Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS205531.roa
File:                     AS205531.roa (raw, json)
Hash identifier:          ROXdywqd6Z5C9I4qhxK9NKooItYVN37OeTnyQoeCt6s=
Subject key identifier:   90:F7:0E:DE:82:C7:82:16:CC:F9:49:94:83:3F:66:66:D2:09:9D:EB
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       3E102040FBE0492DCD346946F7FA19B956A055B0
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS205531.roa
Signing time:             Wed 08 Mar 2023 18:45:28 +0000
ROA not before:           Wed 08 Mar 2023 18:40:28 +0000
ROA not after:            Wed 06 Mar 2024 18:45:28 +0000
asID:                     205531
IP address blocks:        2a05:dfc7:1000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:10:20:40:fb:e0:49:2d:cd:34:69:46:f7:fa:19:b9:56:a0:55:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:28 2023 GMT
            Not After : Mar  6 18:45:28 2024 GMT
        Subject: CN=90F70EDE82C78216CCF94994833F6666D2099DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:20:81:55:ba:54:bf:bd:8b:c2:ee:a4:24:
                    33:6e:3f:ea:7b:af:9b:53:7c:11:a4:2e:5b:88:08:
                    c8:4b:cc:c1:c9:1c:11:38:5e:a3:fa:44:8e:28:7e:
                    00:cd:86:7c:0e:07:06:e7:06:70:5b:50:cc:45:cf:
                    be:4a:61:5f:f4:35:af:c2:97:be:0b:55:a7:d0:3f:
                    80:e6:18:6b:d7:b7:4a:a7:ce:27:37:97:b4:e5:6a:
                    e6:5c:14:c0:f5:c4:35:34:9f:2f:b8:ed:53:91:98:
                    d7:ad:33:c0:99:52:03:da:e5:50:b3:3b:bd:60:f0:
                    7d:1f:3f:c1:d7:83:1c:ea:27:07:cd:cf:4d:71:45:
                    7a:65:7e:59:23:f3:e1:db:4d:7b:c4:df:92:b5:ad:
                    2d:86:17:ed:93:13:3c:98:e7:a8:ed:52:47:48:56:
                    84:c3:6e:d4:8d:fe:43:95:41:b6:f5:6e:f1:2c:dd:
                    4e:eb:57:17:0a:64:54:c2:9c:f6:4b:f6:15:fc:e1:
                    db:62:9b:63:2c:39:97:39:c1:52:87:4a:36:c6:8b:
                    6f:7b:79:5c:e6:58:08:59:f2:0a:b7:1d:43:6a:36:
                    c4:60:f3:0b:4f:eb:fc:3f:eb:03:e4:20:07:5a:4e:
                    12:f1:be:f1:60:fc:f3:4d:36:7e:50:18:d6:c1:33:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F7:0E:DE:82:C7:82:16:CC:F9:49:94:83:3F:66:66:D2:09:9D:EB
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS205531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         de:c8:8e:8c:ad:b1:55:1a:fe:6a:5d:da:9f:0d:01:03:42:fd:
         1c:0f:5c:7d:56:80:9c:a6:55:b0:68:86:3c:95:40:96:2a:0e:
         b6:a8:60:95:db:22:73:5e:69:2c:50:b7:27:35:b5:58:de:29:
         58:ca:fa:e2:06:00:99:77:ca:36:40:43:9e:e6:cc:9d:13:d5:
         f5:62:04:7e:1d:ee:8b:34:6a:26:5d:cf:10:7b:25:a2:20:b5:
         f1:16:28:d9:7c:f0:64:ae:7a:50:0c:d8:2a:92:ae:cc:52:15:
         64:1e:7b:d6:f3:85:3c:2b:99:45:f2:f3:0a:08:04:80:5f:14:
         e1:94:d0:1a:00:cf:0e:cf:de:7d:64:65:c8:ef:33:3d:9f:4e:
         91:cb:9f:02:1e:00:6d:a5:75:3c:33:43:ba:0d:8a:d6:e8:b5:
         88:6f:3a:71:0b:70:11:5e:5c:50:c9:f1:b4:de:cb:6d:20:c1:
         f4:4e:1f:da:7e:bd:a3:29:9d:6e:c3:b3:e1:c3:20:d2:3c:f0:
         f4:0a:ec:06:cf:52:05:87:bd:ff:8f:cc:63:16:ae:0b:3a:82:
         cf:5b:a7:c3:73:a1:99:d7:c5:5a:e6:ca:46:94:d4:2c:7c:ac:
         0d:23:9f:c9:32:18:d2:cd:3e:24:4a:41:37:aa:d5:da:4e:66:
         3e:8c:13:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----