Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203023.roa
File:                     AS203023.roa (raw, json)
Hash identifier:          /ooM2QXZVy8KQXLxmK9B1y92SB1xgVmr8Su31QB5DTo=
Subject key identifier:   29:96:5E:0E:16:C8:6A:B1:45:D1:C4:3A:38:9A:14:20:7C:60:12:7A
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       28ABDD841188E70034C6BE085F6ABB4AE5430B3D
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203023.roa
Signing time:             Wed 08 Mar 2023 18:45:24 +0000
ROA not before:           Wed 08 Mar 2023 18:40:24 +0000
ROA not after:            Wed 06 Mar 2024 18:45:24 +0000
asID:                     203023
IP address blocks:        2a06:1287:300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ab:dd:84:11:88:e7:00:34:c6:be:08:5f:6a:bb:4a:e5:43:0b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:24 2023 GMT
            Not After : Mar  6 18:45:24 2024 GMT
        Subject: CN=29965E0E16C86AB145D1C43A389A14207C60127A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:67:31:d7:23:21:5c:17:ab:94:67:77:99:
                    1f:2f:22:c0:9f:90:cf:4d:48:5a:05:1d:b5:b7:5b:
                    65:cb:a4:05:98:c4:c3:68:6a:ae:2b:15:ea:49:db:
                    e8:ac:3a:1b:fb:e4:ee:81:2e:c9:df:50:c0:7b:b1:
                    57:c7:56:00:20:24:df:8d:d8:f1:0e:32:51:18:68:
                    a2:41:66:3e:e2:35:7a:e2:9b:b1:e6:f1:02:e3:a1:
                    0f:fc:f6:77:f1:7e:2a:8e:0d:4c:5c:60:84:1b:52:
                    fb:df:ea:03:d8:5f:cc:c3:d4:1b:3d:a7:81:b9:95:
                    2a:28:35:cb:ca:82:71:32:17:0b:86:d8:cc:55:74:
                    0d:42:a4:e3:53:24:c6:6b:69:8a:85:e5:35:1d:77:
                    88:b9:db:de:45:61:3e:50:9f:a0:4d:c7:8c:3e:fa:
                    da:79:9f:1c:71:b6:be:6e:b1:93:00:33:d0:48:da:
                    e3:d6:d2:5f:ec:81:8d:d3:00:44:42:04:68:36:79:
                    c0:af:ae:d6:eb:fa:38:d1:b5:f2:e1:8a:af:00:7c:
                    af:a0:d0:7d:14:1a:b6:38:78:1d:4e:76:c8:e7:a8:
                    46:ca:4b:09:8a:4e:a7:3d:98:72:21:64:fa:0d:fc:
                    3b:aa:1a:47:73:42:73:8d:80:77:b2:fe:ca:1d:04:
                    08:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:96:5E:0E:16:C8:6A:B1:45:D1:C4:3A:38:9A:14:20:7C:60:12:7A
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:65:41:fa:70:d1:bb:e4:a6:4f:ff:a0:9b:21:5f:e4:71:7c:
         6d:3c:55:63:a2:ed:b5:55:ee:84:35:0b:95:9e:76:83:8d:97:
         7e:55:60:9b:ec:54:c0:63:9a:d7:cb:90:4a:87:d0:eb:75:ae:
         76:92:0a:5c:c8:ef:d5:12:f3:f3:ae:e3:70:c4:40:0f:bb:87:
         b9:a5:f2:25:63:9a:f5:92:fb:ed:78:4a:6b:4d:3d:7a:41:44:
         73:b4:5f:77:4b:78:fc:01:12:62:08:e6:8b:8f:e7:8b:96:b7:
         c7:37:8a:89:9e:e6:4e:50:5c:e5:a5:ce:f7:b7:aa:e4:fd:71:
         71:54:94:ba:1f:6f:06:48:2a:f3:06:e9:a0:eb:f7:2f:28:8a:
         80:47:86:e6:63:21:43:e1:0d:3c:18:b4:9d:f5:97:c4:ad:0c:
         59:09:40:89:b4:70:83:a4:76:11:0f:73:40:2e:b4:00:bb:98:
         c1:b9:d3:6b:ad:d3:4d:28:c2:5c:af:e9:49:34:e8:d5:60:f5:
         27:5b:ce:72:ba:a6:5e:dc:26:1d:6c:27:c8:6a:de:d0:ab:ed:
         d5:f5:4e:12:ff:23:03:d8:7b:b9:ba:29:0c:ee:b0:21:57:0d:
         b8:0b:de:cf:22:30:8c:58:09:b3:01:2b:fd:4b:ee:1c:d8:c0:
         9e:5e:db:bc
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUKKvdhBGI5wA0xr4IX2q7SuVDCz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMzAzMDgxODQwMjRaFw0yNDAzMDYxODQ1MjRaMDMxMTAvBgNV
BAMTKDI5OTY1RTBFMTZDODZBQjE0NUQxQzQzQTM4OUExNDIwN0M2MDEyN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7uWcx1yMhXBerlGd3mR8vIsCf
kM9NSFoFHbW3W2XLpAWYxMNoaq4rFepJ2+isOhv75O6BLsnfUMB7sVfHVgAgJN+N
2PEOMlEYaKJBZj7iNXrim7Hm8QLjoQ/89nfxfiqODUxcYIQbUvvf6gPYX8zD1Bs9
p4G5lSooNcvKgnEyFwuG2MxVdA1CpONTJMZraYqF5TUdd4i5295FYT5Qn6BNx4w+
+tp5nxxxtr5usZMAM9BI2uPW0l/sgY3TAERCBGg2ecCvrtbr+jjRtfLhiq8AfK+g
0H0UGrY4eB1OdsjnqEbKSwmKTqc9mHIhZPoN/DuqGkdzQnONgHey/sodBAjHAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUKZZeDhbIarFF0cQ6OJoUIHxgEnowHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMF0GCCsGAQUF
BwELBFEwTzBNBggrBgEFBQcwC4ZBcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29t
L3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC9BUzIwMzAyMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoG
EocDMA0GCSqGSIb3DQEBCwUAA4IBAQDHZUH6cNG75KZP/6CbIV/kcXxtPFVjou21
Ve6ENQuVnnaDjZd+VWCb7FTAY5rXy5BKh9Drda52kgpcyO/VEvPzruNwxEAPu4e5
pfIlY5r1kvvteEprTT16QURztF93S3j8ARJiCOaLj+eLlrfHN4qJnuZOUFzlpc73
t6rk/XFxVJS6H28GSCrzBumg6/cvKIqAR4bmYyFD4Q08GLSd9ZfErQxZCUCJtHCD
pHYRD3NALrQAu5jBudNrrdNNKMJcr+lJNOjVYPUnW85yuqZe3CYdbCfIat7Qq+3V
9U4S/yMD2Hu5uikM7rAhVw24C97PIjCMWAmzASv9S+4c2MCeXtu8
-----END CERTIFICATE-----