Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS205848.roa
File:                     AS205848.roa (raw, json)
Hash identifier:          j8A9XfOPabjUbAEhNXPzQIxn9/GUfWWRyZLbiq7Pc2w=
Subject key identifier:   A1:8E:7C:67:57:33:00:70:29:53:26:98:8C:C5:2B:0D:8A:AB:E6:E7
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       5277CE291D9C1E1C22D192E229071532C8E83957
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS205848.roa
Signing time:             Wed 08 Mar 2023 18:45:20 +0000
ROA not before:           Wed 08 Mar 2023 18:40:20 +0000
ROA not after:            Wed 06 Mar 2024 18:45:20 +0000
asID:                     205848
IP address blocks:        2a05:dfc7:4200::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:77:ce:29:1d:9c:1e:1c:22:d1:92:e2:29:07:15:32:c8:e8:39:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:20 2023 GMT
            Not After : Mar  6 18:45:20 2024 GMT
        Subject: CN=A18E7C6757330070295326988CC52B0D8AABE6E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:81:cf:56:5e:0e:e3:37:f1:66:e1:ab:e3:
                    b9:9b:00:4d:7d:15:b3:20:d4:57:9a:f9:f2:6c:ce:
                    5b:fc:22:f5:6e:56:e6:30:b8:51:ec:dd:40:a5:2e:
                    92:d8:9b:4a:50:13:7c:fd:46:ba:f0:f1:e4:fe:32:
                    a9:3c:04:5d:9d:ae:f6:bc:f7:e0:7f:ff:3d:8f:b3:
                    0d:42:45:a7:ca:b5:98:79:5c:07:77:ef:3b:e2:24:
                    22:ae:02:a4:ac:ea:2f:af:a5:e5:1a:e4:c4:1a:72:
                    98:f9:d8:8f:b5:37:6b:43:06:ca:ab:c8:39:79:2d:
                    2b:91:4d:b0:e2:c3:52:c3:d1:8f:67:ad:00:e5:56:
                    5f:dc:b8:0e:6a:db:de:73:6b:06:56:aa:ce:17:16:
                    e8:9a:a4:1a:7e:0b:de:5e:bc:b5:c2:71:0e:82:8d:
                    99:77:c8:6a:70:dc:33:0c:e7:4d:91:09:7b:bb:7d:
                    2e:62:29:4a:c1:15:33:d0:2b:6c:9b:15:74:53:37:
                    86:63:0e:eb:05:33:bb:4d:50:80:89:a2:73:b7:0e:
                    ff:a9:d3:3f:09:75:66:bf:a9:f2:66:ed:17:4e:cf:
                    3b:91:b9:4c:56:84:37:b2:67:ba:48:99:1a:f4:53:
                    58:7f:4e:b7:95:a4:39:8e:d6:60:bf:29:9c:e2:c2:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8E:7C:67:57:33:00:70:29:53:26:98:8C:C5:2B:0D:8A:AB:E6:E7
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS205848.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4200::/39

    Signature Algorithm: sha256WithRSAEncryption
         ca:58:1f:53:f8:5f:f5:7f:4b:de:a1:2e:2f:4c:39:a9:82:6c:
         58:3f:76:3e:6f:0e:7b:60:26:4d:ba:eb:41:73:80:d5:d5:dd:
         53:ac:ab:30:e7:b3:4d:1f:cf:ad:e5:55:68:9b:1e:4d:a2:f7:
         84:98:67:bc:67:fc:f6:fe:7f:e7:72:11:10:84:5d:e7:40:ba:
         1e:c5:69:25:40:a5:b4:7f:2e:c2:42:61:9a:97:91:3c:c4:97:
         e1:89:c5:4d:fd:64:a3:84:56:f9:6e:da:0e:fa:97:e6:2d:07:
         f0:34:66:52:ff:8a:f7:59:28:58:e5:56:40:49:3d:1a:53:d2:
         eb:31:16:76:c0:63:c1:10:90:76:8b:05:f1:8a:90:bd:30:76:
         d6:23:79:de:de:38:7f:e4:f9:0a:55:e4:11:0d:92:3b:9a:58:
         ca:b1:48:07:26:08:86:e7:0a:31:a3:05:6b:28:c4:af:40:9a:
         14:b9:fd:af:af:61:83:04:ff:fd:b4:4a:8d:38:0b:8f:c0:58:
         95:9d:8e:74:55:4a:7c:c8:82:50:e9:be:91:99:6c:9c:81:80:
         91:33:80:6f:07:a6:9e:f6:04:47:98:a4:38:77:09:2c:c1:12:
         2a:c1:dc:c4:86:a7:b0:8d:ea:c0:eb:2c:de:90:05:e1:bc:cc:
         7c:ff:a1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----