Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/2/326130373a353463303a633066663a3a2f34382d3438203d3e203534363831.roa
File:                     326130373a353463303a633066663a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier:          SMfiw+Fui0XTlgJpOw9mPDdUQkmnO8Fyg3P3z09RJ0U=
Subject key identifier:   ED:39:73:D1:6C:BA:75:24:05:CF:8B:DC:AC:97:9C:66:D4:C1:FC:28
Certificate issuer:       /CN=14082299D486857A824F7308B67507C731520D07
Certificate serial:       608A9E9AE8D13A8B569032406C1A0457B0D3AD40
Authority key identifier: 14:08:22:99:D4:86:85:7A:82:4F:73:08:B6:75:07:C7:31:52:0D:07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/14082299D486857A824F7308B67507C731520D07.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/326130373a353463303a633066663a3a2f34382d3438203d3e203534363831.roa
Signing time:             Sat 20 Jan 2024 01:51:36 +0000
ROA not before:           Sat 20 Jan 2024 01:46:36 +0000
ROA not after:            Sat 18 Jan 2025 01:51:36 +0000
asID:                     54681
IP address blocks:        2a07:54c0:c0ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8a:9e:9a:e8:d1:3a:8b:56:90:32:40:6c:1a:04:57:b0:d3:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14082299D486857A824F7308B67507C731520D07
        Validity
            Not Before: Jan 20 01:46:36 2024 GMT
            Not After : Jan 18 01:51:36 2025 GMT
        Subject: CN=ED3973D16CBA752405CF8BDCAC979C66D4C1FC28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:2e:78:d0:bf:d6:4c:2e:9f:0f:4d:48:cb:
                    ba:99:16:da:a5:47:89:61:40:ad:c5:d7:a1:35:04:
                    09:00:88:7a:55:d8:13:60:e4:30:58:d6:f8:f0:66:
                    cb:f0:df:f9:ae:93:d9:0c:8b:29:2a:45:0f:fe:1f:
                    5c:ec:32:26:df:8f:eb:27:4c:4b:03:85:95:6d:63:
                    a9:4d:51:91:9d:b4:76:19:43:d0:0c:3e:b1:4a:eb:
                    78:13:6f:e7:d0:1e:54:cc:5e:05:f5:83:3f:7d:c0:
                    97:c2:63:49:cc:9c:cc:c3:15:06:3a:98:cb:c5:a7:
                    fd:f4:8a:bc:48:13:ac:38:86:25:04:46:e5:8f:c4:
                    90:ce:c3:d9:f4:51:3a:7b:22:da:10:cf:1b:69:26:
                    4b:6c:b2:11:28:7a:86:c2:4b:10:69:4b:09:56:74:
                    e2:60:f1:dd:af:40:e3:f3:d6:59:a8:3c:72:c1:fd:
                    b5:62:9a:a2:d1:fd:d2:b4:d3:89:3c:32:be:43:7d:
                    54:0d:f0:f9:09:c9:4b:b6:e1:de:c9:f6:04:92:dd:
                    60:5b:ab:9e:7c:b6:5a:e5:56:0e:aa:d7:8b:bc:15:
                    3e:9b:41:aa:fb:d6:c8:26:1c:f4:2b:0f:ff:0e:ad:
                    0f:55:4a:a1:92:6d:2d:f8:5b:a5:44:fb:7c:e0:4c:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:39:73:D1:6C:BA:75:24:05:CF:8B:DC:AC:97:9C:66:D4:C1:FC:28
            X509v3 Authority Key Identifier:
                keyid:14:08:22:99:D4:86:85:7A:82:4F:73:08:B6:75:07:C7:31:52:0D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/14082299D486857A824F7308B67507C731520D07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/14082299D486857A824F7308B67507C731520D07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/326130373a353463303a633066663a3a2f34382d3438203d3e203534363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:c0ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:2a:26:1f:97:eb:d0:46:f7:6a:90:5b:06:93:ad:f4:52:9d:
         38:52:d8:71:9c:aa:97:5a:75:cc:a6:dc:e9:24:0e:d7:b4:5c:
         89:50:4d:fe:b7:6f:c9:6a:b0:05:2d:02:e8:ec:65:22:3b:6e:
         ff:1f:e3:db:b8:21:ae:a6:b3:e2:5d:00:66:50:f2:80:9d:5f:
         80:4d:c5:99:2d:ee:3b:a0:09:cd:9d:5b:dd:91:df:a8:27:45:
         83:68:1b:af:42:3f:19:09:ae:a2:3d:0d:8f:56:79:f1:c5:48:
         93:dd:6b:20:92:dd:82:60:41:77:d1:5a:b6:11:77:5c:3f:83:
         d4:3d:b8:01:0a:9f:c0:50:fb:45:41:0f:b8:99:25:50:44:7d:
         02:48:95:a9:95:97:63:0e:e9:f9:0d:13:8d:5f:8a:21:e3:35:
         62:91:d6:14:92:4c:f1:9c:e7:00:29:56:91:78:3d:86:0b:ff:
         4f:fd:c1:00:0c:ef:44:dc:ef:b1:ce:3b:a3:bf:a1:bf:55:ab:
         59:78:86:21:14:b8:7f:9e:db:58:04:64:86:aa:54:8b:b8:d1:
         21:01:0d:52:42:d3:24:72:73:c6:53:ab:cd:cb:2a:16:6b:e8:
         f6:f6:6f:23:ee:83:65:bc:cb:cf:82:4c:42:15:01:cf:d8:1a:
         c8:91:7b:12
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYIqemujROotWkDJAbBoEV7DTrUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQwODIyOTlENDg2ODU3QTgyNEY3MzA4QjY3NTA3Qzcz
MTUyMEQwNzAeFw0yNDAxMjAwMTQ2MzZaFw0yNTAxMTgwMTUxMzZaMDMxMTAvBgNV
BAMTKEVEMzk3M0QxNkNCQTc1MjQwNUNGOEJEQ0FDOTc5QzY2RDRDMUZDMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWC540L/WTC6fD01Iy7qZFtql
R4lhQK3F16E1BAkAiHpV2BNg5DBY1vjwZsvw3/muk9kMiykqRQ/+H1zsMibfj+sn
TEsDhZVtY6lNUZGdtHYZQ9AMPrFK63gTb+fQHlTMXgX1gz99wJfCY0nMnMzDFQY6
mMvFp/30irxIE6w4hiUERuWPxJDOw9n0UTp7ItoQzxtpJktsshEoeobCSxBpSwlW
dOJg8d2vQOPz1lmoPHLB/bVimqLR/dK004k8Mr5DfVQN8PkJyUu24d7J9gSS3WBb
q558tlrlVg6q14u8FT6bQar71sgmHPQrD/8OrQ9VSqGSbS34W6VE+3zgTCHJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7Tlz0Wy6dSQFz4vcrJecZtTB/CgwHwYDVR0j
BBgwFoAUFAgimdSGhXqCT3MItnUHxzFSDQcwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hB
WkVMX1VJRF8xODg2MC8yLzE0MDgyMjk5RDQ4Njg1N0E4MjRGNzMwOEI2NzUwN0M3
MzE1MjBEMDcuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRi
YTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNmLzAvMTQwODIyOTlENDg2ODU3
QTgyNEY3MzA4QjY3NTA3QzczMTUyMEQwNy5jZXIwgZQGCCsGAQUFBwELBIGHMIGE
MIGBBggrBgEFBQcwC4Z1cnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29tL3JlcG8v
SEFaRUxfVUlEXzE4ODYwLzIvMzI2MTMwMzczYTM1MzQ2MzMwM2E2MzMwNjY2NjNh
M2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzQzNjM4MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TA
wP8wDQYJKoZIhvcNAQELBQADggEBAKcqJh+X69BG92qQWwaTrfRSnThS2HGcqpda
dcym3OkkDte0XIlQTf63b8lqsAUtAujsZSI7bv8f49u4Ia6ms+JdAGZQ8oCdX4BN
xZkt7jugCc2dW92R36gnRYNoG69CPxkJrqI9DY9WefHFSJPdayCS3YJgQXfRWrYR
d1w/g9Q9uAEKn8BQ+0VBD7iZJVBEfQJIlamVl2MO6fkNE41fiiHjNWKR1hSSTPGc
5wApVpF4PYYL/0/9wQAM70Tc77HOO6O/ob9Vq1l4hiEUuH+e21gEZIaqVIu40SEB
DVJC0yRyc8ZTq83LKhZr6Pb2byPug2W8y8+CTEIVAc/YGsiRexI=
-----END CERTIFICATE-----