Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS211509.roa
File:                     AS211509.roa (raw, json)
Hash identifier:          tTvcnjh/Tzzh/ZdyUxpKrA9KtMgv1RVjRNkeAC1q6C4=
Subject key identifier:   F4:ED:37:ED:84:51:86:80:DC:9A:A6:9D:86:18:42:37:D4:F6:AD:22
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       22B07EFE3AE7F5892E1B091BA022BA8600130F90
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS211509.roa
Signing time:             Wed 08 Mar 2023 18:45:20 +0000
ROA not before:           Wed 08 Mar 2023 18:40:20 +0000
ROA not after:            Wed 06 Mar 2024 18:45:20 +0000
asID:                     211509
IP address blocks:        2a05:dfc7:8500::/43 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b0:7e:fe:3a:e7:f5:89:2e:1b:09:1b:a0:22:ba:86:00:13:0f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:20 2023 GMT
            Not After : Mar  6 18:45:20 2024 GMT
        Subject: CN=F4ED37ED84518680DC9AA69D86184237D4F6AD22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a0:f4:91:37:1a:90:b5:c6:ba:d5:d6:0a:6c:
                    9d:b3:e4:73:9e:ba:b3:80:79:3c:7d:37:73:9c:a3:
                    ad:47:f6:7f:90:bb:21:bc:db:06:0c:1a:a6:0c:69:
                    54:2a:5f:7b:79:00:1f:ae:f4:60:53:72:07:31:7f:
                    33:0a:f5:a8:81:2a:46:57:39:9b:09:c0:40:ca:4a:
                    4f:9e:d4:25:e4:ea:82:fd:50:8a:f4:c0:20:08:5e:
                    68:c8:5f:f9:94:a6:3e:ab:dd:a1:d2:11:07:69:d8:
                    59:ba:81:67:62:12:52:a7:09:73:70:53:c1:fa:02:
                    af:89:8d:68:dd:b6:42:83:30:81:3c:ae:5a:d9:91:
                    d6:9d:11:bc:a7:03:c3:69:5c:f5:8e:7a:90:da:82:
                    39:55:7d:44:e6:f8:82:16:78:40:9b:5b:c6:61:ca:
                    16:ce:ba:ac:4f:fd:4c:f0:63:17:85:82:f0:da:ee:
                    7e:77:c7:8f:e1:ec:e8:dc:2d:95:20:d7:e2:30:79:
                    3c:21:0d:c8:82:e5:3f:3a:73:8e:db:6b:30:a5:d0:
                    02:6f:59:fc:0d:e1:16:e6:d9:9f:b7:3f:54:50:72:
                    10:d5:fb:62:7c:8d:49:49:4b:13:8d:98:8a:d8:3f:
                    23:a3:bd:2c:64:21:a8:05:4d:40:b9:00:0a:11:93:
                    05:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:ED:37:ED:84:51:86:80:DC:9A:A6:9D:86:18:42:37:D4:F6:AD:22
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS211509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8500::/43

    Signature Algorithm: sha256WithRSAEncryption
         b2:1b:f1:8c:e7:fc:2c:f1:19:5c:27:e8:d6:9b:16:05:8b:2a:
         a0:6a:66:ca:ca:41:7d:77:f0:9f:eb:c1:e5:f3:fd:47:47:b0:
         d9:cc:47:fb:ad:27:54:05:5d:94:35:2b:17:1d:e6:f1:ef:ad:
         03:68:86:79:83:3e:96:30:3f:1e:bf:bc:d3:2d:3c:3c:2e:5d:
         ee:67:ff:64:8e:0d:43:3b:5c:74:cd:ba:58:a4:75:77:70:ec:
         e4:b0:f4:6b:11:2c:b2:35:29:1a:13:02:f0:68:5d:7d:fa:0d:
         9c:73:56:c3:a1:85:c5:bc:cf:d1:7e:96:26:89:65:b0:27:2a:
         2d:ae:53:e8:68:5f:88:42:7a:10:4e:5b:db:e5:b0:b3:0c:c7:
         95:63:7b:14:b7:f9:84:0a:8e:3f:ea:67:ef:81:20:e5:34:d6:
         be:ef:1c:21:8f:dc:d0:ef:9b:12:33:ad:44:ae:54:f8:1c:85:
         f4:cb:12:27:b8:92:54:77:f5:df:fa:cb:3f:12:f6:dc:11:a2:
         28:5b:68:9b:c5:eb:ba:f6:e6:85:b8:ba:92:e9:a2:12:57:08:
         f7:45:ea:be:b9:7b:ce:0a:f3:08:fd:0f:b4:6b:9d:0e:e4:73:
         ce:cf:60:89:17:3e:7f:3f:55:80:4b:18:69:19:4b:a0:d2:f8:
         53:3b:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----