Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS210537.roa
File:                     AS210537.roa (raw, json)
Hash identifier:          uco/Rum9d0lueEebXFwuF7eJuNZDM7ozCUYB5XnK5z0=
Subject key identifier:   6B:1F:8C:2B:29:7D:53:C1:52:43:37:86:FB:57:01:E8:B9:FB:8F:60
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       47CA903DF695610DD9AFD6B5E57C6F431082C05B
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS210537.roa
Signing time:             Wed 08 Mar 2023 18:45:21 +0000
ROA not before:           Wed 08 Mar 2023 18:40:21 +0000
ROA not after:            Wed 06 Mar 2024 18:45:21 +0000
asID:                     210537
IP address blocks:        2a05:dfc7:5600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ca:90:3d:f6:95:61:0d:d9:af:d6:b5:e5:7c:6f:43:10:82:c0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:21 2023 GMT
            Not After : Mar  6 18:45:21 2024 GMT
        Subject: CN=6B1F8C2B297D53C152433786FB5701E8B9FB8F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:a5:14:1f:46:e0:51:2b:57:67:de:38:49:
                    0c:50:96:e1:90:22:d2:1b:cd:36:61:90:03:7d:c4:
                    7e:f8:a5:2e:7a:1a:b1:a9:9b:4f:21:6c:d1:ed:7a:
                    78:9b:35:4b:58:97:77:6d:98:0d:cd:66:73:6e:12:
                    9c:9e:86:e2:eb:53:73:6c:5c:3f:2e:7b:22:46:50:
                    c6:9b:65:37:29:d0:5e:ed:78:b4:c2:28:65:5a:e1:
                    eb:ef:1f:e9:07:09:ff:b2:f0:1e:8a:5b:f6:9d:10:
                    b5:69:c2:1b:bb:47:e2:5d:2c:02:c7:be:48:a2:ef:
                    56:4b:ed:15:e2:32:84:bd:ff:d3:3e:34:e3:fe:b7:
                    9c:17:94:41:38:d4:58:7e:e5:4c:0a:98:26:5e:91:
                    a7:13:32:bc:9c:47:e1:81:85:83:2d:0b:90:7d:e9:
                    48:c3:23:bd:df:ca:97:99:3b:4c:ec:04:dc:f6:99:
                    6c:94:4b:a4:41:be:98:57:c7:4c:ca:36:bd:c9:8b:
                    7d:57:04:2d:2c:fb:61:ea:50:37:92:61:a9:0b:42:
                    aa:bb:2c:35:91:f0:3b:c1:c7:1e:dd:6b:b4:35:c5:
                    ad:4e:50:f9:3c:9f:3e:4a:81:83:7b:25:f3:c4:b4:
                    c7:d0:ae:57:56:97:6f:1b:34:40:c9:48:3b:47:a2:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1F:8C:2B:29:7D:53:C1:52:43:37:86:FB:57:01:E8:B9:FB:8F:60
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS210537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:5600::/39

    Signature Algorithm: sha256WithRSAEncryption
         b9:9c:6f:5a:a2:ae:59:a2:15:05:2c:b0:c4:20:22:67:ba:56:
         3e:b0:f9:89:56:04:a1:2a:a5:6d:25:2d:b9:a3:c0:98:0f:49:
         fd:aa:b0:5f:db:2a:4c:ac:7f:dd:88:4c:ac:8d:10:e3:ec:41:
         9b:ab:7b:60:6c:5b:ba:05:f0:38:a8:d7:a6:3c:26:d3:21:72:
         57:1c:6c:16:0f:5f:42:b1:0c:ca:b6:84:11:83:26:2d:49:16:
         87:be:de:ac:30:ee:13:81:f8:fc:3e:34:92:cb:d7:55:53:06:
         6c:3e:47:5d:ee:ce:df:68:b4:e6:b2:2a:b9:31:46:78:1e:c6:
         b3:d8:e5:2e:aa:8a:6a:cc:2f:76:48:85:3d:5e:53:91:33:3a:
         65:0b:e6:1a:ed:b7:6e:16:40:4a:91:ee:6c:76:3a:85:e9:04:
         5f:da:40:e1:dc:70:11:37:14:11:1e:f2:c8:21:62:ae:fb:51:
         be:d7:b4:03:c8:6a:d1:53:8d:78:6d:01:a9:2c:3f:10:c8:cf:
         59:dd:b1:5f:27:63:25:48:e6:6a:5e:9f:b2:d0:04:8b:10:9c:
         bf:f8:c8:98:9c:a3:39:df:5c:7e:73:3a:db:24:a9:8a:fe:c7:
         48:e6:2b:34:0e:97:8f:bd:65:e5:b5:d5:d7:30:b3:6b:92:65:
         52:8f:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----