Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202338.roa
File:                     AS202338.roa (raw, json)
Hash identifier:          yu5kqiPh+0SFE1/Mmqp28Ii58Iw2E1R8Lt1kAoMKTr0=
Subject key identifier:   7A:08:A8:64:A6:D1:B8:6B:65:F5:EA:0C:67:13:81:99:4B:AB:EC:F6
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       0837A242F95C1758D37670381D3E1EAFED724391
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202338.roa
Signing time:             Sat 25 Mar 2023 18:37:55 +0000
ROA not before:           Sat 25 Mar 2023 18:32:55 +0000
ROA not after:            Sat 23 Mar 2024 18:37:55 +0000
asID:                     202338
IP address blocks:        2a05:dfc7:6900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:37:a2:42:f9:5c:17:58:d3:76:70:38:1d:3e:1e:af:ed:72:43:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar 25 18:32:55 2023 GMT
            Not After : Mar 23 18:37:55 2024 GMT
        Subject: CN=7A08A864A6D1B86B65F5EA0C671381994BABECF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:26:60:fc:2e:be:4f:a3:b4:22:71:21:f2:97:
                    84:d8:1c:57:88:64:b9:3e:98:89:c7:e0:86:40:1f:
                    2b:75:9b:11:04:e7:43:03:9a:6b:10:16:0b:1e:88:
                    88:d6:5f:0f:58:d6:6e:eb:e7:da:d2:83:d8:25:32:
                    dc:e3:2c:2d:c8:2e:a5:fd:ff:92:89:3e:e7:59:76:
                    dc:e5:b1:82:da:05:e4:57:dd:ee:e6:42:db:a3:0e:
                    a9:71:5a:7f:da:00:b0:78:01:9a:62:60:ea:4b:16:
                    73:24:11:f7:2f:fa:50:fc:1e:af:5b:41:a6:c5:93:
                    87:8c:28:69:1f:eb:22:1d:a7:bf:23:dc:d0:2f:0a:
                    45:23:7e:e2:7c:de:2f:68:cd:b3:40:85:99:5b:d0:
                    a6:44:a5:e4:89:b4:3a:6c:5d:6c:6e:1c:fe:be:7a:
                    4e:54:9e:ab:4c:b8:29:39:cd:bf:34:b8:62:8e:53:
                    91:e3:a2:b7:1c:e0:f4:66:0c:1d:38:2e:f5:ab:db:
                    0f:b6:33:dc:2d:9c:23:20:76:0d:ee:e2:ff:59:83:
                    70:1c:a9:9a:74:cf:dd:bf:6a:2a:e6:c5:8d:d2:ff:
                    09:c7:ae:ab:fe:37:6b:8b:9e:1f:5d:50:46:fd:dd:
                    f3:5d:4f:70:ca:85:ac:de:d5:25:bb:19:df:a6:e4:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:08:A8:64:A6:D1:B8:6B:65:F5:EA:0C:67:13:81:99:4B:AB:EC:F6
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6900::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:15:29:81:bd:5d:70:a6:99:dc:6e:9d:dd:11:d6:cc:5a:99:
         cd:6f:c0:70:f6:f5:24:ce:22:f8:89:21:aa:76:a0:a2:1f:6d:
         fa:37:4c:88:6a:c6:e0:76:22:cf:77:6d:38:c4:87:ff:9e:ea:
         e3:92:34:b9:bf:70:93:28:cb:c5:7c:7a:4c:44:7c:c0:34:3c:
         db:3c:d4:4c:66:7c:68:53:97:48:1a:81:0c:5b:43:63:65:4b:
         89:7e:a6:1b:c7:14:6d:81:3a:c8:fb:86:27:cd:12:8b:0b:d6:
         e2:6c:99:c3:c8:92:b2:ab:ff:74:0a:7f:d2:97:7d:8e:82:8c:
         bb:c7:07:e8:29:e2:c7:31:de:5d:16:07:5b:27:77:01:a3:57:
         da:d9:46:5b:8b:54:da:d6:f7:1d:f0:45:24:16:e3:35:71:da:
         e2:db:6a:26:4b:c1:14:a3:8f:d9:f9:b9:d0:00:3a:8a:16:e6:
         59:de:33:8c:d0:0b:98:3f:53:fd:28:41:69:34:9a:b7:1c:4f:
         3d:c3:31:98:6e:e6:74:f6:a9:0f:c8:37:08:9e:0e:96:79:e2:
         9a:e4:b7:47:f2:97:0e:58:c2:a2:36:66:90:2f:c3:9c:47:07:
         50:c3:eb:2f:b8:bd:1d:fc:4c:94:3a:7c:37:93:90:69:ec:64:
         cf:f6:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----