Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS204829.roa
File:                     AS204829.roa (raw, json)
Hash identifier:          wlxNCAanpUY/f8WeAkwCv7nS9CW/fFWtgvRfm0FDBSA=
Subject key identifier:   A0:D5:91:7D:A1:79:BE:A6:2C:C5:77:D5:08:E6:7A:97:EA:10:69:C8
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       31CAB17A9E8A8658ADD3048077DF3AEDE88729B2
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS204829.roa
Signing time:             Tue 21 Mar 2023 11:37:13 +0000
ROA not before:           Tue 21 Mar 2023 11:32:13 +0000
ROA not after:            Tue 19 Mar 2024 11:37:13 +0000
asID:                     204829
IP address blocks:        2a05:dfc7:9600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ca:b1:7a:9e:8a:86:58:ad:d3:04:80:77:df:3a:ed:e8:87:29:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar 21 11:32:13 2023 GMT
            Not After : Mar 19 11:37:13 2024 GMT
        Subject: CN=A0D5917DA179BEA62CC577D508E67A97EA1069C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:cc:42:f7:9d:6d:53:5b:18:9a:c6:9b:56:
                    aa:58:11:d8:64:79:67:1d:4b:c0:74:f9:b5:43:92:
                    7d:4e:18:d5:9e:68:a4:bb:66:dc:d7:69:77:b6:24:
                    7e:80:08:69:85:7a:22:ed:f3:be:8a:e3:7b:0a:e8:
                    3c:2d:eb:5a:21:c8:f6:b1:05:66:8a:a9:d8:f4:56:
                    fe:19:ad:87:83:23:17:e9:4b:4d:81:9c:13:ad:e5:
                    85:39:a7:83:e3:11:3c:e8:74:c8:5f:34:4a:9f:27:
                    50:86:a4:4d:67:60:81:ef:a6:c2:4d:d5:45:88:f3:
                    9b:91:17:e0:b7:e3:b1:a7:ad:ed:64:40:36:77:b1:
                    d1:7d:53:f2:69:82:56:59:09:1c:d9:11:05:dd:bd:
                    91:40:4a:22:5a:a4:99:bd:da:4e:29:32:63:67:a3:
                    eb:f1:02:5f:12:8a:b1:5e:1c:41:c7:b6:94:6d:1e:
                    f9:e1:8e:9d:a5:28:d6:62:24:61:44:2b:97:d5:f4:
                    39:74:40:c2:e9:14:19:a0:f6:57:9f:ec:72:68:14:
                    b4:b1:b9:58:4a:6d:77:94:af:9e:f0:84:df:9e:4f:
                    5f:c6:42:53:b6:32:ff:87:e2:1f:70:c8:a5:33:f8:
                    cd:5b:82:03:09:73:d6:fe:c3:2b:e4:9f:2b:cb:51:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D5:91:7D:A1:79:BE:A6:2C:C5:77:D5:08:E6:7A:97:EA:10:69:C8
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS204829.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:9600::/39

    Signature Algorithm: sha256WithRSAEncryption
         50:22:1b:f2:c7:80:52:ec:a6:4e:a8:d6:e2:c0:0a:33:6f:af:
         35:a2:e2:3d:ba:35:d8:04:71:1d:64:db:96:cb:44:76:0b:51:
         eb:ba:fa:f4:5f:3f:49:80:c4:be:93:86:90:b2:c3:c9:6d:d4:
         63:16:63:03:bd:ff:f3:2d:41:7b:9d:25:b0:76:7a:df:ac:b8:
         7b:98:73:d4:18:b4:c8:0d:3d:be:29:8d:3d:31:67:27:6e:e5:
         a5:90:01:01:89:08:1a:61:8c:5d:41:61:f2:9a:8f:fb:f6:df:
         33:b9:ef:a4:55:1c:5e:1a:c9:86:df:6e:74:61:f3:c9:b8:83:
         14:6b:95:26:74:ce:68:98:2a:c5:d5:bd:b4:f3:d4:6c:fc:b2:
         80:ab:28:85:95:19:1e:4d:89:7b:e8:28:86:37:2e:49:be:f5:
         eb:d0:79:c3:38:b1:dc:5a:5b:29:3f:52:28:21:82:68:0c:da:
         b8:22:a2:8e:78:b5:28:0b:e0:b1:3c:e9:4c:f7:cc:23:83:5c:
         e8:7e:72:54:ae:89:a3:a9:38:e4:c2:40:2c:af:79:b7:d2:34:
         ad:c1:c5:2d:40:9d:2d:c7:69:2f:d9:90:91:f1:db:b9:e3:27:
         f5:00:15:3e:c6:e0:21:4e:16:16:bc:d6:00:d9:50:af:b3:36:
         40:af:77:bf
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUMcqxep6Khlit0wSAd9867eiHKbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMzAzMjExMTMyMTNaFw0yNDAzMTkxMTM3MTNaMDMxMTAvBgNV
BAMTKEEwRDU5MTdEQTE3OUJFQTYyQ0M1NzdENTA4RTY3QTk3RUExMDY5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsP8xC951tU1sYmsabVqpYEdhk
eWcdS8B0+bVDkn1OGNWeaKS7ZtzXaXe2JH6ACGmFeiLt876K43sK6Dwt61ohyPax
BWaKqdj0Vv4ZrYeDIxfpS02BnBOt5YU5p4PjETzodMhfNEqfJ1CGpE1nYIHvpsJN
1UWI85uRF+C347Gnre1kQDZ3sdF9U/JpglZZCRzZEQXdvZFASiJapJm92k4pMmNn
o+vxAl8SirFeHEHHtpRtHvnhjp2lKNZiJGFEK5fV9Dl0QMLpFBmg9lef7HJoFLSx
uVhKbXeUr57whN+eT1/GQlO2Mv+H4h9wyKUz+M1bggMJc9b+wyvknyvLUQulAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUoNWRfaF5vqYsxXfVCOZ6l+oQacgwHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMF0GCCsGAQUF
BwELBFEwTzBNBggrBgEFBQcwC4ZBcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29t
L3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC9BUzIwNDgyOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGASoF
38eWMA0GCSqGSIb3DQEBCwUAA4IBAQBQIhvyx4BS7KZOqNbiwAozb681ouI9ujXY
BHEdZNuWy0R2C1Hruvr0Xz9JgMS+k4aQssPJbdRjFmMDvf/zLUF7nSWwdnrfrLh7
mHPUGLTIDT2+KY09MWcnbuWlkAEBiQgaYYxdQWHymo/79t8zue+kVRxeGsmG3250
YfPJuIMUa5UmdM5omCrF1b2089Rs/LKAqyiFlRkeTYl76CiGNy5JvvXr0HnDOLHc
WlspP1IoIYJoDNq4IqKOeLUoC+CxPOlM98wjg1zofnJUromjqTjkwkAsr3m30jSt
wcUtQJ0tx2kv2ZCR8du54yf1ABU+xuAhThYWvNYA2VCvszZAr3e/
-----END CERTIFICATE-----