Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS211480.roa
File:                     AS211480.roa (raw, json)
Hash identifier:          35CqUorrCxTqpNmiM5cRX4Xpa9emaMiFo5orRTNx1zo=
Subject key identifier:   11:95:AF:26:EF:81:C7:DA:CD:21:DF:E2:3A:AB:AB:7C:D4:36:DA:AE
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       7AB6101B705D3D5B9C85D4080404DFEC72E963CA
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS211480.roa
Signing time:             Wed 08 Mar 2023 18:45:21 +0000
ROA not before:           Wed 08 Mar 2023 18:40:21 +0000
ROA not after:            Wed 06 Mar 2024 18:45:21 +0000
asID:                     211480
IP address blocks:        2a06:9f45:1200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b6:10:1b:70:5d:3d:5b:9c:85:d4:08:04:04:df:ec:72:e9:63:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:21 2023 GMT
            Not After : Mar  6 18:45:21 2024 GMT
        Subject: CN=1195AF26EF81C7DACD21DFE23AABAB7CD436DAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:a7:63:51:88:1d:52:95:9b:b8:99:02:6a:
                    fd:d7:17:12:4f:44:bc:c0:88:3d:f6:6b:89:ec:77:
                    ef:dd:10:61:20:2e:11:fa:f2:b8:d2:43:95:65:5d:
                    ea:5f:b7:4a:84:92:1d:ef:da:02:02:7d:22:39:a2:
                    00:d4:eb:86:24:73:bb:42:21:3f:b3:0b:42:e5:27:
                    1f:33:56:89:33:8c:29:a7:27:bd:0a:9d:c0:b7:26:
                    67:32:e4:47:4c:0d:a2:94:a4:1f:c7:40:b7:46:32:
                    20:27:f0:fe:27:e0:7b:53:99:0c:f6:3b:49:6e:ca:
                    ac:0d:89:37:43:f9:ca:00:eb:44:e7:86:a2:79:48:
                    55:b6:a9:5a:95:47:53:3b:6e:66:3a:9a:4a:c6:5c:
                    a5:5d:09:98:e3:bc:5c:6b:ba:f7:fe:ed:85:66:03:
                    a2:3b:3c:74:9f:8c:76:d4:80:66:f2:09:38:7c:ab:
                    3c:90:c0:14:04:8b:72:26:7c:42:db:56:9e:7b:4e:
                    ff:ea:e6:85:a4:a8:25:f8:e3:35:1d:9d:dd:a1:5b:
                    39:35:30:d9:6a:39:f9:45:6f:e6:1a:bd:40:b1:79:
                    4c:0c:28:c0:6d:86:d1:f6:95:96:57:33:9c:a5:eb:
                    9e:13:83:eb:fa:5a:c1:ae:b5:14:b8:4d:87:0a:77:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:95:AF:26:EF:81:C7:DA:CD:21:DF:E2:3A:AB:AB:7C:D4:36:DA:AE
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS211480.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f45:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:78:14:e5:eb:bf:35:8b:98:0c:3d:bf:2c:4e:32:68:57:
         c4:79:da:49:0d:00:9f:4f:7a:a5:b1:60:ad:cd:a5:35:af:5e:
         a3:24:f3:15:e9:13:8e:ef:ba:b4:25:70:e4:c0:e4:a4:9b:80:
         1e:80:ef:2b:3f:af:ef:80:58:d5:7e:60:94:77:02:1d:f2:57:
         d5:d4:d2:22:79:1e:2a:8e:60:a4:b3:6b:2d:72:cb:6f:e3:0d:
         d0:18:f2:1b:3f:27:b7:f6:1d:36:3c:3f:17:d3:c0:a4:41:10:
         8f:54:4a:41:aa:80:f9:25:70:c2:c3:e8:c9:dd:d0:3d:93:4d:
         cb:27:b0:69:a8:1b:98:3c:6e:30:15:fa:57:42:f4:26:60:f8:
         50:62:20:56:1c:0d:00:ff:2d:eb:c6:4e:b5:b7:2b:ee:e2:0b:
         42:46:3b:b9:70:86:24:a4:55:67:87:a5:2d:fc:79:0f:c9:8c:
         37:eb:fe:9a:9a:46:65:34:74:76:3b:06:6f:9a:09:1c:d3:fd:
         2b:a4:ea:c4:c7:01:aa:c1:ab:20:6f:48:2e:ca:b9:92:46:56:
         c9:a2:8a:d9:47:d7:db:58:64:7a:ea:fd:4e:54:1f:61:ce:f8:
         b8:34:81:6f:e6:13:a4:7c:84:11:b8:46:4e:61:3a:d3:6b:0e:
         76:bc:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----