Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202828.roa
File:                     AS202828.roa (raw, json)
Hash identifier:          dBPoPZjFvyJ1U1ar+xHm5627tXvYWiAfVLJHHmASdzs=
Subject key identifier:   73:20:3A:4B:0F:6C:3E:26:2D:7F:6F:85:27:67:93:B4:9A:FC:50:E8
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       2CA198643FF69C51C39A1A4C4822A7D456F4A294
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202828.roa
Signing time:             Wed 08 Mar 2023 18:45:18 +0000
ROA not before:           Wed 08 Mar 2023 18:40:18 +0000
ROA not after:            Wed 06 Mar 2024 18:45:18 +0000
asID:                     202828
IP address blocks:        2a05:dfc7:2100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a1:98:64:3f:f6:9c:51:c3:9a:1a:4c:48:22:a7:d4:56:f4:a2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:18 2023 GMT
            Not After : Mar  6 18:45:18 2024 GMT
        Subject: CN=73203A4B0F6C3E262D7F6F85276793B49AFC50E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:60:23:64:c7:7e:74:ba:0c:d7:c5:60:7a:
                    98:df:1e:c2:51:69:15:ff:7d:a9:15:41:2f:1f:9c:
                    9d:07:5a:73:66:ec:08:7c:99:d5:1a:c4:20:20:12:
                    7f:3d:f2:17:1f:01:d8:72:20:4b:2c:00:e8:7e:ee:
                    dc:91:22:62:a6:c5:0e:8b:63:b1:6f:b2:ef:93:5c:
                    0e:5f:7d:3a:56:f0:3c:e8:31:8c:cf:53:69:d0:c8:
                    8b:fd:41:45:21:a8:22:99:b8:2f:fc:dc:7f:92:82:
                    57:db:8b:82:44:94:36:d4:b7:36:fa:0d:33:b9:1a:
                    06:70:18:f7:27:ec:d0:fb:bb:51:5d:46:db:79:05:
                    4c:58:0e:3a:4c:5e:cf:a1:9c:1b:d2:14:3c:8a:98:
                    78:40:5b:3e:4f:18:58:cc:fc:df:70:8b:22:68:38:
                    e1:fb:a1:e5:a4:a7:6f:ad:01:2f:97:1c:69:da:e1:
                    39:08:43:57:9e:2f:ba:43:b4:77:75:6d:83:bd:89:
                    1d:be:59:82:6a:c1:16:09:66:76:23:e7:4d:ca:61:
                    0a:ce:71:ac:81:01:c9:59:ae:af:77:3a:64:44:80:
                    43:e1:31:42:7c:ab:7d:42:14:3b:2e:07:93:55:6d:
                    14:c4:ca:aa:cf:40:4d:2a:e9:91:8e:d1:f0:a7:ca:
                    eb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:20:3A:4B:0F:6C:3E:26:2D:7F:6F:85:27:67:93:B4:9A:FC:50:E8
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202828.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:8a:39:0b:7d:78:da:4f:91:f8:e9:40:31:50:dc:2d:1b:c1:
         0a:71:8a:a8:53:7a:92:f4:21:2b:8d:99:6a:c5:03:cb:34:d2:
         f1:53:f5:ec:77:c2:99:63:df:4a:7b:54:97:42:e8:4b:39:5f:
         9a:21:ee:d6:8a:8e:bf:30:d1:21:71:9e:f1:54:3b:54:d1:ce:
         a0:17:09:99:42:f5:be:5e:4f:67:80:2e:cd:4b:da:7a:68:68:
         83:5d:eb:12:ff:93:dc:af:fd:09:81:3d:bc:17:e8:b1:df:06:
         58:e7:c6:fb:b8:ad:93:fe:ff:59:91:cb:d2:25:bd:37:b8:f9:
         de:02:89:89:7d:b1:47:ad:be:fe:f9:07:10:9b:f4:10:71:8f:
         ea:29:75:0a:90:72:e4:14:8e:34:16:e4:91:96:3c:ff:b2:6b:
         d6:de:0b:17:bc:20:f4:dc:58:9d:7d:3a:8a:47:47:65:f7:f4:
         56:ec:4e:8f:c8:ab:18:cc:bf:c2:c9:61:b3:77:b6:ab:e8:41:
         6e:f7:3a:d2:cb:21:d7:51:45:66:e0:16:34:c7:90:e9:04:29:
         4d:92:1e:70:22:9e:c6:cd:29:20:0f:ce:ee:e0:7d:1c:b0:ab:
         e4:23:61:88:15:9f:13:92:f9:96:da:98:01:78:d5:31:ac:b0:
         e4:c8:4d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----