Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS201097.roa
File:                     AS201097.roa (raw, json)
Hash identifier:          RtBgVfiXxJVlDDQqMX2mDxIp20kEd3aQ4v7i/PkJ2xQ=
Subject key identifier:   43:32:0D:48:B4:03:30:49:06:DB:C7:19:4B:B8:D4:C7:CA:D3:CF:F3
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       10A131F685230FEE3646BEAF76A81AB4B7AB0163
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS201097.roa
Signing time:             Wed 08 Mar 2023 18:45:26 +0000
ROA not before:           Wed 08 Mar 2023 18:40:26 +0000
ROA not after:            Wed 06 Mar 2024 18:45:26 +0000
asID:                     201097
IP address blocks:        2a06:1287:f800::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a1:31:f6:85:23:0f:ee:36:46:be:af:76:a8:1a:b4:b7:ab:01:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:26 2023 GMT
            Not After : Mar  6 18:45:26 2024 GMT
        Subject: CN=43320D48B403304906DBC7194BB8D4C7CAD3CFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:71:68:13:61:c9:41:d5:7f:08:da:be:76:
                    8d:81:04:39:63:59:54:3a:a4:5e:24:d4:56:1f:83:
                    ff:b4:9b:25:26:ca:2e:6f:76:e8:f0:62:94:a3:65:
                    4a:7e:62:f7:77:22:dd:c8:f7:c5:97:a4:75:1a:6f:
                    59:f5:40:7e:9c:e3:05:ac:d5:3f:54:e4:e0:b2:0d:
                    f5:d1:0a:c3:92:64:5e:be:62:6f:be:c9:4e:49:3d:
                    f6:71:4c:4e:83:30:06:05:57:08:16:73:13:f0:16:
                    c5:fc:2e:f2:fb:eb:af:f6:91:1e:d8:01:3d:2e:28:
                    c1:d7:d8:58:d4:d3:79:35:9b:89:47:d9:1f:ed:73:
                    7c:02:16:8c:52:42:c7:e8:55:8b:1a:7c:0a:4c:f4:
                    a2:66:1a:05:4a:83:2e:b3:9f:fe:36:6f:7c:2b:df:
                    f8:c2:d5:c9:29:4d:da:79:6c:20:c3:4a:de:ed:2f:
                    0f:d4:7a:33:31:5c:5e:45:93:6b:e3:b9:df:b7:d9:
                    9b:d5:cf:1d:4f:ce:83:77:ee:93:24:fe:c9:50:71:
                    ee:ba:f9:e3:cd:b0:64:f4:81:a3:9b:19:90:58:63:
                    75:9a:24:ec:e5:01:0d:ca:82:04:67:e8:67:4b:46:
                    bf:42:23:44:32:ef:e7:62:eb:15:b8:75:cd:16:24:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:32:0D:48:B4:03:30:49:06:DB:C7:19:4B:B8:D4:C7:CA:D3:CF:F3
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS201097.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:f800::/39

    Signature Algorithm: sha256WithRSAEncryption
         68:77:a3:3b:fc:9f:f8:fd:41:2d:6a:49:91:c5:42:b6:0d:f2:
         36:9e:20:cf:dc:c1:6d:04:4f:ca:ba:12:54:3d:b6:fa:ce:90:
         08:74:50:7e:50:4d:7e:a1:ce:68:37:db:2d:a0:16:02:27:97:
         6d:0e:26:1a:86:7f:f6:38:8f:2d:85:6a:91:5c:04:a7:cc:d5:
         da:d8:93:dd:74:65:e0:7f:e0:73:f8:9e:27:6d:95:13:ed:5a:
         a6:97:f2:f8:57:fd:58:50:ab:5c:48:29:47:a9:28:3c:a3:98:
         47:6a:d8:6e:90:3a:0c:e9:b3:b1:9c:14:59:b9:5b:7e:83:15:
         84:9a:34:07:83:b3:47:0b:43:3d:62:37:eb:69:aa:11:eb:c4:
         cb:31:2a:d8:85:4e:9d:de:37:ad:38:7b:6f:f3:7e:81:34:68:
         91:8f:d8:e0:cc:ac:50:4f:76:0e:2f:a4:92:21:8f:10:02:e9:
         4c:d9:01:1d:21:64:32:56:4e:9d:9d:dd:9a:22:33:f5:c1:c8:
         1a:a1:e8:eb:aa:3c:4e:ef:47:fe:a0:43:90:02:be:50:09:64:
         22:9a:f3:6c:ab:40:c5:fc:cb:a8:65:33:3c:46:b1:87:8e:c7:
         3d:fc:3f:33:48:f9:ee:0e:fb:6b:67:ba:eb:91:f1:c4:d4:d0:
         e1:b5:82:aa
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUEKEx9oUjD+42Rr6vdqgatLerAWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMzAzMDgxODQwMjZaFw0yNDAzMDYxODQ1MjZaMDMxMTAvBgNV
BAMTKDQzMzIwRDQ4QjQwMzMwNDkwNkRCQzcxOTRCQjhENEM3Q0FEM0NGRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeOXFoE2HJQdV/CNq+do2BBDlj
WVQ6pF4k1FYfg/+0myUmyi5vdujwYpSjZUp+Yvd3It3I98WXpHUab1n1QH6c4wWs
1T9U5OCyDfXRCsOSZF6+Ym++yU5JPfZxTE6DMAYFVwgWcxPwFsX8LvL766/2kR7Y
AT0uKMHX2FjU03k1m4lH2R/tc3wCFoxSQsfoVYsafApM9KJmGgVKgy6zn/42b3wr
3/jC1ckpTdp5bCDDSt7tLw/UejMxXF5Fk2vjud+32ZvVzx1PzoN37pMk/slQce66
+ePNsGT0gaObGZBYY3WaJOzlAQ3KggRn6GdLRr9CI0Qy7+di6xW4dc0WJE2bAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUQzINSLQDMEkG28cZS7jUx8rTz/MwHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMF0GCCsGAQUF
BwELBFEwTzBNBggrBgEFBQcwC4ZBcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29t
L3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC9BUzIwMTA5Ny5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASoG
Eof4MA0GCSqGSIb3DQEBCwUAA4IBAQBod6M7/J/4/UEtakmRxUK2DfI2niDP3MFt
BE/KuhJUPbb6zpAIdFB+UE1+oc5oN9stoBYCJ5dtDiYahn/2OI8thWqRXASnzNXa
2JPddGXgf+Bz+J4nbZUT7Vqml/L4V/1YUKtcSClHqSg8o5hHathukDoM6bOxnBRZ
uVt+gxWEmjQHg7NHC0M9YjfraaoR68TLMSrYhU6d3jetOHtv836BNGiRj9jgzKxQ
T3YOL6SSIY8QAulM2QEdIWQyVk6dnd2aIjP1wcgaoejrqjxO70f+oEOQAr5QCWQi
mvNsq0DF/MuoZTM8RrGHjsc9/D8zSPnuDvtrZ7rrkfHE1NDhtYKq
-----END CERTIFICATE-----