Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS210951.roa
File:                     AS210951.roa (raw, json)
Hash identifier:          ghl5DvZuFK/l2GnFKFqe9+T393NDNkcjMwodn62fEDA=
Subject key identifier:   CC:F5:86:E1:31:C5:71:E3:3E:4D:FF:AC:ED:EB:93:BA:83:4A:27:CE
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       BEDCEA2CB3A0F0E28F6D661912FB552311B7F9
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS210951.roa
Signing time:             Wed 08 Mar 2023 18:45:27 +0000
ROA not before:           Wed 08 Mar 2023 18:40:27 +0000
ROA not after:            Wed 06 Mar 2024 18:45:27 +0000
asID:                     210951
IP address blocks:        2a05:dfc7:2000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            be:dc:ea:2c:b3:a0:f0:e2:8f:6d:66:19:12:fb:55:23:11:b7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:27 2023 GMT
            Not After : Mar  6 18:45:27 2024 GMT
        Subject: CN=CCF586E131C571E33E4DFFACEDEB93BA834A27CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:4d:62:d8:6b:22:a5:08:fc:85:9b:ae:c4:
                    df:8a:33:af:9b:e5:f8:d1:c8:32:08:8c:21:43:e7:
                    bc:bc:fc:03:2d:64:cf:a4:d1:08:98:9a:fa:21:ba:
                    c7:d5:f0:9f:cf:78:87:c4:78:4a:ed:28:8e:9a:8f:
                    3d:16:7e:fb:13:6c:58:29:56:11:3b:2e:d5:ab:c2:
                    1b:c1:b6:ab:2b:fd:a0:e8:a2:9d:74:25:49:c6:e8:
                    0c:59:2f:37:d4:48:85:de:2e:95:a0:c3:9c:95:91:
                    35:33:70:1d:32:9a:81:07:1a:2e:bf:26:92:20:08:
                    a0:4b:2b:7a:82:a8:38:30:1a:a4:f8:4e:c1:a6:ab:
                    40:cc:af:11:c0:f6:6a:f0:04:85:3d:9f:af:ef:0f:
                    63:8a:77:5e:f5:ab:5b:11:dc:39:84:e5:5f:e0:2c:
                    c8:45:0d:ac:dc:25:35:3f:38:22:a4:ab:83:44:9c:
                    ed:b9:8e:df:2b:4b:fd:32:3b:38:24:94:78:0b:90:
                    97:b2:ae:aa:ef:e4:55:7c:65:96:23:ea:a5:e9:b5:
                    61:30:7a:6f:3d:ce:86:07:d9:d2:da:8d:af:38:63:
                    73:c9:16:e6:77:a0:99:fe:3e:8f:6b:84:b3:7b:89:
                    5f:be:fb:ca:cb:8d:c7:1b:33:fd:e2:da:21:58:7d:
                    00:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F5:86:E1:31:C5:71:E3:3E:4D:FF:AC:ED:EB:93:BA:83:4A:27:CE
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS210951.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:31:b8:6c:10:14:68:99:79:7c:8a:43:eb:0f:36:8c:cd:98:
         65:0d:ce:ec:cd:68:9f:95:a5:48:3e:d3:13:68:b8:89:32:e3:
         8a:04:09:bc:8d:5b:c8:0a:9e:7a:10:ab:64:2e:41:0b:eb:56:
         85:1c:87:68:c5:32:59:75:02:ee:fc:40:46:91:ab:17:83:04:
         42:73:19:0a:f4:36:3f:ed:7a:20:4e:4d:f0:f6:51:08:4b:05:
         7c:f6:b9:5a:af:00:48:3d:81:31:00:9b:b7:04:87:fa:0a:0f:
         91:39:a0:86:ef:e0:1b:a2:f6:fd:1c:0c:db:c4:9c:13:b7:a5:
         41:72:da:53:e4:b8:d6:4c:86:13:78:08:c0:f1:23:cd:f6:e6:
         46:87:d5:1f:b9:91:b6:fb:e5:e2:00:a6:a4:8e:b8:ef:8d:e0:
         b9:57:6f:44:48:eb:91:3e:5c:f8:ad:c9:e1:0e:c8:65:6d:79:
         c7:a1:fe:8d:52:fa:99:30:f3:8a:92:f2:7a:11:24:3b:5e:56:
         a6:9d:b1:8c:2e:2e:17:b5:36:e3:5a:b4:42:95:2f:2e:8c:8d:
         52:41:20:78:07:36:d5:3d:8d:a0:c7:aa:46:40:40:eb:c1:3c:
         82:f0:37:2c:91:79:5c:18:ea:8f:f7:88:c2:9c:d8:63:b3:94:
         02:b3:d3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----