Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202988.roa
File:                     AS202988.roa (raw, json)
Hash identifier:          HPKN2lx8YtoTKPLUOnPTH94WFjAQMs4lQYVZDRvR+4k=
Subject key identifier:   DE:5E:37:1B:89:50:76:FA:0A:2A:91:8A:7C:81:AA:50:27:1E:FD:B9
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       346E4E17C19D93AF1FB4026E2419485762807E50
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202988.roa
Signing time:             Wed 08 Mar 2023 18:45:27 +0000
ROA not before:           Wed 08 Mar 2023 18:40:27 +0000
ROA not after:            Wed 06 Mar 2024 18:45:27 +0000
asID:                     202988
IP address blocks:        2a05:dfc7:1500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6e:4e:17:c1:9d:93:af:1f:b4:02:6e:24:19:48:57:62:80:7e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:27 2023 GMT
            Not After : Mar  6 18:45:27 2024 GMT
        Subject: CN=DE5E371B895076FA0A2A918A7C81AA50271EFDB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:d7:15:66:96:b0:85:bf:76:f4:fb:fa:4d:
                    e6:d3:95:40:51:4e:7b:ae:e5:7a:08:cf:19:5c:b9:
                    cb:52:38:bc:61:4f:95:ef:d1:26:57:08:a1:bf:f5:
                    21:81:e6:6e:31:af:0b:9b:4e:f0:6a:1c:f9:04:69:
                    ac:a2:38:c7:67:f4:da:fe:c1:68:06:9a:da:a5:72:
                    eb:b7:9e:d1:34:74:72:6a:7b:71:e9:e9:c0:8c:04:
                    15:39:93:3d:2e:cf:e8:bd:2c:66:46:ff:2e:5d:43:
                    d4:50:31:ab:0c:e7:0d:db:db:6f:f5:96:ff:56:44:
                    cc:33:70:e2:1e:7a:36:b2:ee:64:d8:8b:e3:b6:5e:
                    62:7d:36:21:d8:5f:98:93:a1:7a:fc:7c:ab:84:32:
                    23:04:48:48:88:bb:ad:7f:e9:ff:14:d5:46:76:f5:
                    9d:e3:e6:c0:f5:ff:ff:13:83:99:fb:2f:2f:b4:fc:
                    e4:06:36:3a:26:d0:4e:98:76:97:71:53:ca:61:9a:
                    ff:21:03:f8:91:38:44:97:b4:f2:b6:bd:53:bd:3b:
                    3b:aa:df:8e:77:ca:09:32:fe:6f:01:72:4a:4d:7f:
                    40:e5:71:20:17:4a:64:3b:7f:2c:5b:b2:60:98:7b:
                    e1:78:ca:ce:d6:ac:ca:a1:82:4c:ec:65:ac:5e:94:
                    b8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5E:37:1B:89:50:76:FA:0A:2A:91:8A:7C:81:AA:50:27:1E:FD:B9
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS202988.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:4c:14:4d:ae:20:39:49:a8:16:8c:08:49:57:b0:47:6b:4f:
         41:10:b5:d0:f8:0b:35:d3:e0:c8:ba:79:46:ba:d6:76:b4:f3:
         6c:ce:2a:68:27:ef:53:f8:70:25:80:24:9d:96:c8:1d:63:68:
         8d:95:8b:57:10:2b:45:56:01:14:03:eb:29:b6:4a:dc:78:25:
         12:9e:be:50:23:1a:4f:f2:75:1f:dc:61:f8:ec:81:3d:10:9f:
         d3:ea:68:03:c3:0e:ca:00:a8:ae:75:69:a0:bb:cf:dd:02:27:
         b0:85:af:e2:47:df:4a:d4:47:39:42:58:fc:a2:25:c0:a7:36:
         76:25:54:ad:8c:be:ed:37:ab:3d:f7:b9:3c:84:4d:f8:98:39:
         6a:e5:52:91:c6:3f:88:f2:9d:fc:d5:75:55:90:89:37:43:37:
         31:fc:2f:e9:a9:4c:a0:a9:23:1b:aa:de:91:49:f2:7c:eb:1b:
         c3:9c:cd:60:0c:d9:93:0a:d1:bb:ea:64:4d:23:b7:10:a6:24:
         a1:6b:2a:fa:8f:9a:88:54:b2:78:7a:dc:8e:c3:eb:e7:df:41:
         38:73:8e:7a:e6:eb:fe:ee:b9:94:35:a4:e9:90:64:e5:21:f9:
         d0:20:17:52:53:57:13:54:42:82:ed:33:5c:24:9c:c5:1b:19:
         c9:81:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----