Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3231342e37312e302f32342d3234203d3e203230333236.roa
File:                     3130332e3231342e37312e302f32342d3234203d3e203230333236.roa (raw, json)
Hash identifier:          cfhGs2x+iJNvoJBPT8hf9cXeh3HKfWeReTXvs3PDgbc=
Subject key identifier:   A3:BA:56:4B:FC:55:D4:E9:BD:10:91:D5:CB:CC:07:17:11:08:84:72
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       2D67D8CD59BB75F833C4DDAF777389462489282A
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3231342e37312e302f32342d3234203d3e203230333236.roa
Signing time:             Wed 21 Dec 2022 16:56:38 +0000
ROA not before:           Wed 21 Dec 2022 16:51:38 +0000
ROA not after:            Wed 20 Dec 2023 16:56:38 +0000
asID:                     20326
IP address blocks:        103.214.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:67:d8:cd:59:bb:75:f8:33:c4:dd:af:77:73:89:46:24:89:28:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:38 2022 GMT
            Not After : Dec 20 16:56:38 2023 GMT
        Subject: CN=A3BA564BFC55D4E9BD1091D5CBCC071711088472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:58:05:5e:38:99:37:4e:d1:f7:33:0d:78:
                    fd:7b:b7:72:a4:91:b7:b1:2b:f2:bb:fd:37:bf:05:
                    8f:0b:28:c7:af:b3:64:e8:e3:f9:4f:8d:14:3d:d9:
                    12:ed:77:b8:59:38:42:77:79:cc:6b:03:9e:83:ed:
                    b7:c7:c5:ff:40:30:85:22:61:21:81:db:81:1e:6f:
                    09:49:90:dd:af:72:b8:5f:f5:5a:36:60:e4:1d:c6:
                    2e:93:cc:08:9a:b4:48:59:d7:7f:99:7a:82:f3:a0:
                    4c:d6:4e:36:e4:c8:95:33:e2:f5:4b:49:31:b0:ac:
                    13:60:07:2d:d1:60:05:2a:c3:54:23:c7:b3:f9:4b:
                    7c:67:71:8c:8b:30:91:ea:fe:5b:27:58:4e:71:a1:
                    d5:2b:5e:dd:de:20:dc:6d:a8:96:f0:55:a0:ba:78:
                    74:41:de:24:8f:09:ef:ad:bd:c9:b0:27:a5:11:ed:
                    07:af:d4:d3:8f:b4:89:30:d5:59:45:7d:c5:be:6f:
                    f2:55:ee:17:ba:44:af:b2:a6:a7:6e:49:91:e0:0f:
                    9c:66:8f:fa:2a:4d:7f:a5:b0:b0:07:d3:77:2c:bb:
                    06:d9:3b:75:2f:54:74:04:06:e7:a8:5d:b2:85:8a:
                    71:7b:ba:2f:a9:85:04:cf:45:a3:57:c4:fe:b1:38:
                    54:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BA:56:4B:FC:55:D4:E9:BD:10:91:D5:CB:CC:07:17:11:08:84:72
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3231342e37312e302f32342d3234203d3e203230333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:d1:03:3d:9f:96:d6:7c:43:79:7a:55:21:3e:67:af:3e:74:
         d3:67:b2:1c:26:fc:36:0b:f5:2e:fd:54:19:fb:7b:42:f9:b0:
         6e:b2:5d:3e:32:3c:2a:c4:a2:9c:2d:a6:6b:11:ba:c0:35:15:
         f7:4d:3e:3d:23:dd:48:3d:f3:0b:85:12:43:5b:f3:ce:82:cb:
         58:73:ac:6a:49:60:30:f1:f5:5c:5b:fc:3b:0a:91:b9:b1:48:
         ee:7e:2a:45:61:f6:e4:25:4c:07:e3:b4:e9:c9:3c:25:22:ec:
         50:b1:7f:bd:d9:ec:1e:d0:f8:0f:46:9f:06:20:18:1e:7d:18:
         74:de:b5:38:6d:66:3f:44:24:3a:1a:1b:eb:7f:7b:64:f3:39:
         9d:09:1e:e1:77:6c:0c:01:75:71:34:d3:51:18:d1:5d:8b:4e:
         40:17:6c:7c:51:a8:80:65:68:60:af:04:5e:ab:aa:77:05:8e:
         74:41:22:df:a1:e9:bf:a4:4c:8c:a9:8a:ff:bf:44:f8:e5:26:
         0b:6d:8b:b0:a3:9f:5f:7e:80:4c:61:f1:d1:c0:42:cb:32:d2:
         09:94:a9:6c:5c:71:4a:4e:2d:3f:76:bb:61:e7:9f:22:ff:8f:
         3b:ca:da:d7:c1:4d:01:3d:e9:c4:2b:8e:db:25:cb:97:1d:fe:
         c2:84:88:e9
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIULWfYzVm7dfgzxN2vd3OJRiSJKCowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEygxN0ZGQkFDNDU5
QTRDQTI5MDk5MTJGNDY0QTA4QjFGODFEQTNEOUY2MB4XDTIyMTIyMTE2NTEzOFoX
DTIzMTIyMDE2NTYzOFowMzExMC8GA1UEAxMoQTNCQTU2NEJGQzU1RDRFOUJEMTA5
MUQ1Q0JDQzA3MTcxMTA4ODQ3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALsXWAVeOJk3TtH3Mw14/Xu3cqSRt7Er8rv9N78Fjwsox6+zZOjj+U+NFD3Z
Eu13uFk4Qnd5zGsDnoPtt8fF/0AwhSJhIYHbgR5vCUmQ3a9yuF/1WjZg5B3GLpPM
CJq0SFnXf5l6gvOgTNZONuTIlTPi9UtJMbCsE2AHLdFgBSrDVCPHs/lLfGdxjIsw
ker+WydYTnGh1Ste3d4g3G2olvBVoLp4dEHeJI8J7629ybAnpRHtB6/U04+0iTDV
WUV9xb5v8lXuF7pEr7Kmp25JkeAPnGaP+ipNf6WwsAfTdyy7Btk7dS9UdAQG56hd
soWKcXu6L6mFBM9Fo1fE/rE4VLECAwEAAaOCAgUwggIBMB0GA1UdDgQWBBSjulZL
/FXU6b0QkdXLzAcXEQiEcjAfBgNVHSMEGDAWgBQX/7rEWaTKKQmRL0ZKCLH4HaPZ
9jAOBgNVHQ8BAf8EBAMCB4AwbAYDVR0fBGUwYzBhoF+gXYZbcnN5bmM6Ly9ycGtp
LnphcHBpZWhvc3QuY29tL3JlcG8vWkFQUElFLVJQS0kvMy8xN0ZGQkFDNDU5QTRD
QTI5MDk5MTJGNDY0QTA4QjFGODFEQTNEOUY2LmNybDB+BggrBgEFBQcBAQRyMHAw
bgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9C
NTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GXy02eEZta3lpa0prUzlH
U2dpeC1CMmoyZlkuY2VyMIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJz
eW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pBUFBJRS1SUEtJLzMvMzEz
MDMzMmUzMjMxMzQyZTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzMz
MjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ9ZHMA0GCSqGSIb3DQEBCwUAA4IBAQB10QM9n5bWfEN5
elUhPmevPnTTZ7IcJvw2C/Uu/VQZ+3tC+bBusl0+MjwqxKKcLaZrEbrANRX3TT49
I91IPfMLhRJDW/POgstYc6xqSWAw8fVcW/w7CpG5sUjufipFYfbkJUwH47TpyTwl
IuxQsX+92ewe0PgPRp8GIBgefRh03rU4bWY/RCQ6Ghvrf3tk8zmdCR7hd2wMAXVx
NNNRGNFdi05AF2x8UaiAZWhgrwReq6p3BY50QSLfoem/pEyMqYr/v0T45SYLbYuw
o59ffoBMYfHRwELLMtIJlKlsXHFKTi0/drth558i/487ytrXwU0BPenEK47bJcuX
Hf7ChIjp
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:26 2024 by rpki-client on console-fra.rpki-client.org