Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          PDZOsz9vF6Adrm8A1sm2voCsNRNd52bbyNlSWfyWrkw=
Subject key identifier:   79:C1:C8:7E:79:99:E8:E0:CA:39:E6:0E:2E:CD:B0:45:68:B5:71:DE
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       62BEBD1185C7DA6BBEA829CE675719DA97C29A3D
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS16509.roa
Signing time:             Sun 19 Mar 2023 15:44:36 +0000
ROA not before:           Sun 19 Mar 2023 15:39:36 +0000
ROA not after:            Sun 17 Mar 2024 15:44:36 +0000
asID:                     16509
IP address blocks:        2a05:dfc7:7720::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:be:bd:11:85:c7:da:6b:be:a8:29:ce:67:57:19:da:97:c2:9a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar 19 15:39:36 2023 GMT
            Not After : Mar 17 15:44:36 2024 GMT
        Subject: CN=79C1C87E7999E8E0CA39E60E2ECDB04568B571DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7d:e2:ed:e2:1d:b1:ce:ce:32:cb:58:26:fe:
                    db:3f:ed:17:54:0d:21:c1:45:d8:c2:80:9c:09:c7:
                    14:7d:df:d6:41:a7:ae:bf:99:8f:8f:3e:57:0e:2e:
                    d6:e1:c5:a0:af:62:38:ad:1b:e5:3e:36:73:f9:31:
                    29:f8:0e:fa:cb:36:40:b7:c2:20:71:23:f8:48:8b:
                    68:00:1c:98:2b:ae:4d:0b:66:bc:69:90:c1:2b:fb:
                    40:b9:e8:5b:4a:e0:f5:b1:dd:0a:bb:42:ee:c1:2f:
                    70:8c:81:d6:1d:77:d0:d5:b6:2f:1c:3f:bb:9c:50:
                    cf:ca:ea:73:02:bf:a7:1e:53:11:fa:4e:3e:40:8e:
                    b5:20:86:af:88:19:40:23:cb:c1:07:49:a4:9d:59:
                    c7:a7:8a:7e:0a:f4:7b:99:0b:b6:e2:3c:dd:d3:99:
                    e5:a3:42:5c:5f:40:09:f0:b4:e1:f6:4e:e4:69:3d:
                    80:a9:15:c3:28:62:cd:9e:54:de:b1:ec:ab:7e:00:
                    ee:ed:37:c5:6e:43:7f:84:28:da:1b:8b:78:2e:b4:
                    c0:7f:0a:83:a3:26:e6:33:a5:d1:90:09:02:e1:44:
                    d4:3f:94:e5:27:8f:b0:e5:c3:c3:7a:9d:17:97:25:
                    8d:ac:10:03:1b:9f:4e:64:f1:db:fa:81:d4:40:c0:
                    a1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C1:C8:7E:79:99:E8:E0:CA:39:E6:0E:2E:CD:B0:45:68:B5:71:DE
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:7720::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:7d:60:9b:ce:20:91:c1:a0:5c:e5:4a:df:ca:4f:c6:cd:4b:
         55:61:6b:3a:f3:e0:7e:d5:ea:1f:83:a7:bb:ca:55:46:7f:4c:
         c4:ff:ff:4a:18:29:36:0e:f1:63:a4:cc:29:e3:f9:7c:fb:ed:
         85:22:ed:31:5d:45:3b:1d:37:4b:30:0c:98:e5:aa:d1:97:cd:
         61:db:6f:ff:4e:e6:f4:5b:08:56:6d:aa:ee:e2:03:c7:28:fb:
         34:94:99:6c:af:29:8d:d2:dc:14:ef:e0:b3:b8:9f:3b:b6:7e:
         09:72:ce:9e:1a:fa:28:5b:dc:16:c0:f6:4b:93:b7:1c:9f:33:
         ee:fe:05:18:c5:0f:c7:ac:f1:f8:91:a8:0b:ba:f5:b5:ec:fd:
         be:8a:bb:58:aa:83:38:66:f8:3f:64:9f:b6:eb:55:d5:a8:84:
         a5:ee:58:21:43:ab:36:13:d8:4b:41:6e:e3:af:8a:db:58:cd:
         90:30:a8:44:de:98:da:f2:35:0b:80:ed:d7:c2:f3:9e:d7:1d:
         43:8e:ef:92:45:43:f7:df:68:27:b3:11:c3:65:ae:99:16:3f:
         84:69:e4:74:73:5b:81:82:65:66:d6:4e:ca:c9:8d:32:02:2b:
         b1:35:ec:d9:24:7b:82:8e:4c:72:66:09:2a:f5:60:06:e1:01:
         70:3e:ee:46
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUYr69EYXH2mu+qCnOZ1cZ2pfCmj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMzAzMTkxNTM5MzZaFw0yNDAzMTcxNTQ0MzZaMDMxMTAvBgNV
BAMTKDc5QzFDODdFNzk5OUU4RTBDQTM5RTYwRTJFQ0RCMDQ1NjhCNTcxREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPfeLt4h2xzs4yy1gm/ts/7RdU
DSHBRdjCgJwJxxR939ZBp66/mY+PPlcOLtbhxaCvYjitG+U+NnP5MSn4DvrLNkC3
wiBxI/hIi2gAHJgrrk0LZrxpkMEr+0C56FtK4PWx3Qq7Qu7BL3CMgdYdd9DVti8c
P7ucUM/K6nMCv6ceUxH6Tj5AjrUghq+IGUAjy8EHSaSdWcenin4K9HuZC7biPN3T
meWjQlxfQAnwtOH2TuRpPYCpFcMoYs2eVN6x7Kt+AO7tN8VuQ3+EKNobi3gutMB/
CoOjJuYzpdGQCQLhRNQ/lOUnj7Dlw8N6nReXJY2sEAMbn05k8dv6gdRAwKEfAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUecHIfnmZ6ODKOeYOLs2wRWi1cd4wHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMFwGCCsGAQUF
BwELBFAwTjBMBggrBgEFBQcwC4ZAcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29t
L3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXf
x3cgMA0GCSqGSIb3DQEBCwUAA4IBAQCAfWCbziCRwaBc5Urfyk/GzUtVYWs68+B+
1eofg6e7ylVGf0zE//9KGCk2DvFjpMwp4/l8++2FIu0xXUU7HTdLMAyY5arRl81h
22//Tub0WwhWbaru4gPHKPs0lJlsrymN0twU7+CzuJ87tn4Jcs6eGvooW9wWwPZL
k7ccnzPu/gUYxQ/HrPH4kagLuvW17P2+irtYqoM4Zvg/ZJ+261XVqISl7lghQ6s2
E9hLQW7jr4rbWM2QMKhE3pja8jULgO3XwvOe1x1Dju+SRUP332gnsxHDZa6ZFj+E
aeR0c1uBgmVm1k7KyY0yAiuxNezZJHuCjkxyZgkq9WAG4QFwPu5G
-----END CERTIFICATE-----