Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS150249.roa
File:                     AS150249.roa (raw, json)
Hash identifier:          Wt7ARTHAKQSnMqLw3V2ea0dSSR7WA8yTK0FX4vRGytU=
Subject key identifier:   AF:04:48:CA:67:28:55:25:0F:34:E3:F3:80:2E:C9:3C:31:7D:99:25
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       5D2A4E26143FEFAEFA1D7CC32E6C7CA84A3E7CB9
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS150249.roa
Signing time:             Fri 07 Apr 2023 13:50:12 +0000
ROA not before:           Fri 07 Apr 2023 13:45:12 +0000
ROA not after:            Fri 05 Apr 2024 13:50:12 +0000
asID:                     150249
IP address blocks:        2a05:dfc7:aa00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2a:4e:26:14:3f:ef:ae:fa:1d:7c:c3:2e:6c:7c:a8:4a:3e:7c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Apr  7 13:45:12 2023 GMT
            Not After : Apr  5 13:50:12 2024 GMT
        Subject: CN=AF0448CA672855250F34E3F3802EC93C317D9925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:82:dd:c3:e2:b2:55:e6:64:98:38:57:03:
                    ec:33:9c:ac:f4:3b:1d:0c:77:4f:10:c1:d8:f1:34:
                    bb:ae:11:6d:cf:f2:85:fe:35:92:a5:d4:20:48:f5:
                    db:0a:d8:db:61:8f:0b:76:9a:5a:c1:47:05:e2:92:
                    4e:cf:a3:de:1e:fe:5b:9e:24:00:1b:9a:76:0a:05:
                    32:12:3b:ca:64:dc:9f:c3:c5:2c:eb:c4:03:36:ef:
                    3a:88:4f:21:fb:b1:5b:62:a9:c1:c2:8a:e9:8e:0f:
                    b0:7e:f4:f3:27:51:a8:cf:8a:d6:d5:f7:5d:0b:54:
                    4c:87:29:b5:f8:fb:55:df:eb:b3:78:91:11:d4:aa:
                    40:25:e0:bd:e2:de:d5:36:cf:7c:8e:4d:c7:eb:8b:
                    c1:39:99:77:47:38:7e:ce:c3:cd:40:91:04:ed:26:
                    a4:e9:fd:f2:6d:48:a5:3e:bb:e6:fc:4f:a1:3b:fb:
                    6b:dd:bb:04:2a:0f:c5:c3:ca:a6:e2:66:9f:55:29:
                    f9:3e:03:32:9b:82:5d:13:b1:b9:4f:7b:d2:05:8f:
                    ea:2c:aa:34:31:95:8c:d7:f9:3f:07:32:de:6d:26:
                    2c:ee:cf:b9:f7:22:67:96:bb:c4:ea:a7:ad:db:7e:
                    7f:2d:7f:cc:f3:61:03:10:08:cf:48:8e:00:b7:31:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:04:48:CA:67:28:55:25:0F:34:E3:F3:80:2E:C9:3C:31:7D:99:25
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS150249.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:e7:a1:59:26:3e:d2:50:c4:25:55:bf:0e:72:cf:78:37:0f:
         c9:dc:30:b1:f4:8e:f0:64:f1:7e:03:57:18:45:56:a1:d5:fb:
         46:1e:ad:a4:b1:f1:34:af:0d:79:36:13:d4:22:ca:1f:c4:ba:
         09:40:5e:9a:62:73:e7:e3:59:a8:dc:53:ff:09:ba:6b:6e:61:
         6c:21:ee:80:26:ee:fa:36:ee:9c:de:3f:df:5a:d1:4c:88:9b:
         98:59:51:d4:7f:a0:81:0e:1b:f3:d9:13:b1:cc:7c:19:03:ea:
         38:31:8e:4a:c8:9f:c8:c1:00:a7:9b:57:8b:8a:f9:fe:b7:e9:
         fb:22:84:40:3d:f9:1d:15:0d:4d:eb:2c:f2:20:f3:6c:a9:c9:
         ea:55:3e:d4:0e:2b:55:10:ee:69:6e:e0:eb:40:f5:6f:7f:a7:
         56:8e:4d:3c:16:95:fd:75:f1:05:32:d4:a1:b1:71:51:92:25:
         c5:61:bf:70:69:4b:52:a7:41:9b:9d:a6:6c:f3:c4:ea:ac:4f:
         63:39:d0:be:e7:c3:df:69:15:55:dd:80:19:e9:a7:71:f5:7f:
         b9:3d:e3:2f:bf:c6:af:7f:50:c1:1e:a5:c2:d4:68:e5:45:7a:
         a9:c4:a0:7b:97:26:81:0a:cf:9c:35:4d:f3:4c:07:9b:03:72:
         f3:d3:c2:84
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUXSpOJhQ/7676HXzDLmx8qEo+fLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMzA0MDcxMzQ1MTJaFw0yNDA0MDUxMzUwMTJaMDMxMTAvBgNV
BAMTKEFGMDQ0OENBNjcyODU1MjUwRjM0RTNGMzgwMkVDOTNDMzE3RDk5MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3YLdw+KyVeZkmDhXA+wznKz0
Ox0Md08QwdjxNLuuEW3P8oX+NZKl1CBI9dsK2Nthjwt2mlrBRwXikk7Po94e/lue
JAAbmnYKBTISO8pk3J/DxSzrxAM27zqITyH7sVtiqcHCiumOD7B+9PMnUajPitbV
910LVEyHKbX4+1Xf67N4kRHUqkAl4L3i3tU2z3yOTcfri8E5mXdHOH7Ow81AkQTt
JqTp/fJtSKU+u+b8T6E7+2vduwQqD8XDyqbiZp9VKfk+AzKbgl0TsblPe9IFj+os
qjQxlYzX+T8HMt5tJizuz7n3ImeWu8Tqp63bfn8tf8zzYQMQCM9IjgC3MQdJAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUrwRIymcoVSUPNOPzgC7JPDF9mSUwHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMF0GCCsGAQUF
BwELBFEwTzBNBggrBgEFBQcwC4ZBcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29t
L3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC9BUzE1MDI0OS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF
38eqMA0GCSqGSIb3DQEBCwUAA4IBAQCg56FZJj7SUMQlVb8Ocs94Nw/J3DCx9I7w
ZPF+A1cYRVah1ftGHq2ksfE0rw15NhPUIsofxLoJQF6aYnPn41mo3FP/CbprbmFs
Ie6AJu76Nu6c3j/fWtFMiJuYWVHUf6CBDhvz2ROxzHwZA+o4MY5KyJ/IwQCnm1eL
ivn+t+n7IoRAPfkdFQ1N6yzyIPNsqcnqVT7UDitVEO5pbuDrQPVvf6dWjk08FpX9
dfEFMtShsXFRkiXFYb9waUtSp0GbnaZs88TqrE9jOdC+58PfaRVV3YAZ6adx9X+5
PeMvv8avf1DBHqXC1GjlRXqpxKB7lyaBCs+cNU3zTAebA3Lz08KE
-----END CERTIFICATE-----