Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS199680.roa
File:                     AS199680.roa (raw, json)
Hash identifier:          O7pAjeri8RDkLmXG48eXzzc2aZT5YY2RZUei9ktktXo=
Subject key identifier:   8F:12:0C:7A:B7:FA:FB:1C:D1:61:55:F2:EC:35:CE:0A:7B:0F:1F:3F
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       78600EFE38B1F06EC4CECDFD1F6656AD2C00EC4A
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS199680.roa
Signing time:             Wed 08 Mar 2023 18:45:25 +0000
ROA not before:           Wed 08 Mar 2023 18:40:25 +0000
ROA not after:            Wed 06 Mar 2024 18:45:25 +0000
asID:                     199680
IP address blocks:        2a05:dfc7:9000::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:60:0e:fe:38:b1:f0:6e:c4:ce:cd:fd:1f:66:56:ad:2c:00:ec:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:25 2023 GMT
            Not After : Mar  6 18:45:25 2024 GMT
        Subject: CN=8F120C7AB7FAFB1CD16155F2EC35CE0A7B0F1F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:60:7f:d3:e0:3e:34:40:cd:e4:dc:23:6e:
                    cd:4b:9f:43:f6:1c:66:e9:6e:cc:d0:1a:37:04:34:
                    0b:05:19:84:be:ed:77:84:56:e6:e2:9c:4c:5c:c4:
                    7e:13:5e:b7:8b:77:c4:43:0a:e8:87:06:c8:56:cc:
                    50:12:aa:be:2c:79:23:52:aa:81:08:b8:87:53:2b:
                    f1:22:0a:1c:03:18:2c:e9:d6:a0:b5:13:18:9d:9f:
                    69:23:0a:78:14:62:b3:52:ea:d9:fb:aa:16:db:dd:
                    c1:b3:20:e7:8a:08:3f:6e:d6:1c:e8:9d:9a:b3:2a:
                    ee:09:ae:97:34:98:39:a6:d3:70:e1:20:e9:03:f1:
                    b9:05:4f:0d:c5:8a:0d:2b:b9:73:bc:13:1d:8b:9f:
                    8e:9f:8a:2c:86:db:41:b9:49:f6:4e:88:69:30:d5:
                    22:93:fa:f1:c3:85:56:29:7e:02:d9:9d:f4:95:25:
                    e1:80:88:e1:6b:41:8b:a1:07:84:5e:05:df:42:48:
                    16:4e:49:2f:e0:cf:ed:6d:05:74:63:44:83:0e:17:
                    eb:f2:41:87:a8:4f:59:33:28:ad:b6:d3:71:03:cf:
                    11:1b:fd:31:b3:35:41:8d:0c:dc:1a:35:27:2c:fe:
                    46:16:5a:b6:83:18:7f:fb:be:71:53:42:4f:25:aa:
                    ec:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:12:0C:7A:B7:FA:FB:1C:D1:61:55:F2:EC:35:CE:0A:7B:0F:1F:3F
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS199680.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:9000::/39

    Signature Algorithm: sha256WithRSAEncryption
         dd:ce:e9:38:0e:c2:74:3f:d4:51:0b:28:7b:ab:d3:ad:a2:fd:
         0d:51:6a:67:83:f0:34:dc:84:7b:a0:e5:f3:2b:7f:82:0c:e1:
         02:eb:c6:fa:fd:cb:c9:a6:b6:b8:e7:79:17:e9:aa:b7:f2:0a:
         d8:9c:c2:b3:d4:d2:8f:04:eb:f4:ae:4e:33:e9:3d:19:17:3b:
         60:19:26:ba:08:4f:ed:04:15:5b:2b:d8:a6:c1:df:ec:96:05:
         f1:2b:13:8d:34:f7:39:c9:f7:67:2e:95:09:72:b3:60:6d:41:
         b8:13:10:81:f5:f2:c6:45:69:72:e1:b4:07:23:1f:9c:22:4d:
         00:df:97:c4:64:d2:5b:54:76:e1:99:b4:b1:e1:fb:79:42:0a:
         bb:64:4b:a3:13:97:ea:63:77:ec:18:bb:83:d7:6b:4c:41:c8:
         71:b2:46:83:29:99:61:8f:8c:5a:e5:ae:b6:3a:91:34:7b:20:
         1c:43:ce:6a:64:4f:87:75:c6:f2:b5:33:61:c8:51:fa:9a:e3:
         a4:68:e4:99:be:fa:d2:07:db:2f:1a:72:cc:cd:01:8f:da:8f:
         11:a1:ac:d7:72:75:df:e3:29:e0:df:ef:e3:92:ae:cb:fe:88:
         e6:52:ea:7e:95:fa:cb:70:e1:a5:bd:f3:1c:a6:94:b0:5b:d1:
         3f:6f:18:83
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUeGAO/jix8G7Ezs39H2ZWrSwA7EowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMzAzMDgxODQwMjVaFw0yNDAzMDYxODQ1MjVaMDMxMTAvBgNV
BAMTKDhGMTIwQzdBQjdGQUZCMUNEMTYxNTVGMkVDMzVDRTBBN0IwRjFGM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzC2B/0+A+NEDN5Nwjbs1Ln0P2
HGbpbszQGjcENAsFGYS+7XeEVubinExcxH4TXreLd8RDCuiHBshWzFASqr4seSNS
qoEIuIdTK/EiChwDGCzp1qC1Exidn2kjCngUYrNS6tn7qhbb3cGzIOeKCD9u1hzo
nZqzKu4Jrpc0mDmm03DhIOkD8bkFTw3Fig0ruXO8Ex2Ln46fiiyG20G5SfZOiGkw
1SKT+vHDhVYpfgLZnfSVJeGAiOFrQYuhB4ReBd9CSBZOSS/gz+1tBXRjRIMOF+vy
QYeoT1kzKK2203EDzxEb/TGzNUGNDNwaNScs/kYWWraDGH/7vnFTQk8lquyTAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUjxIMerf6+xzRYVXy7DXOCnsPHz8wHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMF0GCCsGAQUF
BwELBFEwTzBNBggrBgEFBQcwC4ZBcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29t
L3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC9BUzE5OTY4MC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASoF
38eQMA0GCSqGSIb3DQEBCwUAA4IBAQDdzuk4DsJ0P9RRCyh7q9Otov0NUWpng/A0
3IR7oOXzK3+CDOEC68b6/cvJpra453kX6aq38grYnMKz1NKPBOv0rk4z6T0ZFztg
GSa6CE/tBBVbK9imwd/slgXxKxONNPc5yfdnLpUJcrNgbUG4ExCB9fLGRWly4bQH
Ix+cIk0A35fEZNJbVHbhmbSx4ft5Qgq7ZEujE5fqY3fsGLuD12tMQchxskaDKZlh
j4xa5a62OpE0eyAcQ85qZE+HdcbytTNhyFH6muOkaOSZvvrSB9svGnLMzQGP2o8R
oazXcnXf4yng3+/jkq7L/ojmUup+lfrLcOGlvfMcppSwW9E/bxiD
-----END CERTIFICATE-----