Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3233302e3134302e302f32322d3234203d3e203631313338.roa
File:                     3130332e3233302e3134302e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          lOby0ugwn2YcIusoAAT2sAV490IkM5p32vkxdLP1Ru0=
Subject key identifier:   98:CF:81:7B:C2:30:34:7A:9C:72:30:DE:99:5F:88:2A:D3:F0:91:12
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       24E213322A4B11BAD47EAE86F8062279CF54C47B
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3233302e3134302e302f32322d3234203d3e203631313338.roa
Signing time:             Wed 21 Dec 2022 16:56:39 +0000
ROA not before:           Wed 21 Dec 2022 16:51:39 +0000
ROA not after:            Wed 20 Dec 2023 16:56:39 +0000
asID:                     61138
IP address blocks:        103.230.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e2:13:32:2a:4b:11:ba:d4:7e:ae:86:f8:06:22:79:cf:54:c4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:39 2022 GMT
            Not After : Dec 20 16:56:39 2023 GMT
        Subject: CN=98CF817BC230347A9C7230DE995F882AD3F09112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:fb:38:9a:90:e2:d6:54:5e:ad:fb:90:1d:
                    56:f5:18:df:86:60:a5:c7:e5:4f:89:8d:f0:13:34:
                    2e:94:fe:e2:c3:57:d8:90:2e:76:3d:ed:51:67:5b:
                    d0:d7:b3:b0:03:9c:0c:16:a7:82:f2:be:db:1c:79:
                    ac:32:c5:31:f0:8b:c7:ee:55:05:d7:1c:29:5c:cc:
                    f2:0a:ca:19:16:5a:38:2e:ca:74:07:58:15:a5:04:
                    e0:e0:7c:34:f0:9a:1a:0a:e1:f1:d1:31:ae:10:5b:
                    95:39:0d:f9:bc:6a:17:15:4f:c8:39:9e:2b:7e:fd:
                    eb:18:34:e6:b0:48:11:e5:f1:48:32:c0:74:81:11:
                    a6:0b:3a:ca:1d:8c:30:a1:9d:9a:ae:f4:33:fa:8e:
                    45:e0:42:d2:e6:dc:42:74:9d:aa:aa:88:6a:b6:9a:
                    d8:33:6a:d4:b9:98:f6:de:cf:14:b3:df:78:7e:08:
                    e7:2a:d0:cf:3b:f2:6a:a0:75:24:94:ec:f3:98:85:
                    13:bd:a8:bd:bc:ad:ff:f4:d5:da:eb:c5:73:c6:17:
                    2b:e4:45:18:e7:20:d6:7b:09:0f:13:f2:2a:84:e6:
                    7a:dc:e8:9d:f0:1c:87:c4:33:1c:b9:09:3f:0f:54:
                    35:ed:8f:20:4c:1c:0f:ad:c0:d6:0d:cd:21:cb:fe:
                    6b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CF:81:7B:C2:30:34:7A:9C:72:30:DE:99:5F:88:2A:D3:F0:91:12
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3233302e3134302e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:4a:d4:46:3a:4b:b0:29:18:1f:b6:5e:c8:79:58:02:da:51:
         7d:4f:7e:3a:3a:4c:f2:7d:7f:7d:f3:17:4c:93:de:4c:f7:2b:
         f9:85:4a:45:f5:2a:31:0f:b0:4a:76:c5:b3:37:fb:5d:a9:22:
         b3:a1:52:bd:b6:d6:2d:7c:6f:0a:d8:41:fc:72:06:0c:87:f0:
         d9:ec:c7:55:30:1e:dd:77:40:91:22:89:52:62:28:34:5e:cf:
         20:17:2b:f0:bb:ce:b5:47:89:ba:d7:29:20:a7:90:e6:da:fd:
         c7:00:fb:e6:a9:fa:7e:05:e7:1e:ca:bb:a4:b7:9b:e8:b7:ce:
         e3:6d:a0:0d:f4:37:94:f1:1b:8f:9a:30:d2:25:2d:0c:15:9a:
         20:53:04:52:1c:f1:29:43:e5:14:38:ba:31:ec:9e:d4:ed:5c:
         1b:12:c0:21:5e:db:ce:39:2b:40:9f:86:31:d5:63:5b:15:49:
         66:67:5b:4d:48:76:3c:e5:24:91:0f:ff:ab:49:7c:82:3d:1c:
         6a:73:0e:5e:82:82:d1:a9:80:db:a8:04:be:c0:e4:52:c7:08:
         1e:6c:88:77:75:75:00:0b:e1:6c:08:7d:6b:0f:35:0f:90:ac:
         35:3f:a3:e9:fa:ef:dd:1a:7c:7f:0a:f8:a5:d1:35:f9:e5:08:
         1e:db:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-fra.rpki-client.org