Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS198408.roa
File:                     AS198408.roa (raw, json)
Hash identifier:          cP0wm3JRyVTJjGV7dvd8IAV7XerAEJTfSjXdsKwTWTU=
Subject key identifier:   29:CB:B3:7A:31:C2:84:8A:6A:9C:3B:81:89:FC:BB:FA:A5:CE:39:12
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       3161A0F422FFF43C664A080D5B6835AB5C0F6D5D
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS198408.roa
Signing time:             Wed 08 Mar 2023 18:45:21 +0000
ROA not before:           Wed 08 Mar 2023 18:40:21 +0000
ROA not after:            Wed 06 Mar 2024 18:45:21 +0000
asID:                     198408
IP address blocks:        2a05:dfc7:7800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:61:a0:f4:22:ff:f4:3c:66:4a:08:0d:5b:68:35:ab:5c:0f:6d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:21 2023 GMT
            Not After : Mar  6 18:45:21 2024 GMT
        Subject: CN=29CBB37A31C2848A6A9C3B8189FCBBFAA5CE3912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:fc:6a:b0:26:87:d7:35:1f:f3:53:73:42:
                    04:96:8e:a5:09:a7:4f:2f:d8:bc:c0:83:69:e1:91:
                    98:37:86:ad:a5:5c:e0:1a:67:87:19:2e:87:be:35:
                    48:dd:73:46:cf:00:60:11:34:91:ff:72:cc:dc:18:
                    d0:a1:8d:86:77:6b:eb:28:fc:4e:25:05:1e:7c:17:
                    8c:59:b7:5e:88:2a:e0:3d:bc:9d:77:4a:53:37:92:
                    12:cd:fe:da:8c:22:1f:fd:02:55:ff:1f:5b:77:6d:
                    7a:3f:90:57:a2:8e:c4:6c:47:ac:61:23:03:20:da:
                    cc:ee:cd:5e:b5:4d:4e:b9:eb:c1:e6:7f:09:49:21:
                    52:a2:36:97:c2:5b:68:ed:f1:6b:f1:70:07:d7:32:
                    a5:ab:1c:dc:15:34:ce:e2:09:31:73:bb:cc:97:65:
                    52:88:1c:b5:93:ca:71:1d:b6:af:2a:88:d3:c4:ac:
                    21:28:8d:73:07:c1:1f:75:1d:66:9b:2d:c4:e5:ef:
                    b2:04:9c:9e:96:1d:50:4b:95:f7:76:08:0e:bb:8d:
                    84:89:b3:e1:b6:98:fe:89:6b:f7:21:b9:84:71:8b:
                    44:04:1c:04:c7:92:b6:07:99:25:b9:44:23:60:30:
                    d6:c0:6f:9c:d6:bb:8c:ff:fe:53:85:10:02:94:ce:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CB:B3:7A:31:C2:84:8A:6A:9C:3B:81:89:FC:BB:FA:A5:CE:39:12
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS198408.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:7800::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:86:20:d0:14:b1:e3:11:ff:22:75:b0:be:e7:f1:77:a7:e7:
         0f:bc:5f:a0:7f:bd:f1:c0:95:d3:c1:c9:7f:af:da:f6:dc:ff:
         95:5b:22:70:00:85:e0:cd:36:04:60:d5:1b:ac:97:ce:05:40:
         55:67:b9:4a:4b:3b:97:a9:25:c3:ed:7c:20:a3:b3:6b:ff:a3:
         01:b6:ef:87:58:ac:f0:14:ef:14:74:1f:4c:31:1a:ba:8b:1c:
         89:c6:cd:e1:14:81:64:64:c0:4f:ad:36:8b:76:15:bc:2b:54:
         30:27:03:4d:50:63:1d:09:68:3f:c1:c8:83:e2:6c:81:6c:9c:
         17:59:c9:b6:b3:ea:f2:ec:df:98:98:85:4d:80:a9:29:26:5d:
         2d:0e:10:bc:b2:3a:58:6f:2a:2f:64:a2:5e:61:1f:97:b1:8b:
         fa:9c:66:b7:6f:f2:f9:d1:f0:be:0c:59:33:ca:53:5e:0d:06:
         e0:46:dd:ce:15:26:1a:2a:8c:61:8f:f0:43:68:45:db:56:48:
         55:81:7b:14:1c:d3:25:39:c5:b1:6e:5e:75:23:d0:33:3f:8b:
         74:8c:d3:2d:cd:fb:8b:68:b4:48:f5:1c:35:a2:7d:cf:44:36:
         0a:75:00:32:c8:c4:7d:15:40:6e:8d:63:3b:65:56:d8:11:05:
         33:f0:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----