Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS149296.roa
File:                     AS149296.roa (raw, json)
Hash identifier:          8YC4eAUcZvlRAxw31ULLDKBRSKMFpTnMB1uD0z57kyc=
Subject key identifier:   C0:39:67:C1:BD:8F:27:F7:01:73:68:BD:A5:9E:FC:D7:F6:48:69:F6
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       4796F1CF84743585E7AEECFA2B731792D3609CD0
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS149296.roa
Signing time:             Wed 08 Mar 2023 18:45:24 +0000
ROA not before:           Wed 08 Mar 2023 18:40:24 +0000
ROA not after:            Wed 06 Mar 2024 18:45:24 +0000
asID:                     149296
IP address blocks:        2a06:1287:3700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:96:f1:cf:84:74:35:85:e7:ae:ec:fa:2b:73:17:92:d3:60:9c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:24 2023 GMT
            Not After : Mar  6 18:45:24 2024 GMT
        Subject: CN=C03967C1BD8F27F7017368BDA59EFCD7F64869F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:50:06:7e:2d:ff:1a:7d:ce:e0:aa:96:e1:
                    da:00:74:1f:5a:9f:73:ed:61:be:f6:f9:e1:33:98:
                    f8:4f:14:b1:36:23:61:00:42:1c:de:27:82:53:c3:
                    e4:bf:89:82:3d:cc:87:5a:a1:12:3a:af:b0:30:92:
                    7f:96:97:a3:be:6f:15:1b:8e:f1:4c:51:8e:7e:4e:
                    6c:00:f6:df:6f:5c:9e:d9:19:e2:d5:9f:2b:3b:55:
                    49:ee:a6:cc:ad:5c:cf:79:ca:60:13:89:52:c3:ab:
                    58:bf:b6:98:ae:4e:e0:fd:cb:d7:44:cb:a5:3a:e2:
                    47:86:63:2c:10:e4:88:44:39:9b:c0:0e:be:47:ba:
                    ec:de:80:e8:4a:01:cf:8d:ae:03:e6:5e:e6:d7:b2:
                    ec:3c:82:dd:f8:63:ac:52:17:02:ea:ea:f2:46:17:
                    d4:f1:96:00:83:9a:ea:69:89:f8:69:87:87:4a:00:
                    ea:3f:e4:f0:e2:07:58:db:60:42:d0:bd:ac:cc:5f:
                    56:b2:48:aa:06:35:97:dc:11:21:fa:81:00:0d:0e:
                    91:79:d1:01:c1:b5:12:23:92:7c:15:27:4f:b7:2a:
                    39:f1:74:59:9f:19:f7:cb:51:6c:45:41:91:2c:a2:
                    df:1f:70:7f:d0:9c:62:e7:f0:60:fc:06:bb:a0:11:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:39:67:C1:BD:8F:27:F7:01:73:68:BD:A5:9E:FC:D7:F6:48:69:F6
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS149296.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3700::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:4f:f1:fe:d8:63:80:f6:97:12:5d:ab:b5:b2:91:7e:f3:f5:
         69:47:84:1d:90:ec:03:58:b7:77:c2:a0:07:eb:39:71:c2:55:
         8c:e5:41:5b:d5:69:77:80:65:dd:22:9d:74:5c:a0:ce:48:06:
         12:4f:bd:24:80:2a:63:cf:f3:e8:6d:d8:ca:4e:62:bb:69:ac:
         45:ff:35:21:c9:70:b8:de:b8:72:75:1b:7d:b2:1c:51:9a:60:
         6a:65:e9:df:09:7e:20:5c:9a:a3:36:05:7b:a9:fd:45:65:9a:
         5f:52:b3:f1:3e:53:13:ce:2a:00:93:fc:a0:a6:1e:05:b6:bc:
         12:fb:ff:b1:bb:8e:34:f7:f7:c1:28:13:27:dc:06:a2:5a:2c:
         31:bc:58:be:80:bb:5b:38:b5:c0:5d:42:83:25:d6:3e:01:db:
         26:85:d6:9c:2e:00:95:4b:d0:d7:c5:9a:03:75:a5:01:be:4b:
         34:cb:d9:77:76:b0:99:76:4f:10:fa:10:d5:0c:95:90:02:c7:
         ba:87:8d:a4:51:ce:02:b1:23:b5:a5:4a:4b:d8:b2:09:4e:c9:
         12:95:db:b6:4c:a4:14:55:51:ff:0b:6f:40:ac:ab:39:a5:a8:
         ae:a4:39:29:e1:1a:5f:0a:e7:1c:c2:fe:e1:69:c9:b7:b3:ca:
         88:1d:3d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----