Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212173.roa
File:                     AS212173.roa (raw, json)
Hash identifier:          SItxhLZxXdZ/HHcJTTExCtr6HLZgggiEg8VUSGnTNus=
Subject key identifier:   3F:03:3F:0E:BF:1E:D4:50:35:31:FE:5E:D1:F1:18:0F:CA:A8:BA:27
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       0E0AC18589F989D90B14D597323A3B7B530F67D8
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212173.roa
Signing time:             Wed 08 Mar 2023 18:45:21 +0000
ROA not before:           Wed 08 Mar 2023 18:40:21 +0000
ROA not after:            Wed 06 Mar 2024 18:45:21 +0000
asID:                     212173
IP address blocks:        2a05:dfc7:6200::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0a:c1:85:89:f9:89:d9:0b:14:d5:97:32:3a:3b:7b:53:0f:67:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:21 2023 GMT
            Not After : Mar  6 18:45:21 2024 GMT
        Subject: CN=3F033F0EBF1ED4503531FE5ED1F1180FCAA8BA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:6c:e9:37:4c:d6:61:75:fa:a8:62:06:74:
                    4b:97:7b:7e:30:82:54:23:63:4c:15:eb:5a:a2:f3:
                    29:29:ea:8b:9e:de:fb:7d:2f:e7:09:94:14:5d:10:
                    13:92:e0:31:c2:9b:df:e1:f4:25:86:ce:ef:aa:13:
                    32:3a:60:04:55:a8:d9:3a:92:c7:07:98:f2:87:a9:
                    9d:a6:62:6f:76:b1:a0:cb:95:89:44:ca:b9:ed:e0:
                    3a:cf:57:f0:c6:ee:66:eb:b3:72:28:a2:21:9f:7b:
                    96:3e:7a:61:39:52:bd:d9:c7:80:19:3f:67:88:00:
                    e0:d5:68:f8:2b:a5:64:8e:16:9f:71:eb:84:d8:b4:
                    82:11:a6:ff:e2:81:27:2b:2a:db:96:d6:8f:e3:07:
                    6a:ff:61:9a:3b:1b:f7:36:1b:21:7c:4a:a3:ae:e5:
                    c9:91:68:e6:4b:05:42:0f:9c:91:14:0b:3b:0f:56:
                    86:09:df:25:a5:9b:76:d6:24:42:ac:f7:0a:45:9c:
                    d8:48:ef:05:6a:69:d4:b1:1f:84:eb:99:7f:19:2d:
                    0d:03:8a:f0:6e:43:21:6c:23:4c:58:f1:04:43:26:
                    fd:be:31:8d:cf:24:83:84:55:b8:f2:51:0a:2d:0d:
                    99:eb:07:16:94:e5:6f:87:1b:4e:58:44:06:a0:28:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:03:3F:0E:BF:1E:D4:50:35:31:FE:5E:D1:F1:18:0F:CA:A8:BA:27
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212173.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6200::/39

    Signature Algorithm: sha256WithRSAEncryption
         53:d6:46:e0:fe:5d:ad:e8:26:06:d2:5b:15:04:2d:d4:cf:ec:
         11:b0:57:49:8f:30:1f:e9:3d:84:1c:f1:76:02:e4:3b:98:e4:
         ea:23:d3:d8:cd:2e:22:ae:ef:bb:f8:55:b7:0e:28:ec:8a:9f:
         bf:7f:b1:e6:e2:a3:b9:2c:29:39:ea:79:78:6d:42:b5:00:66:
         26:17:d2:c0:e5:04:7e:e0:b7:07:15:1a:84:0c:b6:6c:1a:93:
         8d:33:5d:06:d3:4f:e8:03:93:63:a8:a8:3d:05:ca:0d:ac:80:
         a7:e8:75:e1:fd:ad:36:b9:bb:5d:d4:5b:67:0a:7b:53:bb:f2:
         85:fb:14:55:98:7f:35:01:aa:93:88:55:a5:71:54:21:88:96:
         03:6d:f2:22:97:1d:6b:5a:79:2b:ed:30:82:44:2a:15:02:6a:
         8a:92:cf:38:50:5b:23:9e:b8:12:d6:f5:61:a8:5a:0b:4e:22:
         1a:b0:c8:b4:20:47:4a:60:dd:c4:d9:69:73:08:1f:f7:54:56:
         ef:95:f4:ec:ab:bf:b9:0c:fb:3f:70:41:25:7d:a0:22:2b:50:
         2a:76:ea:db:e8:70:f5:94:ae:ce:0c:a9:c4:b2:4c:ff:77:5f:
         84:cb:f2:fe:9d:6c:2c:37:de:a3:d2:99:50:3c:7c:9f:fd:47:
         af:61:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----