Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS204374.roa
File:                     AS204374.roa (raw, json)
Hash identifier:          Gpm9GosjF0Fdze+Ubo1HFUfvdvfxB0va32vxPJSI24M=
Subject key identifier:   F8:FC:40:6D:FA:D9:9E:42:AC:80:79:7F:58:47:61:56:0B:CD:4E:60
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       1EB8ADFE0553D53752534F74C495A6D4F0EA6E75
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS204374.roa
Signing time:             Wed 08 Mar 2023 18:45:30 +0000
ROA not before:           Wed 08 Mar 2023 18:40:30 +0000
ROA not after:            Wed 06 Mar 2024 18:45:30 +0000
asID:                     204374
IP address blocks:        2a06:1287:1300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b8:ad:fe:05:53:d5:37:52:53:4f:74:c4:95:a6:d4:f0:ea:6e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:30 2023 GMT
            Not After : Mar  6 18:45:30 2024 GMT
        Subject: CN=F8FC406DFAD99E42AC80797F584761560BCD4E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f0:33:40:30:ef:b4:e8:e1:71:43:47:e5:a1:
                    36:42:39:64:9f:f4:5b:7f:e7:67:93:e8:e3:ae:e6:
                    9f:7b:f5:04:ba:9e:a6:77:82:c6:88:fa:78:2b:41:
                    04:d3:28:96:8d:3f:d9:21:6f:ec:92:51:6b:97:fa:
                    ef:1d:92:84:83:5a:7c:f6:5a:53:90:19:cb:f0:d9:
                    00:82:51:ed:84:59:86:73:9d:cc:49:73:e0:1d:0f:
                    da:10:a1:ee:3b:e3:b9:39:16:47:7a:58:f7:69:2c:
                    15:d7:06:0e:bb:7a:25:7d:0b:1c:d8:8e:18:a4:68:
                    3f:d4:5f:54:05:f8:e3:b5:60:1a:7b:bd:1d:e9:31:
                    35:00:f8:80:26:d1:56:3f:09:56:2b:09:db:e0:9c:
                    e4:48:0b:c2:12:55:26:c2:4b:b9:02:f4:1d:8f:d7:
                    3f:68:81:5e:65:a5:de:68:1d:28:e0:39:c9:5e:42:
                    29:47:6d:e5:53:48:71:70:f4:58:1e:b9:3a:d7:07:
                    89:48:dd:7a:df:78:b0:34:0c:ae:33:ad:96:a3:3f:
                    54:85:7e:ec:54:d0:2f:c1:3d:17:f8:93:86:58:9e:
                    2b:b6:90:4e:23:4c:01:ca:b4:e7:f1:79:48:16:e1:
                    87:c2:f2:ae:eb:e7:cf:a6:cb:9c:04:c7:db:6b:03:
                    d6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FC:40:6D:FA:D9:9E:42:AC:80:79:7F:58:47:61:56:0B:CD:4E:60
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS204374.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:08:d7:b9:5f:4a:b2:7c:17:b0:1e:37:05:97:8e:0d:c5:
         4a:b8:ed:d9:5a:b7:6a:ee:f1:bf:fb:eb:47:d9:29:cb:62:71:
         b3:cd:a7:f0:c9:cf:6b:eb:8a:c9:49:bb:7a:d8:cd:e8:0d:bf:
         f3:19:0e:fc:31:7e:50:c2:bb:e8:0d:02:1a:0d:e4:8c:38:61:
         b7:ae:d5:be:d9:86:a4:da:14:c8:80:2d:00:d8:98:11:16:16:
         dd:8a:4a:ce:db:3c:61:71:73:c0:e5:78:4c:7d:1a:5b:81:20:
         53:01:d3:47:16:9c:80:00:26:b9:d2:b0:f4:e2:b7:b7:aa:eb:
         b1:1a:c7:60:ce:50:4f:e4:1a:e6:fd:45:75:e5:09:0d:0e:d3:
         1d:41:47:5f:3f:ec:d8:73:5f:6b:95:05:8e:e9:51:33:8a:c4:
         6c:f4:9f:7a:10:89:11:90:fb:6e:f2:d1:a5:9d:2b:82:07:07:
         19:f7:6e:63:e2:ba:7c:0b:f4:7b:cf:f5:74:6d:0e:19:ea:54:
         14:40:ac:4e:1b:e3:45:88:17:d5:cb:82:fc:26:b8:1a:c5:ad:
         70:2b:7a:c1:38:22:e0:6e:90:95:72:05:af:14:89:4f:f5:45:
         1c:93:cd:29:87:b1:8c:b0:c7:b2:54:45:af:39:38:08:3a:58:
         90:70:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----