Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/326130363a313238373a3130303a3a2f34302d3438203d3e20323038353438.roa
File:                     326130363a313238373a3130303a3a2f34302d3438203d3e20323038353438.roa (raw, json)
Hash identifier:          b0UdIPkt/QN3iWwpPOMSVZX2uCCf1Nv6TfIp6TYvNVE=
Subject key identifier:   BB:84:9E:A3:97:C9:75:C4:6F:BA:74:96:21:0D:38:99:13:FA:C2:FB
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       140B9A704A175409F9FB39046D2AFDB6DF4E00F6
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/326130363a313238373a3130303a3a2f34302d3438203d3e20323038353438.roa
Signing time:             Fri 09 Dec 2022 13:08:39 +0000
ROA not before:           Fri 09 Dec 2022 13:03:39 +0000
ROA not after:            Fri 08 Dec 2023 13:08:39 +0000
asID:                     208548
IP address blocks:        2a06:1287:100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0b:9a:70:4a:17:54:09:f9:fb:39:04:6d:2a:fd:b6:df:4e:00:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Dec  9 13:03:39 2022 GMT
            Not After : Dec  8 13:08:39 2023 GMT
        Subject: CN=BB849EA397C975C46FBA7496210D389913FAC2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:87:8c:36:51:28:22:70:0e:d1:e1:75:bf:
                    93:61:53:21:03:98:9d:7e:fb:1c:db:40:cf:86:00:
                    ca:9c:32:c9:8c:e2:f1:cb:e7:3e:ab:b1:de:c5:00:
                    04:c4:73:43:0e:1f:ef:30:62:91:68:4a:bb:ab:60:
                    7d:d8:e1:27:48:4d:4a:8c:ac:0f:ff:90:76:ae:31:
                    10:ae:23:45:32:54:7c:c8:f4:17:b0:eb:25:5d:65:
                    ed:9c:4b:0f:59:21:e7:8a:8d:7d:4e:50:c3:3f:30:
                    e4:34:34:7b:c1:d1:7b:35:a5:0d:33:8f:7a:78:5d:
                    ad:9c:81:61:06:d0:87:89:7c:7c:fb:72:20:49:98:
                    60:41:9a:67:16:5a:fc:75:81:f1:0f:d5:c6:da:2b:
                    5a:c4:1c:f0:f6:09:cd:53:d2:06:29:1c:f2:08:55:
                    f0:70:6f:09:56:95:92:f7:2a:79:df:00:4d:12:b7:
                    fd:5a:6b:75:7b:fe:2d:a4:81:65:d3:9c:79:33:4b:
                    7f:14:ab:65:f2:a0:c0:af:c0:ca:e3:c8:aa:7a:ef:
                    d0:f8:60:65:8e:27:a7:91:63:1a:ca:cd:40:2c:38:
                    d9:39:23:32:91:28:6a:06:14:37:c6:72:8e:55:10:
                    68:3c:9a:a7:09:2c:c6:77:b5:4c:07:63:a3:d2:f7:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:84:9E:A3:97:C9:75:C4:6F:BA:74:96:21:0D:38:99:13:FA:C2:FB
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/326130363a313238373a3130303a3a2f34302d3438203d3e20323038353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:2a:03:29:36:f7:a2:9f:6b:af:bf:93:a8:3d:88:93:f2:
         f8:e2:a3:2c:aa:1f:62:54:80:e8:de:b0:82:50:63:c3:b4:68:
         89:a5:6a:6c:46:7b:1e:ec:95:74:75:eb:9d:97:51:96:1c:57:
         c0:55:54:66:2b:81:c1:10:b7:b6:0b:2d:dc:1d:38:e1:71:b0:
         48:37:64:2b:f1:2f:62:40:7a:36:ee:e0:46:2c:42:3c:a8:e9:
         d1:11:47:b9:f6:92:7e:55:10:54:6e:af:8a:8a:6a:67:45:65:
         d8:f0:3d:2b:f7:59:2b:03:56:d4:7a:2c:75:6e:a2:f3:a7:c0:
         6f:6f:3b:a0:7e:f7:b4:97:b3:6d:d3:46:07:5a:0d:ad:c5:45:
         be:73:c9:bb:5e:d6:db:d7:f4:50:31:39:63:d3:08:13:b5:db:
         79:65:64:69:95:28:8e:80:07:24:a3:17:36:f5:53:d4:22:cd:
         70:e8:ac:c3:b4:64:f3:46:95:2d:76:8a:70:38:ac:d7:46:ec:
         b8:43:47:97:43:45:37:ca:ee:92:eb:a6:81:df:68:fb:9e:17:
         f3:1e:2e:e4:11:bd:74:00:c7:49:d9:f3:66:49:ee:71:e2:b9:
         0e:69:6f:b8:7a:22:4e:a6:a2:ca:2c:93:83:30:9e:96:fa:83:
         46:bd:8a:42
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUFAuacEoXVAn5+zkEbSr9tt9OAPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMjEyMDkxMzAzMzlaFw0yMzEyMDgxMzA4MzlaMDMxMTAvBgNV
BAMTKEJCODQ5RUEzOTdDOTc1QzQ2RkJBNzQ5NjIxMEQzODk5MTNGQUMyRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFYeMNlEoInAO0eF1v5NhUyED
mJ1++xzbQM+GAMqcMsmM4vHL5z6rsd7FAATEc0MOH+8wYpFoSrurYH3Y4SdITUqM
rA//kHauMRCuI0UyVHzI9Bew6yVdZe2cSw9ZIeeKjX1OUMM/MOQ0NHvB0Xs1pQ0z
j3p4Xa2cgWEG0IeJfHz7ciBJmGBBmmcWWvx1gfEP1cbaK1rEHPD2Cc1T0gYpHPII
VfBwbwlWlZL3KnnfAE0St/1aa3V7/i2kgWXTnHkzS38Uq2XyoMCvwMrjyKp679D4
YGWOJ6eRYxrKzUAsONk5IzKRKGoGFDfGco5VEGg8mqcJLMZ3tUwHY6PS97sJAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUu4Seo5fJdcRvunSWIQ04mRP6wvswHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMIGWBggrBgEF
BQcBCwSBiTCBhjCBgwYIKwYBBQUHMAuGd3JzeW5jOi8vcnBraS56YXBwaWVob3N0
LmNvbS9yZXBvL1dJTExJQU1fVUlEXzExNDgzLzAvMzI2MTMwMzYzYTMxMzIzODM3
M2EzMTMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMwMzgzNTM0Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqBhKHATANBgkqhkiG9w0BAQsFAAOCAQEAoScqAyk296Kfa6+/k6g9
iJPy+OKjLKofYlSA6N6wglBjw7RoiaVqbEZ7HuyVdHXrnZdRlhxXwFVUZiuBwRC3
tgst3B044XGwSDdkK/EvYkB6Nu7gRixCPKjp0RFHufaSflUQVG6viopqZ0Vl2PA9
K/dZKwNW1HosdW6i86fAb287oH73tJezbdNGB1oNrcVFvnPJu17W29f0UDE5Y9MI
E7XbeWVkaZUojoAHJKMXNvVT1CLNcOisw7Rk80aVLXaKcDis10bsuENHl0NFN8ru
kuumgd9o+54X8x4u5BG9dADHSdnzZknuceK5DmlvuHoiTqaiyiyTgzCelvqDRr2K
Qg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org