Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/326130353a646663373a623030623a3a2f34382d3438203d3e20393435.roa
File:                     326130353a646663373a623030623a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          5CugVg0hM+LJsrdKBmSCxhmiN5KXqHCfHmceYJkh+NI=
Subject key identifier:   74:7D:E9:4F:CE:B7:DE:7F:79:E3:A6:59:33:1F:FD:CF:C9:A3:1A:27
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       695C100F60068758DE468CFD9E4E56B3B9757B6B
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/326130353a646663373a623030623a3a2f34382d3438203d3e20393435.roa
Signing time:             Fri 09 Dec 2022 13:01:28 +0000
ROA not before:           Fri 09 Dec 2022 12:56:28 +0000
ROA not after:            Fri 08 Dec 2023 13:01:28 +0000
asID:                     945
IP address blocks:        2a05:dfc7:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5c:10:0f:60:06:87:58:de:46:8c:fd:9e:4e:56:b3:b9:75:7b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Dec  9 12:56:28 2022 GMT
            Not After : Dec  8 13:01:28 2023 GMT
        Subject: CN=747DE94FCEB7DE7F79E3A659331FFDCFC9A31A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:54:e3:32:91:6a:f6:6c:bc:49:d6:7a:49:34:
                    4e:4f:f4:0e:1c:e1:8d:3f:c8:39:41:bd:f9:76:b4:
                    f6:41:71:7f:b2:66:41:69:7c:fd:81:03:38:8c:8b:
                    4c:d7:9d:38:c8:59:b9:96:fc:a9:5f:42:c1:6c:2f:
                    af:65:1d:16:c6:7d:1a:69:84:fa:9d:d5:6e:08:03:
                    c7:2c:0f:47:68:35:6a:61:17:d6:48:e1:67:d9:5d:
                    c8:3a:e1:8c:25:63:bf:c3:5c:9b:46:16:05:5e:b4:
                    56:9c:93:13:5a:34:f5:7e:91:24:07:f7:1c:72:69:
                    a8:4e:67:88:e4:09:22:68:f9:88:45:bd:26:dc:a6:
                    11:b9:4d:5f:9f:5d:b1:c0:6d:75:46:8b:e8:69:e7:
                    06:08:11:82:1a:5e:92:5a:21:43:f7:44:86:77:84:
                    2b:3e:b5:6b:22:77:75:3d:41:93:13:09:0e:19:ab:
                    3b:55:58:c0:ac:3a:d7:fa:43:b9:30:47:1b:de:59:
                    31:d3:a7:de:e5:59:00:c1:76:71:b7:2b:f7:e8:f0:
                    62:d8:2a:f5:87:92:30:dc:77:e6:d0:06:6b:ec:ee:
                    3f:f6:f5:5f:12:e8:6c:da:3b:f5:75:55:fc:77:0a:
                    c8:77:e2:b1:05:f1:d5:e1:77:af:65:fd:40:46:90:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7D:E9:4F:CE:B7:DE:7F:79:E3:A6:59:33:1F:FD:CF:C9:A3:1A:27
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/326130353a646663373a623030623a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:a0:99:3e:5f:02:f5:42:5b:2f:38:0d:e7:de:0a:f0:1b:fa:
         46:45:48:59:cd:8b:63:77:ee:2a:50:86:1e:67:df:67:55:1b:
         2b:0b:3a:2e:ea:60:63:f4:53:89:07:93:04:cc:2f:73:70:a2:
         ea:c3:93:30:a9:3e:96:17:24:26:66:93:b2:90:f6:54:e4:b9:
         98:36:08:2b:04:62:14:04:6e:57:3c:8d:ae:33:a1:79:eb:75:
         9a:8d:6a:88:c4:42:f2:cf:b8:e9:00:3a:35:c2:89:38:fe:0c:
         9d:70:6c:7d:b6:28:aa:2b:a8:5f:b4:63:4a:01:4e:d2:ed:2d:
         0f:97:a9:b2:19:ca:b7:22:46:65:5b:3f:3f:e8:90:6c:13:19:
         a2:4f:a1:0e:5b:49:f1:f5:90:c4:00:8b:a2:65:39:f1:28:0a:
         93:f8:78:2b:4e:3a:7d:20:43:fb:f6:a4:ed:dc:2d:60:1d:58:
         f8:f7:8d:52:29:44:2c:a2:44:e1:e7:de:d5:d5:f0:64:14:b5:
         e5:2b:29:9d:58:47:ad:0e:86:9f:9c:32:a3:59:ec:5e:8a:a7:
         66:37:7d:22:d0:83:e5:10:a6:bf:98:13:d9:e3:35:10:88:c0:
         58:99:82:04:e6:d6:89:d4:e6:e6:90:5c:62:ce:73:36:8b:14:
         fb:ed:88:bd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUaVwQD2AGh1jeRoz9nk5Ws7l1e2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMjEyMDkxMjU2MjhaFw0yMzEyMDgxMzAxMjhaMDMxMTAvBgNV
BAMTKDc0N0RFOTRGQ0VCN0RFN0Y3OUUzQTY1OTMzMUZGRENGQzlBMzFBMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VOMykWr2bLxJ1npJNE5P9A4c
4Y0/yDlBvfl2tPZBcX+yZkFpfP2BAziMi0zXnTjIWbmW/KlfQsFsL69lHRbGfRpp
hPqd1W4IA8csD0doNWphF9ZI4WfZXcg64YwlY7/DXJtGFgVetFackxNaNPV+kSQH
9xxyaahOZ4jkCSJo+YhFvSbcphG5TV+fXbHAbXVGi+hp5wYIEYIaXpJaIUP3RIZ3
hCs+tWsid3U9QZMTCQ4ZqztVWMCsOtf6Q7kwRxveWTHTp97lWQDBdnG3K/fo8GLY
KvWHkjDcd+bQBmvs7j/29V8S6GzaO/V1Vfx3Csh34rEF8dXhd69l/UBGkLsNAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUdH3pT8633n9546ZZMx/9z8mjGicwHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMIGRBggrBgEF
BQcBCwSBhDCBgTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3Qu
Y29tL3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC8zMjYxMzAzNTNhNjQ2NjYzMzcz
YTYyMzAzMDYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzkzNDM1LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAKgXfx7ALMA0GCSqGSIb3DQEBCwUAA4IBAQBnoJk+XwL1QlsvOA3n3grwG/pG
RUhZzYtjd+4qUIYeZ99nVRsrCzou6mBj9FOJB5MEzC9zcKLqw5MwqT6WFyQmZpOy
kPZU5LmYNggrBGIUBG5XPI2uM6F563WajWqIxELyz7jpADo1wok4/gydcGx9tiiq
K6hftGNKAU7S7S0Pl6myGcq3IkZlWz8/6JBsExmiT6EOW0nx9ZDEAIuiZTnxKAqT
+HgrTjp9IEP79qTt3C1gHVj4941SKUQsokTh597V1fBkFLXlKymdWEetDoafnDKj
WexeiqdmN30i0IPlEKa/mBPZ4zUQiMBYmYIE5taJ1ObmkFxiznM2ixT77Yi9
-----END CERTIFICATE-----