Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          azB2HdtIoR3GG3Oi+HoYPdoUsVyydU0XChNdkhk0dvI=
Subject key identifier:   C1:50:0F:0E:DB:AC:B1:70:74:16:B4:4A:18:45:EF:61:CA:94:47:87
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       15374165C104EFA093D7DF14B1E3B7B9C29A40B3
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS20473.roa
Signing time:             Wed 08 Mar 2023 18:45:28 +0000
ROA not before:           Wed 08 Mar 2023 18:40:28 +0000
ROA not after:            Wed 06 Mar 2024 18:45:28 +0000
asID:                     20473
IP address blocks:        2a05:dfc7:6700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:37:41:65:c1:04:ef:a0:93:d7:df:14:b1:e3:b7:b9:c2:9a:40:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:28 2023 GMT
            Not After : Mar  6 18:45:28 2024 GMT
        Subject: CN=C1500F0EDBACB1707416B44A1845EF61CA944787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c6:39:78:38:b9:f1:6e:08:8e:1e:99:c6:89:
                    cf:f0:b3:1b:b1:15:1d:10:f1:7f:a1:e0:2a:2b:cf:
                    b2:b3:08:c9:7c:88:f1:44:0c:d1:a2:b2:f7:ad:8d:
                    4b:67:7d:c6:0d:aa:19:10:02:67:f8:f8:13:de:d2:
                    0a:8c:1a:a8:5f:6a:f5:74:21:07:9d:f7:7e:df:a8:
                    62:4f:ba:d2:67:83:22:63:83:7c:d8:a8:0a:ea:00:
                    d8:77:28:f9:d9:07:34:1a:37:45:4b:ce:78:e1:86:
                    38:34:75:c8:db:45:52:2c:2a:3b:4e:65:94:43:ee:
                    8b:08:99:12:c0:bc:82:6a:34:6d:b9:0d:c0:63:58:
                    08:b6:ba:aa:68:e2:75:4a:94:fb:9c:01:4c:d3:54:
                    2d:e5:53:2c:0b:3f:ba:16:0c:56:d6:41:fe:28:52:
                    50:27:81:a6:ab:10:cb:9d:79:6c:0a:29:b9:c4:46:
                    d0:88:b9:a0:54:c9:e3:f8:3b:a5:a6:24:f5:f4:b7:
                    5b:b8:af:d8:b1:0b:f2:b1:7c:e4:4b:57:e3:44:44:
                    c1:09:77:af:76:a4:cf:db:59:8a:ff:b1:2f:59:47:
                    f3:bd:94:06:2b:a8:8a:98:d9:93:86:9f:09:95:70:
                    1b:d0:80:f2:12:2c:61:6e:47:2d:b4:a3:1d:ae:19:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:50:0F:0E:DB:AC:B1:70:74:16:B4:4A:18:45:EF:61:CA:94:47:87
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6700::/40

    Signature Algorithm: sha256WithRSAEncryption
         c2:1b:bc:32:c0:7e:08:c2:48:b0:b4:84:0d:8a:bf:20:3e:01:
         5e:8f:f7:d3:d1:02:96:15:fc:9e:3b:05:68:7f:8f:c2:90:fd:
         c0:8e:44:35:d9:db:7b:5a:45:6e:06:33:95:d5:b7:10:d9:82:
         77:3f:02:1a:74:50:dd:57:83:a6:33:68:50:b9:6e:2d:52:db:
         99:69:86:0a:dc:6e:b1:b7:49:67:76:d0:3d:40:22:9c:ff:f4:
         ca:51:8b:ad:eb:39:4e:9e:ee:c6:21:42:5c:24:3a:5f:ea:b6:
         b2:8d:dd:3c:b0:49:2d:ad:9b:36:7a:46:0e:76:12:51:40:0a:
         76:6e:0e:38:62:f9:c3:ba:eb:a1:48:a7:b7:6b:89:ac:f3:0d:
         e4:6e:4f:c9:b9:7c:35:26:7e:e4:bb:f8:b4:ba:4b:17:17:bc:
         6a:7c:59:f2:5d:3a:13:2f:80:77:2c:dc:bb:87:ed:72:77:74:
         85:35:6c:18:c7:9b:66:bf:02:d7:15:f5:f3:a8:ab:7a:6b:35:
         db:f1:ab:8b:ff:9e:fb:ce:b0:d5:42:23:b1:a9:37:97:93:3c:
         56:47:e3:15:86:ba:02:68:7a:9a:af:21:a1:bd:be:f7:d8:ce:
         f8:47:78:f5:ef:9a:21:18:ec:54:ec:a7:93:22:46:b0:50:b6:
         c5:05:51:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----