Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS206499.roa
File:                     AS206499.roa (raw, json)
Hash identifier:          ojfG7TcCLhtb/b6q/IYsdHusfVmwjdcw/uMxdLzZ9Z4=
Subject key identifier:   FB:31:59:78:31:42:12:A0:41:E5:A0:2F:73:55:44:5C:5F:56:5A:CA
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       56032C0AA529045A21AA1FC27A7B0A6D929050B1
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS206499.roa
Signing time:             Wed 08 Mar 2023 18:45:27 +0000
ROA not before:           Wed 08 Mar 2023 18:40:27 +0000
ROA not after:            Wed 06 Mar 2024 18:45:27 +0000
asID:                     206499
IP address blocks:        2a06:1287:3300::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:03:2c:0a:a5:29:04:5a:21:aa:1f:c2:7a:7b:0a:6d:92:90:50:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:27 2023 GMT
            Not After : Mar  6 18:45:27 2024 GMT
        Subject: CN=FB315978314212A041E5A02F7355445C5F565ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:34:19:92:34:d3:d3:ae:55:db:d6:22:99:dd:
                    cc:76:ff:be:ec:cf:25:ad:a8:26:e3:82:84:10:ff:
                    43:39:5d:7d:a0:87:db:7b:a8:51:5a:3d:fd:c8:b3:
                    7c:f2:a6:68:8d:07:87:e8:9f:ed:cb:6e:20:e5:a5:
                    fd:9c:13:6c:9f:bf:2e:3c:81:06:73:d2:d1:07:8c:
                    28:cc:82:cd:23:e1:fa:20:58:22:79:75:16:04:8e:
                    59:cc:0c:ab:6c:c9:dc:03:dc:ca:c5:95:a0:4f:a8:
                    27:e3:1c:47:56:96:84:ba:ce:d9:00:b0:7a:3b:d8:
                    72:dc:3b:5d:18:54:98:9b:3d:7b:5a:2d:ad:28:b6:
                    94:fd:b1:87:ee:67:99:7d:29:d2:3a:0c:85:34:0f:
                    15:1e:e8:c6:07:8d:8a:88:d7:d8:a3:bd:fa:5b:f0:
                    ea:cd:ba:c5:af:cc:da:98:bd:3f:27:a4:85:24:c6:
                    ba:65:4e:ca:c4:1c:8e:fc:fe:ec:6a:88:15:4b:46:
                    d9:f8:15:3f:be:0b:ff:a6:44:5b:3b:77:dd:db:aa:
                    d6:b9:37:f9:1c:3d:02:fb:ca:21:8c:3e:59:2e:c5:
                    01:35:0d:91:bd:41:b7:52:df:b8:ee:23:f1:73:02:
                    50:a7:6c:ae:e5:29:3e:e2:af:8c:74:da:87:cc:04:
                    52:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:31:59:78:31:42:12:A0:41:E5:A0:2F:73:55:44:5C:5F:56:5A:CA
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS206499.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3300::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:96:3d:49:9e:25:16:f1:3b:25:9f:98:5a:1c:8e:22:db:cb:
         e7:17:9f:81:ee:8d:49:1d:0d:36:00:b2:2d:ba:3a:a1:a6:2a:
         29:c7:ef:c7:5e:f4:9b:6d:12:af:0a:2a:fc:0a:45:fa:dc:ee:
         8e:f1:93:92:5b:db:ed:fc:ac:66:6a:e3:62:21:27:dd:56:7e:
         6e:07:ac:3f:f5:9f:44:75:be:11:0e:6b:8e:d8:96:46:27:60:
         6d:d0:d3:fe:8e:d0:5f:31:1e:ef:fa:f6:8b:21:c4:4f:b0:d9:
         82:1b:39:4b:a9:9d:55:16:9b:0c:84:43:92:b6:e5:23:95:9e:
         15:d7:39:fb:59:85:e7:a4:26:41:2b:05:ef:22:76:5b:2c:69:
         f3:d8:be:6e:3e:2b:8c:6f:0d:55:4f:1d:4d:57:c4:68:f1:fc:
         4d:80:1c:bf:5e:36:c4:05:b6:b0:9e:fa:4c:e5:9c:f5:41:ef:
         dc:c2:d2:6f:10:57:10:ad:f8:56:e3:35:d5:b5:58:18:73:92:
         32:d1:0f:b1:33:e3:4d:86:99:c6:a9:4f:5c:84:2a:75:9d:f5:
         41:a9:66:fb:41:8d:36:b7:65:8f:d9:ab:87:15:4e:59:5d:62:
         1f:5e:d3:8f:6f:56:a8:e1:ba:d1:2d:a6:f6:2c:c3:f6:c2:37:
         b4:05:4f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----