Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS200975.roa
File:                     AS200975.roa (raw, json)
Hash identifier:          39rIstXQoB8wCiUcpTl8nyOqQ/czUfhmCx6d/8Kyp0E=
Subject key identifier:   0D:E1:B1:F0:ED:C8:0E:8F:23:38:EE:4B:37:5A:63:A4:00:F3:B0:A7
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       3906BF59DB8CF80908F4DAA5327D47E1A0D9C661
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS200975.roa
Signing time:             Wed 08 Mar 2023 18:45:29 +0000
ROA not before:           Wed 08 Mar 2023 18:40:29 +0000
ROA not after:            Wed 06 Mar 2024 18:45:29 +0000
asID:                     200975
IP address blocks:        2a05:dfc7:4200::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:06:bf:59:db:8c:f8:09:08:f4:da:a5:32:7d:47:e1:a0:d9:c6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:29 2023 GMT
            Not After : Mar  6 18:45:29 2024 GMT
        Subject: CN=0DE1B1F0EDC80E8F2338EE4B375A63A400F3B0A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:66:aa:0d:18:fd:46:72:78:4c:ed:e9:92:
                    aa:31:ef:b3:60:0c:71:c5:f7:1f:32:4f:f7:76:a3:
                    4d:4c:7b:e2:31:a6:1f:07:e8:13:55:22:40:60:59:
                    ef:e9:bd:ef:54:ac:74:8a:86:b0:68:4a:cb:b2:27:
                    e4:f3:fe:69:41:ff:d6:09:59:65:c4:ea:9f:de:cb:
                    4c:78:94:0e:54:d2:67:f7:0f:56:52:56:61:49:62:
                    3c:f9:c6:d1:23:03:8b:a0:c0:4a:e8:cc:6d:6a:07:
                    62:ba:20:e2:7d:1e:99:f3:05:9b:d1:72:a1:de:91:
                    8a:b7:e8:6a:88:75:6f:06:30:6f:13:3e:ef:4d:12:
                    5c:2b:47:a8:c7:5e:5e:e1:f2:1c:b2:f4:a4:ae:0b:
                    f1:ea:23:35:79:91:94:3c:34:8b:8a:a5:37:c5:0c:
                    86:1c:7d:0c:50:6d:84:f2:0f:48:9a:af:94:49:fa:
                    e8:46:13:01:44:ec:73:47:96:4d:9d:00:f0:42:29:
                    b0:69:2d:84:ae:19:57:83:9d:63:43:6c:5c:f2:3b:
                    36:54:87:16:8b:4c:06:4f:9f:88:b7:24:a5:33:e9:
                    69:b0:55:a0:12:b0:2f:66:fd:80:95:4c:6a:16:6c:
                    67:e1:a0:2c:5b:bd:c7:0f:f9:80:41:a5:1e:67:db:
                    81:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E1:B1:F0:ED:C8:0E:8F:23:38:EE:4B:37:5A:63:A4:00:F3:B0:A7
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS200975.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4200::/39

    Signature Algorithm: sha256WithRSAEncryption
         78:8c:81:4e:83:3e:44:2e:50:f7:7d:48:b0:b6:57:32:4c:e0:
         06:63:da:a3:b0:c7:22:d5:69:19:e8:6f:be:64:a4:6c:12:4c:
         a6:95:44:ba:40:f2:12:b2:73:f4:81:b1:47:1e:82:18:6b:6d:
         a3:63:cf:65:26:02:07:d1:b6:89:2c:c6:90:74:fa:af:e8:1d:
         42:38:55:a0:12:66:12:12:b2:c5:a0:b2:89:5f:d4:38:27:44:
         44:7c:d2:24:fa:27:55:cf:73:ba:d8:a1:c8:6c:d6:82:c6:f5:
         9e:4f:02:8b:81:b6:00:25:9e:25:58:dd:1d:1c:e5:1c:3c:d8:
         51:2c:e1:29:b8:92:31:d3:66:60:2b:ec:96:f0:19:f3:a3:db:
         ce:e9:15:e3:69:e0:75:e8:20:06:14:a4:81:07:61:4d:fc:6b:
         ff:e7:b8:b9:fd:15:43:b8:b2:1c:85:6a:4c:d2:d7:69:11:30:
         03:34:c3:00:64:44:3b:ae:9f:50:b9:9c:54:b3:1c:70:18:69:
         b4:cf:c8:79:c9:43:2d:d8:ce:5e:a7:46:80:7f:ca:fd:9c:85:
         cb:1b:5d:88:e5:e9:02:d8:8f:92:34:cf:15:a2:7c:f1:77:a7:
         e9:89:15:8a:18:5a:90:f2:d3:f6:d3:89:24:27:6d:d2:07:e5:
         dd:bf:7f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----