Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3233302e3134322e302f32342d3234203d3e20323036383034.roa
File:                     3130332e3233302e3134322e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier:          Lcr43QGSshNlczcxl0WP4uTJA4hPokuUXT5AHq2M4Io=
Subject key identifier:   49:C6:D9:26:20:9C:C5:BE:64:09:01:83:D6:34:63:65:83:C5:F3:98
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       582FE10136D622E63CF850492C93BA29B8CAFD1D
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3233302e3134322e302f32342d3234203d3e20323036383034.roa
Signing time:             Wed 21 Dec 2022 16:56:38 +0000
ROA not before:           Wed 21 Dec 2022 16:51:38 +0000
ROA not after:            Wed 20 Dec 2023 16:56:38 +0000
asID:                     206804
IP address blocks:        103.230.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2f:e1:01:36:d6:22:e6:3c:f8:50:49:2c:93:ba:29:b8:ca:fd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:38 2022 GMT
            Not After : Dec 20 16:56:38 2023 GMT
        Subject: CN=49C6D926209CC5BE64090183D634636583C5F398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:3b:01:30:ab:b6:e3:59:4b:24:41:38:36:
                    06:40:a6:41:e2:5e:ff:4b:3b:01:64:b5:ba:8f:f2:
                    fd:c8:48:df:c0:b9:3e:93:f3:82:cd:a7:6f:dd:68:
                    66:ae:a0:0d:a9:4e:98:2c:82:a6:75:b1:b5:04:e5:
                    01:e2:4b:6b:7d:47:5a:4c:85:7f:25:c9:36:d3:1b:
                    52:6d:08:21:7e:ac:bc:bb:c8:a8:0e:9c:35:85:f8:
                    2c:2e:ca:4a:0e:8d:ee:29:37:08:11:bc:37:4b:59:
                    4a:c1:b9:9a:b4:19:8f:82:28:a2:14:81:a7:02:cb:
                    99:b5:21:77:1b:ce:0e:4e:c4:81:dd:de:93:52:2b:
                    32:11:00:01:63:d7:a0:66:e1:fb:b6:28:4c:71:ac:
                    60:d5:29:91:b8:e2:7a:81:ee:b3:6b:95:8d:eb:fb:
                    39:9c:df:48:0b:16:ad:48:b4:00:cf:f7:fa:40:1f:
                    0e:90:b6:6e:a1:eb:dd:f2:98:19:27:8f:a1:af:47:
                    6c:3d:6c:39:38:a8:90:5f:ee:c4:0a:32:4a:dd:97:
                    ea:73:18:5e:bf:fb:a5:2b:a0:55:12:6c:44:db:a6:
                    9e:5f:77:95:a4:bf:f8:6c:8f:26:04:42:64:1b:b0:
                    8f:77:67:ee:8c:fc:67:ea:26:74:7c:02:c6:58:eb:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C6:D9:26:20:9C:C5:BE:64:09:01:83:D6:34:63:65:83:C5:F3:98
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e3233302e3134322e302f32342d3234203d3e20323036383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:1f:c2:99:d6:08:ed:1d:f9:2c:5c:79:c7:4e:26:da:b7:6a:
         9e:87:60:fd:a7:49:9b:5e:b8:9d:4a:35:dc:9d:23:c0:4a:9a:
         6e:bd:79:03:d7:ab:bd:43:3d:53:f0:59:f6:a4:ff:e4:c8:e8:
         71:5c:10:e9:3e:79:a7:72:2e:cc:55:09:ab:aa:1d:13:7d:2d:
         cb:92:a2:b2:07:bd:11:28:02:ab:cc:c2:f5:a1:fe:fb:63:20:
         99:bd:ba:3a:af:b5:2f:48:e7:6d:4d:a0:ca:f4:ae:48:71:68:
         67:58:a5:ea:4f:88:d0:47:0b:f8:a5:b7:e3:47:c8:82:14:8e:
         6e:9c:5e:6a:c3:d8:62:cf:55:e0:cf:5b:d9:55:95:66:60:2d:
         06:d6:cc:cd:f3:50:77:9a:c0:70:1f:52:ac:8d:28:46:70:3d:
         37:73:1f:1e:9b:15:71:01:6f:6e:93:84:5f:a2:28:2f:59:c4:
         e0:80:68:e1:f5:70:ac:e0:9b:d3:7f:1c:de:69:b6:e8:9f:42:
         2f:37:e9:c6:95:89:bd:b0:35:b3:87:f7:8f:3d:e4:18:f7:b8:
         f5:9b:fc:5c:67:47:57:f5:96:c2:fb:f6:b1:6e:eb:75:c2:fd:
         57:f9:6c:08:2f:c3:70:d3:6e:2e:39:dd:49:db:69:9f:53:cb:
         7d:fa:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-fra.rpki-client.org