Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS208223.roa
File:                     AS208223.roa (raw, json)
Hash identifier:          XhRzWr20DFpt1tiUkwpoIvrT2E7K335wyKG0DOebB2U=
Subject key identifier:   D4:6E:C3:BA:5A:92:EB:E2:29:4C:55:9C:F3:60:51:2B:2B:42:1A:56
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       71FE81540C3CFDCB56058715E89D412864845E80
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS208223.roa
Signing time:             Wed 08 Mar 2023 18:45:28 +0000
ROA not before:           Wed 08 Mar 2023 18:40:28 +0000
ROA not after:            Wed 06 Mar 2024 18:45:28 +0000
asID:                     208223
IP address blocks:        2a06:1287:3900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fe:81:54:0c:3c:fd:cb:56:05:87:15:e8:9d:41:28:64:84:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:28 2023 GMT
            Not After : Mar  6 18:45:28 2024 GMT
        Subject: CN=D46EC3BA5A92EBE2294C559CF360512B2B421A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:07:c0:6f:c9:31:96:26:c4:a3:56:f6:46:
                    a2:8e:46:47:a1:98:64:d6:2c:df:5b:ea:36:c1:01:
                    62:ab:d9:0c:58:4d:21:af:4e:0d:93:18:fa:a5:23:
                    61:1b:8b:ed:87:39:4f:9e:6f:b2:d3:d5:54:fd:2e:
                    f7:ea:90:1d:ef:45:91:dc:5d:d0:c3:56:e5:3b:d7:
                    c2:2b:8b:c9:6c:20:eb:d2:07:f4:20:fb:75:2f:69:
                    42:7c:89:45:fd:88:25:05:c7:5d:ea:ac:68:fc:ea:
                    47:78:7d:fc:81:71:36:d1:a3:a8:ad:92:8b:4f:56:
                    b0:f5:7e:41:8c:e5:61:9f:e1:fa:1a:e2:11:1e:40:
                    ad:2a:9d:3c:4c:e0:c3:7e:a3:b4:a0:76:50:47:64:
                    5b:b1:35:06:a7:6c:48:a4:b8:72:ed:12:cd:fa:d0:
                    42:0b:e5:cf:bc:d1:2e:72:78:56:c8:3a:49:07:2d:
                    05:c9:fa:5e:d7:ac:dd:6a:0c:08:62:4a:b7:d4:b8:
                    5e:53:dc:21:62:10:b4:3e:af:de:e7:e9:68:95:1b:
                    e6:c8:a3:9e:ef:e6:45:ee:1d:f9:a1:b7:73:a0:74:
                    30:2a:02:c9:52:d4:e5:9e:d3:27:41:ab:40:32:92:
                    c4:c9:f0:17:af:cb:2d:ae:2d:f8:7d:c5:63:f2:b7:
                    8f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6E:C3:BA:5A:92:EB:E2:29:4C:55:9C:F3:60:51:2B:2B:42:1A:56
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS208223.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3900::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:c8:40:fa:a7:23:69:03:9b:d1:93:89:05:c7:13:d1:8c:e0:
         e5:f8:7a:15:98:d8:f0:53:e4:35:a2:02:62:4d:1c:4f:a9:3d:
         60:24:f4:de:91:ed:2e:5b:7d:d3:e0:3d:be:ce:7f:de:3c:b3:
         b6:78:1d:6b:bf:35:05:b4:9b:0e:7b:b6:56:0c:2f:71:1b:4b:
         86:70:76:4e:a5:ef:88:8b:8c:d1:bf:99:db:e4:88:d4:de:6e:
         62:7e:85:c5:ba:f4:fb:b2:f6:d6:f4:81:0e:12:c6:c1:3b:49:
         9c:f6:8a:73:11:7a:f8:ea:65:40:1f:cb:15:ad:0a:50:c1:be:
         bf:80:7a:b9:76:cb:83:8c:fd:1a:4f:33:54:bc:f3:f6:46:8f:
         87:0d:71:11:3f:a3:e0:af:14:c4:0a:f3:6b:10:e5:f5:2b:12:
         57:32:ea:37:11:1e:0a:1f:aa:bd:a5:b2:44:e7:0e:6a:ba:68:
         e5:d0:e8:c2:e7:ec:a2:2f:63:e2:18:2e:54:0d:80:c7:33:35:
         1b:9a:dd:09:f0:9f:09:0f:9d:fa:b0:51:a6:10:f8:a2:8a:c4:
         86:6a:13:fa:34:28:67:25:05:15:e1:51:49:0e:b5:45:2f:4e:
         d9:4c:ca:62:c3:f2:4a:61:db:9a:9f:35:88:ab:1e:b2:94:ce:
         dc:ab:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----