:07:d0:be:96:f1:2b:08:39:b8:b7:76:
                    fc:52:a9:c7:22:0d:3c:6d:99:9f:ef:51:c5:f0:82:
                    42:0b:a6:a7:39:9f:12:15:c0:9d:79:89:10:d8:d3:
                    4f:ae:2c:36:ee:2d:83:3c:00:35:eb:d7:54:5e:7a:
                    45:dc:41:35:b7:ac:bd:5d:a0:8c:4d:3f:d9:fa:26:
                    3b:9a:17:5d:33:8b:0c:8c:8f:7f:ad:ae:fc:9b:36:
                    1c:92:35:61:34:a4:eb:b5:e3:e1:d6:08:1d:19:b1:
                    f7:19:51:2b:4d:f4:ef:87:49:04:59:6a:e5:6e:0e:
                    19:ee:ed:0d:ac:e9:93:4b:f8:68:fe:c5:67:29:07:
                    4a:85:7a:c4:76:71:bf:ae:0a:a7:9d:97:99:eb:a0:
                    bb:a7:92:e7:b5:3c:06:a6:30:f2:74:b6:63:fc:b6:
                    5b:b8:4c:e0:d5:32:be:34:ee:88:fb:cc:ee:45:b5:
                    03:b9:bb:92:c1:bf:c9:01:c4:9e:a8:ff:ad:3b:69:
                    28:4c:f6:98:5f:3b:77:55:2c:4e:55:ff:c5:f9:50:
                    3d:77:f7:f2:85:ef:66:0d:ab:42:26:4e:b5:7c:6c:
                    27:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:28:12:60:D8:A5:51:DB:C1:32:BD:1D:CA:14:AA:E8:8F:AA:03:8E
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3231342e37302e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:46:a0:58:f0:e8:9e:e5:67:60:c3:91:69:7b:20:f3:d5:
         74:a8:5c:82:d8:e1:a5:25:17:ca:3c:82:ae:9a:df:c7:8e:29:
         18:e7:06:d4:a3:12:0f:cc:7d:b5:8c:64:44:81:f8:45:c8:08:
         76:fc:bf:ff:f7:f9:24:c7:e3:dd:b3:6d:38:86:d3:23:4c:76:
         08:99:ba:42:5a:77:bd:6b:e2:34:c8:51:06:95:e5:d6:e2:28:
         2a:ef:cf:04:a1:0d:d3:69:ec:d8:06:2f:fd:97:e4:d9:52:9b:
         95:ec:d8:a9:d7:62:7f:d6:05:5d:1d:64:03:73:c5:9c:31:e2:
         5c:39:5a:47:7e:a4:f1:d6:bc:87:e3:43:5b:4a:aa:37:37:ae:
         3c:ee:57:69:ae:fa:39:16:18:40:c3:8a:1e:04:f5:6a:da:a2:
         77:30:38:cf:eb:3b:46:a1:d2:db:4e:7b:0f:0b:36:26:d5:e9:
         fe:6b:22:83:af:13:64:e9:ff:6e:0d:01:41:ad:4f:09:30:50:
         69:2a:03:5e:64:da:8d:eb:ef:cb:85:d9:d3:e7:bc:10:82:89:
         8f:fa:b7:b8:96:49:07:02:20:ee:f2:2d:c3:81:8f:fb:14:df:
         72:a0:7a:8f:1c:51:b0:99:f2:16:f6:f2:57:bb:de:de:ef:ed:
         25:f6:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-fra.rpki-client.org