Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203323.roa
File:                     AS203323.roa (raw, json)
Hash identifier:          4iR4UPR5pMOjAPX9BCzLmyLFXJu2CRm4dQDd5N6yRAM=
Subject key identifier:   E7:EC:44:01:18:78:E2:2E:99:5B:A3:CF:11:82:FB:83:6A:21:D7:5E
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       353FF43AFEA45FA5DBF2AD1F3E1F89D540E25B80
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203323.roa
Signing time:             Wed 08 Mar 2023 18:45:19 +0000
ROA not before:           Wed 08 Mar 2023 18:40:19 +0000
ROA not after:            Wed 06 Mar 2024 18:45:19 +0000
asID:                     203323
IP address blocks:        2a05:dfc7:9400::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:3f:f4:3a:fe:a4:5f:a5:db:f2:ad:1f:3e:1f:89:d5:40:e2:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:19 2023 GMT
            Not After : Mar  6 18:45:19 2024 GMT
        Subject: CN=E7EC44011878E22E995BA3CF1182FB836A21D75E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:28:30:9c:67:61:2e:46:12:37:66:f6:f1:
                    58:82:17:bd:14:0d:1f:e8:75:42:91:84:20:a1:38:
                    cd:b3:34:c5:42:65:9a:1d:ed:14:ee:e9:63:8f:09:
                    c6:dd:99:88:8f:fc:7d:d9:c1:ca:bd:72:73:c6:92:
                    6c:76:1c:7a:81:37:7b:3e:5b:95:d1:cd:95:4d:ae:
                    0c:ac:15:27:5b:5b:aa:be:fa:46:6a:f1:d2:2f:01:
                    43:01:ef:30:50:de:55:53:d3:36:62:55:6b:cb:de:
                    8f:5d:a8:0f:86:42:1b:8e:77:63:44:1d:53:12:3b:
                    63:13:e7:7a:11:e2:6c:04:9c:8c:7f:c0:4f:15:dd:
                    fa:05:1a:76:db:0e:ad:bd:5c:30:9e:b5:34:bb:f1:
                    e3:d1:2d:21:e4:35:f8:b3:67:df:9a:78:13:0c:60:
                    0a:6d:6d:ca:a1:dc:90:92:19:ed:74:39:1d:6c:1b:
                    82:c4:ec:67:8e:3c:3e:38:f0:1a:e2:dd:4f:bd:f1:
                    de:e7:78:d5:cd:a6:38:05:25:37:d7:0e:5d:4c:1c:
                    85:d0:db:5a:59:31:32:c1:25:2b:14:20:79:cd:85:
                    84:7b:f6:33:0c:2c:03:f3:0d:ac:5c:be:36:33:f8:
                    a4:9c:7e:06:d1:0a:9c:4e:33:bc:24:76:a9:fc:7f:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EC:44:01:18:78:E2:2E:99:5B:A3:CF:11:82:FB:83:6A:21:D7:5E
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203323.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:9400::/39

    Signature Algorithm: sha256WithRSAEncryption
         58:18:d6:af:35:c9:56:4c:ad:55:26:53:15:68:4d:a8:83:b2:
         3b:0d:ff:47:71:42:bb:6e:f5:2c:9c:11:8d:9d:8c:e0:e4:f3:
         23:47:8d:86:e2:2a:1d:d3:46:5b:cc:28:a2:9a:63:94:97:b9:
         84:dd:83:a1:aa:bd:e3:70:85:01:3c:ee:4a:0c:c4:0f:b8:2d:
         de:60:46:66:8e:6b:7d:9e:24:e3:ed:bb:59:dc:fc:be:03:66:
         66:d2:27:b7:07:7e:af:94:93:5f:6a:1c:12:4e:2e:9f:93:4b:
         b8:93:24:cb:c3:d1:a2:6d:4f:f2:56:b5:c9:52:a5:1c:af:bc:
         76:97:60:96:2a:80:1d:22:28:3a:75:e7:33:b4:92:a1:17:9d:
         62:e0:25:bc:92:0b:74:e4:85:b4:b0:be:eb:06:21:a1:c2:d3:
         0b:28:99:f3:34:b9:b3:09:67:84:fc:1e:f5:26:42:02:2c:5d:
         87:b0:81:ba:a6:20:24:97:8c:07:05:54:5c:d2:68:b2:37:58:
         d4:15:30:9d:2c:31:16:69:63:fe:74:05:2f:5c:c2:0e:5c:77:
         c2:09:c1:f4:03:6a:32:44:6f:cb:b2:3b:e6:62:ee:2e:d5:f4:
         a6:5f:8c:10:cd:c4:9b:50:fe:a4:4a:fc:a1:20:68:58:fb:52:
         8b:ad:ed:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----