Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa
File:                     3130332e36382e3130382e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          ax1wL7x+oP1vpXdWWY6pGl82vtVhlDBQ/HMZLwg1DJI=
Subject key identifier:   AD:0C:E4:50:F8:72:3C:9B:5A:D4:58:2B:27:49:4A:C7:BD:B2:C8:82
Certificate issuer:       /CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
Certificate serial:       1138C999AB49033D59C07CAD5C600F8F3365BF9D
Authority key identifier: 17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa
Signing time:             Wed 21 Dec 2022 16:56:38 +0000
ROA not before:           Wed 21 Dec 2022 16:51:38 +0000
ROA not after:            Wed 20 Dec 2023 16:56:38 +0000
asID:                     61138
IP address blocks:        103.68.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:38:c9:99:ab:49:03:3d:59:c0:7c:ad:5c:60:0f:8f:33:65:bf:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=17FFBAC459A4CA2909912F464A08B1F81DA3D9F6
        Validity
            Not Before: Dec 21 16:51:38 2022 GMT
            Not After : Dec 20 16:56:38 2023 GMT
        Subject: CN=AD0CE450F8723C9B5AD4582B27494AC7BDB2C882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:f3:1e:59:02:8a:18:7d:69:09:2d:ba:5f:
                    4c:d4:8f:20:25:50:a8:c6:32:3b:a6:b4:b8:54:dc:
                    47:bf:29:02:c8:e0:d0:bc:10:a2:9d:7e:03:1f:b9:
                    d4:0c:dc:d5:24:0e:56:cd:9d:ae:0e:e2:c1:83:34:
                    80:8c:ad:27:4e:08:de:6c:88:36:30:67:d0:d5:4a:
                    8f:9c:71:a1:17:37:6e:37:fe:98:47:b7:f7:af:28:
                    fa:60:a5:2b:a7:97:78:9f:6d:91:01:99:29:1c:8b:
                    27:97:c6:09:fa:8d:41:49:21:4d:51:44:ff:83:f2:
                    02:d9:03:26:ae:8d:f5:3f:0f:b2:09:2b:fe:97:79:
                    d1:12:25:0b:bf:44:25:3e:b7:dc:9c:24:66:d9:82:
                    59:43:f4:d3:52:f0:b4:a6:ec:85:8c:35:16:e5:9b:
                    ac:f6:71:2d:53:67:26:7f:32:14:5a:6e:7a:4c:93:
                    3f:41:76:8d:10:0a:71:5d:92:8d:b5:04:f8:e2:a4:
                    cc:09:52:7e:5f:9a:f2:bc:e5:ca:b1:a6:18:97:98:
                    58:2f:96:10:f9:2a:6e:c7:65:8f:99:1f:a4:47:64:
                    fc:8c:74:73:b6:70:58:c1:38:06:52:4e:58:b6:c3:
                    90:46:db:3d:22:49:d4:71:bc:ae:ef:f1:41:4e:3e:
                    84:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0C:E4:50:F8:72:3C:9B:5A:D4:58:2B:27:49:4A:C7:BD:B2:C8:82
            X509v3 Authority Key Identifier:
                keyid:17:FF:BA:C4:59:A4:CA:29:09:91:2F:46:4A:08:B1:F8:1D:A3:D9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/17FFBAC459A4CA2909912F464A08B1F81DA3D9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_-6xFmkyikJkS9GSgix-B2j2fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:f2:34:e4:50:f5:b2:5b:d9:f3:c6:d3:eb:c9:a8:47:23:4b:
         bc:97:a6:21:77:37:a8:06:6b:e2:75:d1:d2:7b:b5:fb:02:71:
         c8:37:ca:a0:29:aa:24:c7:34:12:a9:13:2d:30:d6:79:33:99:
         6b:e4:ab:f9:f2:e1:2d:08:55:2a:c4:53:86:37:2a:2d:31:92:
         32:95:dc:4d:c2:b3:13:fc:a3:78:47:a4:2f:1d:c1:c1:46:00:
         6d:ab:83:e4:cc:45:e7:56:c2:a1:87:26:ab:30:66:bf:6a:11:
         57:3b:7e:a2:92:9a:f7:3b:c5:eb:83:19:89:67:14:11:55:29:
         e0:d6:15:ea:e5:a2:61:1d:3d:2c:ae:f0:37:c2:4c:42:0d:cd:
         07:8a:4c:51:18:80:26:32:8c:06:17:d8:a6:2c:10:38:8a:11:
         ed:9c:16:2a:f7:c3:7b:7d:6e:54:40:26:b7:df:86:4f:aa:6d:
         2a:c4:91:72:1f:d4:ce:dd:2f:b7:47:b8:06:2a:94:53:f8:62:
         dc:02:93:75:55:b1:96:a6:8e:8b:72:90:4e:87:92:94:fd:86:
         43:ec:d4:b9:1f:77:b7:4f:71:50:32:ad:51:c4:67:14:91:bd:
         b9:85:72:ff:31:bd:d6:d2:1d:43:ce:fe:b5:1f:df:a0:ab:09:
         08:3c:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:26 2024 by rpki-client on console-fra.rpki-client.org