Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS211358.roa
File:                     AS211358.roa (raw, json)
Hash identifier:          +rqxK65AvNJSjLhmn+OgGM6SYQqWHOSV7Wj7+quFw58=
Subject key identifier:   4A:6E:51:5D:8A:20:50:3A:EA:C9:84:A0:34:D7:27:15:59:DA:32:2B
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       0BA8C26C7FB5CD4FE1BF9BD6A6F385AE0BC94438
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS211358.roa
Signing time:             Wed 08 Mar 2023 18:45:17 +0000
ROA not before:           Wed 08 Mar 2023 18:40:17 +0000
ROA not after:            Wed 06 Mar 2024 18:45:17 +0000
asID:                     211358
IP address blocks:        2a06:1287:3601::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a8:c2:6c:7f:b5:cd:4f:e1:bf:9b:d6:a6:f3:85:ae:0b:c9:44:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:17 2023 GMT
            Not After : Mar  6 18:45:17 2024 GMT
        Subject: CN=4A6E515D8A20503AEAC984A034D7271559DA322B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:ba:b5:72:89:ac:8a:d4:44:5b:f6:87:f4:
                    3b:6d:89:18:7b:7f:5d:36:68:fb:95:8a:b5:2e:07:
                    69:87:0b:d3:02:7d:5a:c1:14:06:a3:42:09:8d:20:
                    a2:03:ac:8a:6a:58:18:3a:59:1d:d3:38:0e:fa:66:
                    7a:7e:83:ca:24:1d:6b:d7:6e:19:13:ab:11:12:08:
                    a9:2b:95:61:b4:92:af:ac:91:8d:2a:a0:76:f1:4c:
                    84:8e:f2:db:82:b2:50:27:d7:77:04:0d:c4:d4:e2:
                    d1:8d:fc:c4:4c:82:9f:f6:7d:72:b9:6f:89:51:d8:
                    24:f2:a0:91:9b:f5:af:53:18:d4:c7:3e:97:e5:c7:
                    a6:15:0b:ae:cd:61:3c:95:a1:44:83:f3:f6:3f:20:
                    e0:b9:a7:bc:be:71:cd:1d:50:58:e2:52:21:eb:c1:
                    dd:88:48:4d:01:a5:3a:f2:23:32:9e:3e:d9:28:cf:
                    7e:a1:d2:ea:77:25:0f:a4:f8:ab:59:4c:33:c6:a3:
                    f5:9d:40:cc:54:db:0b:ee:e8:01:b2:16:28:77:56:
                    98:ba:b2:c2:50:3b:8a:c1:18:6f:eb:a9:ae:fb:14:
                    94:ca:00:5b:1d:be:10:5c:46:bf:e0:ad:ff:30:be:
                    d2:60:c7:b6:31:31:95:b4:9f:b5:1a:1d:e4:1c:05:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6E:51:5D:8A:20:50:3A:EA:C9:84:A0:34:D7:27:15:59:DA:32:2B
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS211358.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3601::/48

    Signature Algorithm: sha256WithRSAEncryption
         df:30:ba:78:80:24:2f:9e:3d:41:10:3e:7f:ba:b0:60:e5:f0:
         4e:aa:8a:a3:34:5b:e4:d6:61:f0:70:2f:d3:7c:f0:25:d8:da:
         a1:e0:12:cd:66:75:57:4e:40:f3:c5:0d:1a:53:2b:b3:68:5e:
         f3:cd:ef:4b:5b:90:a2:4f:fb:a0:23:e1:88:5b:f8:0e:6c:26:
         f3:bb:ef:20:c4:bc:de:97:4f:cc:71:34:3c:d3:76:f4:dc:21:
         09:ff:e0:c7:bf:3c:87:a8:35:78:b5:b4:6c:d4:0f:df:22:85:
         64:71:d0:5f:a6:eb:b0:41:f7:75:8a:59:e2:97:27:9f:2f:76:
         24:16:a8:18:19:e8:93:0c:0a:b5:dd:03:8e:0f:17:a2:38:f5:
         f4:ce:55:13:47:92:ab:37:23:02:df:75:49:26:7a:00:00:18:
         20:1a:a3:a5:3e:46:22:27:80:07:24:b7:e7:67:f4:f5:03:82:
         f2:17:4f:90:54:c6:44:ef:b7:6d:ec:e3:f3:99:09:38:33:c0:
         98:f1:b7:3c:ab:fa:76:b3:82:37:58:26:82:06:87:fa:6f:75:
         7d:0b:a8:23:1c:f8:08:a2:fd:d0:fd:9b:f5:e1:b2:86:84:8f:
         31:f7:8b:6c:7a:8c:ff:85:3b:11:97:bd:82:69:63:1c:cb:51:
         8d:d6:2c:0a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUC6jCbH+1zU/hv5vWpvOFrgvJRDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMzAzMDgxODQwMTdaFw0yNDAzMDYxODQ1MTdaMDMxMTAvBgNV
BAMTKDRBNkU1MTVEOEEyMDUwM0FFQUM5ODRBMDM0RDcyNzE1NTlEQTMyMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcLq1comsitREW/aH9DttiRh7
f102aPuVirUuB2mHC9MCfVrBFAajQgmNIKIDrIpqWBg6WR3TOA76Znp+g8okHWvX
bhkTqxESCKkrlWG0kq+skY0qoHbxTISO8tuCslAn13cEDcTU4tGN/MRMgp/2fXK5
b4lR2CTyoJGb9a9TGNTHPpflx6YVC67NYTyVoUSD8/Y/IOC5p7y+cc0dUFjiUiHr
wd2ISE0BpTryIzKePtkoz36h0up3JQ+k+KtZTDPGo/WdQMxU2wvu6AGyFih3Vpi6
ssJQO4rBGG/rqa77FJTKAFsdvhBcRr/grf8wvtJgx7YxMZW0n7UaHeQcBUr1AgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQUSm5RXYogUDrqyYSgNNcnFVnaMiswHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMF0GCCsGAQUF
BwELBFEwTzBNBggrBgEFBQcwC4ZBcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29t
L3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC9BUzIxMTM1OC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoG
Eoc2ATANBgkqhkiG9w0BAQsFAAOCAQEA3zC6eIAkL549QRA+f7qwYOXwTqqKozRb
5NZh8HAv03zwJdjaoeASzWZ1V05A88UNGlMrs2he883vS1uQok/7oCPhiFv4Dmwm
87vvIMS83pdPzHE0PNN29NwhCf/gx788h6g1eLW0bNQP3yKFZHHQX6brsEH3dYpZ
4pcnny92JBaoGBnokwwKtd0Djg8Xojj19M5VE0eSqzcjAt91SSZ6AAAYIBqjpT5G
IieAByS352f09QOC8hdPkFTGRO+3bezj85kJODPAmPG3PKv6drOCN1gmggaH+m91
fQuoIxz4CKL90P2b9eGyhoSPMfeLbHqM/4U7EZe9gmljHMtRjdYsCg==
-----END CERTIFICATE-----