Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/326130353a646663373a363166643a3a2f34382d3438203d3e203531303139.roa
File:                     326130353a646663373a363166643a3a2f34382d3438203d3e203531303139.roa (raw, json)
Hash identifier:          6wKfz1HHeIW7uQZCcwZBuv0/kwGjlMGYUKlKtYK2VwI=
Subject key identifier:   90:91:5D:F8:D1:91:E6:16:DE:E1:AB:DF:6B:9C:29:3E:39:9E:31:D4
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       3C3FB1C9539F0EDFA5D11C74FBAA9291F6C2C28E
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/326130353a646663373a363166643a3a2f34382d3438203d3e203531303139.roa
Signing time:             Fri 20 Jan 2023 00:31:01 +0000
ROA not before:           Fri 20 Jan 2023 00:26:01 +0000
ROA not after:            Fri 19 Jan 2024 00:31:01 +0000
asID:                     51019
IP address blocks:        2a05:dfc7:61fd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3f:b1:c9:53:9f:0e:df:a5:d1:1c:74:fb:aa:92:91:f6:c2:c2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Jan 20 00:26:01 2023 GMT
            Not After : Jan 19 00:31:01 2024 GMT
        Subject: CN=90915DF8D191E616DEE1ABDF6B9C293E399E31D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:8b:ad:d2:a8:91:cf:7f:13:d1:91:cb:08:
                    59:e4:21:5e:c7:3f:70:5b:73:ce:55:1d:76:49:56:
                    51:44:a9:5a:b7:27:db:53:7b:7a:50:f6:59:55:33:
                    dd:6b:f6:87:ef:ed:7f:1b:10:fe:e0:90:40:3a:32:
                    da:93:d5:ff:5b:af:fe:3c:b5:49:b7:c4:61:bd:83:
                    f4:c0:80:ea:f7:08:5e:55:4f:f3:98:a2:6c:e2:77:
                    c6:8a:44:a9:7a:93:52:c8:84:69:1e:14:a5:fe:8f:
                    60:cb:59:52:1c:55:bb:78:ec:f5:90:78:38:7c:27:
                    91:17:72:3f:eb:fb:c8:75:81:ad:06:4d:3b:99:59:
                    b0:37:2a:46:e3:9b:25:ad:fa:31:63:61:c0:47:c8:
                    18:86:ad:34:81:ec:e8:5b:b3:75:76:c7:05:0e:12:
                    08:04:3f:66:8e:48:23:1b:e7:1d:5c:31:ea:11:97:
                    eb:cf:ac:ad:15:2d:a9:93:3a:3f:e8:7c:e0:97:3e:
                    30:57:08:4c:29:54:c7:3f:89:3e:68:9f:86:7d:93:
                    97:87:88:51:66:64:98:70:dc:6e:c8:c7:09:02:27:
                    ff:df:4c:69:0d:4b:68:30:29:18:0d:90:62:c3:8e:
                    ee:88:88:3f:89:7f:fa:27:61:84:8b:ea:bb:41:91:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:91:5D:F8:D1:91:E6:16:DE:E1:AB:DF:6B:9C:29:3E:39:9E:31:D4
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/326130353a646663373a363166643a3a2f34382d3438203d3e203531303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:61fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:ca:ed:d0:b0:df:01:1e:47:09:61:bf:6b:e0:58:57:c1:c2:
         4f:3b:9f:7e:9f:d0:50:23:1e:1a:c5:bf:05:da:26:10:0e:02:
         66:62:a8:f4:47:c3:7d:97:8f:b9:4a:82:3c:d2:33:92:7a:6f:
         84:ad:8d:a9:28:08:5d:6c:98:6a:4c:47:c2:51:fb:45:22:a6:
         7f:63:93:eb:8d:0b:c2:f3:66:02:4c:8d:5b:a7:f3:26:f1:64:
         6c:f3:b4:a6:41:8b:91:f6:8a:83:12:cd:61:e3:64:a2:ba:6f:
         b8:aa:79:db:17:2f:52:bb:3b:13:17:0f:a7:9b:a0:e2:66:7f:
         5d:dd:78:1f:13:f1:e0:a9:0a:02:b4:7b:5f:aa:72:bb:4b:17:
         7f:26:1c:1c:03:44:99:fd:2e:8f:2e:6f:f6:25:23:f4:eb:97:
         35:37:da:f8:dd:f1:81:d6:4d:0b:68:18:18:2e:d8:08:95:c5:
         47:f5:ad:5e:67:b3:46:64:57:cd:7b:b1:ff:82:86:c3:42:31:
         40:1b:b3:c9:69:d7:86:83:df:8e:e9:b0:5b:fa:b8:2f:40:00:
         37:d8:d3:a0:ad:c9:ac:a4:63:af:d2:02:e6:e7:04:21:13:f4:
         cf:94:a0:57:57:e9:ef:8c:27:a7:b3:80:5b:c1:77:c9:eb:cc:
         c2:ad:a2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----