Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203868.roa
File:                     AS203868.roa (raw, json)
Hash identifier:          hEZVSEUZgfqAhmuoEfuF0GYB6BaJb2LRnHgVO9T3L2w=
Subject key identifier:   A2:81:A9:3B:B4:11:85:2F:3B:87:E2:7B:12:BE:83:2E:5F:4A:8B:5D
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       420BB22167A987DEFE06ECF97EF18D45804D34AE
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203868.roa
Signing time:             Wed 08 Mar 2023 18:45:29 +0000
ROA not before:           Wed 08 Mar 2023 18:40:29 +0000
ROA not after:            Wed 06 Mar 2024 18:45:29 +0000
asID:                     203868
IP address blocks:        2a06:1287:900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0b:b2:21:67:a9:87:de:fe:06:ec:f9:7e:f1:8d:45:80:4d:34:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:29 2023 GMT
            Not After : Mar  6 18:45:29 2024 GMT
        Subject: CN=A281A93BB411852F3B87E27B12BE832E5F4A8B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:0f:1a:78:f7:ba:63:2b:83:80:39:bb:05:
                    66:0d:ff:c8:80:dd:06:e7:3d:9c:05:fa:e2:4c:29:
                    4f:a9:90:9f:6f:ce:9c:2c:c3:b1:20:2c:13:e8:91:
                    25:70:3d:d5:c8:93:9f:c2:40:df:31:c3:08:7a:7f:
                    b0:4b:08:3c:3a:1e:dc:52:72:50:97:17:c7:10:b1:
                    a2:cf:80:70:02:7f:ca:4e:c6:58:10:28:47:97:99:
                    86:3a:a0:1a:c1:60:c8:b2:92:a6:81:21:22:04:88:
                    0a:85:b2:ce:13:5b:08:43:af:06:09:ae:41:1f:35:
                    25:32:90:1a:da:fb:c1:c4:0d:d4:e6:f4:f3:3e:23:
                    fb:ae:09:18:de:e8:23:e6:38:5e:92:94:e3:b1:3a:
                    9a:68:7e:64:12:1b:d8:83:74:f8:8a:35:3f:3f:68:
                    ed:fb:11:c6:b5:53:06:c2:cf:c4:9f:03:b2:56:e5:
                    c7:70:84:0f:6b:2c:d7:f0:87:15:76:b3:29:5d:6b:
                    bc:74:38:23:10:ce:b7:4b:18:e1:6a:c2:ef:3d:54:
                    9e:b1:ee:53:87:12:3e:ed:4a:4f:92:38:e3:59:bd:
                    bc:b1:b6:d7:02:c3:89:05:a7:54:4a:d6:a7:3f:7b:
                    3a:94:2a:01:02:0d:73:4f:ab:4c:18:6f:cd:7b:c6:
                    0b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:81:A9:3B:B4:11:85:2F:3B:87:E2:7B:12:BE:83:2E:5F:4A:8B:5D
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS203868.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:db:be:fd:79:28:30:2e:e3:56:0b:83:95:e0:f3:78:0d:64:
         ae:3b:60:04:22:c4:95:28:cb:6d:be:17:62:7c:cb:43:61:1a:
         4e:c5:0f:b5:15:3f:c5:08:3f:00:2c:88:c8:dd:5d:d9:b6:d3:
         71:34:83:4f:05:3b:33:56:22:be:08:71:ad:fa:20:29:fd:31:
         94:d5:aa:e7:ae:36:a2:10:3a:92:67:a0:2e:63:88:02:f3:fa:
         ea:f9:40:1f:56:fb:b9:cf:63:6c:40:bf:02:f5:f5:b1:6b:26:
         ac:8d:38:94:41:d2:68:3c:bf:51:37:11:81:18:12:40:b9:f0:
         10:7a:33:00:a6:78:58:aa:40:6e:1a:5c:10:ba:57:54:94:3a:
         2d:bd:92:07:45:39:36:01:e6:c9:72:89:5c:c0:c0:ad:33:98:
         ac:16:61:93:5d:0a:1f:06:43:75:b1:2b:10:41:c3:5d:10:43:
         ea:fe:d6:dc:e3:51:35:9d:21:4d:ce:c8:11:02:41:dd:51:bb:
         fe:b0:fe:02:89:90:91:03:4f:b3:6d:f5:77:9b:0c:fa:e3:88:
         6e:f9:1b:30:c2:fc:9a:0c:ec:9f:f3:5d:d8:5b:5c:07:54:e9:
         23:9f:ad:fa:4c:b8:44:82:35:a8:52:2a:05:08:cf:51:04:82:
         80:5e:2d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----