Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/326130353a646663373a353630303a3a2f33392d3438203d3e20323130353337.roa
File:                     326130353a646663373a353630303a3a2f33392d3438203d3e20323130353337.roa (raw, json)
Hash identifier:          o1jdnFiU6gFz/mbtYWFBZPwHVAIf4OqPMq67F+BBQ7U=
Subject key identifier:   72:6D:66:20:C4:92:7B:AB:B8:F1:12:2D:B8:C5:9E:55:EC:67:64:BC
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       5AB9F706497B0E5435D0F043E89B4E559E080066
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/326130353a646663373a353630303a3a2f33392d3438203d3e20323130353337.roa
Signing time:             Tue 20 Dec 2022 14:59:11 +0000
ROA not before:           Tue 20 Dec 2022 14:54:11 +0000
ROA not after:            Tue 19 Dec 2023 14:59:11 +0000
asID:                     210537
IP address blocks:        2a05:dfc7:5600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b9:f7:06:49:7b:0e:54:35:d0:f0:43:e8:9b:4e:55:9e:08:00:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Dec 20 14:54:11 2022 GMT
            Not After : Dec 19 14:59:11 2023 GMT
        Subject: CN=726D6620C4927BABB8F1122DB8C59E55EC6764BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ce:ad:17:56:0a:58:c0:29:75:c9:f8:81:b8:
                    e0:63:bb:f9:cf:57:3b:68:3a:c7:77:db:e9:fa:f6:
                    e2:d2:66:2d:dd:28:87:11:72:fd:b4:2c:78:9f:a4:
                    df:ba:f3:e7:83:d6:78:0a:1d:e2:1c:af:d8:c1:a7:
                    23:fc:99:83:8b:0d:69:52:b7:1f:01:e3:f9:ba:50:
                    a4:43:4f:d3:4a:6a:51:ee:eb:27:37:5e:b5:e0:18:
                    86:40:8e:d9:21:c8:a2:66:32:ce:67:a8:2d:7a:fb:
                    02:cc:a9:c7:ad:9a:24:3b:17:59:2b:d4:94:f9:2e:
                    1c:6f:fa:5c:a8:d5:59:09:fb:88:de:cc:7b:60:66:
                    8e:be:45:0c:80:65:22:0b:95:3c:5b:02:28:3e:ae:
                    0f:1f:76:8d:c6:5b:c7:7e:46:8b:87:1d:3c:8a:17:
                    3e:ce:66:9b:5b:03:55:e1:5f:67:3d:89:fa:b8:0d:
                    02:70:c3:9e:84:e5:50:dc:be:22:31:e6:3f:ed:76:
                    dd:31:f1:fc:f0:d1:cf:42:4f:fc:17:f0:d8:79:42:
                    f6:9f:90:af:84:23:63:e9:c2:55:57:70:b7:2f:56:
                    55:8d:cc:7c:bc:b8:bd:1f:78:c0:2f:8a:9b:a0:a1:
                    a5:ba:1a:80:73:29:4d:c7:57:09:b1:61:09:55:2d:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6D:66:20:C4:92:7B:AB:B8:F1:12:2D:B8:C5:9E:55:EC:67:64:BC
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/326130353a646663373a353630303a3a2f33392d3438203d3e20323130353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:5600::/39

    Signature Algorithm: sha256WithRSAEncryption
         98:93:b0:1a:cf:c8:e0:f4:de:75:ce:6f:13:89:3f:99:8d:0d:
         eb:10:b5:70:c9:b1:bb:5d:2b:49:c3:0d:81:d9:47:97:f9:35:
         e6:a7:e1:53:f8:12:9e:dd:62:81:16:1d:43:b9:41:12:1f:85:
         2e:0e:56:8c:8e:52:ca:c7:20:dd:f3:aa:d9:da:75:aa:18:93:
         f2:45:39:b6:d3:80:06:9a:d4:92:80:cc:ea:19:d1:1f:11:22:
         d3:54:1b:1b:a8:10:5f:26:c1:c7:ab:6b:56:77:3d:8d:d1:8c:
         a9:08:ef:c7:75:f1:1c:03:92:66:84:9c:e9:1b:50:9b:25:61:
         c2:14:0e:79:44:82:00:78:68:4c:bc:d9:19:f6:79:57:bb:73:
         df:ae:40:d7:47:c1:bf:4d:35:04:17:1c:c9:10:04:b8:52:21:
         83:42:fa:12:1c:9f:16:6b:33:b3:7a:b3:84:67:0e:8a:1d:44:
         8d:9e:ec:26:2d:56:fd:5d:c5:69:4d:96:98:62:0d:be:26:c6:
         00:4d:2a:36:d3:85:ba:82:6b:e8:3a:86:6a:c7:54:ad:2d:28:
         55:dd:a7:59:01:5f:97:be:65:25:11:58:66:0a:56:ff:ec:3e:
         d9:f2:3d:99:17:fb:63:47:1b:32:b4:f5:72:43:96:e8:30:c4:
         b5:a1:42:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----