Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212252.roa
File:                     AS212252.roa (raw, json)
Hash identifier:          PASNONLKVecedMF7qDHeV+axfdZxWEhM1n4XgGfQBVA=
Subject key identifier:   B3:11:87:A9:AE:C6:DC:D5:52:12:A1:05:C4:56:F3:F0:E6:79:27:0C
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       394E95AD2D534F62805B32F89539588070E8E3BE
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212252.roa
Signing time:             Fri 07 Apr 2023 16:15:01 +0000
ROA not before:           Fri 07 Apr 2023 16:10:01 +0000
ROA not after:            Fri 05 Apr 2024 16:15:01 +0000
asID:                     212252
IP address blocks:        2a05:dfc7:2200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4e:95:ad:2d:53:4f:62:80:5b:32:f8:95:39:58:80:70:e8:e3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Apr  7 16:10:01 2023 GMT
            Not After : Apr  5 16:15:01 2024 GMT
        Subject: CN=B31187A9AEC6DCD55212A105C456F3F0E679270C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ac:2d:61:44:67:b0:0b:1e:20:fe:3b:5c:97:
                    95:36:03:70:ef:79:71:76:00:16:1c:c7:a2:70:d1:
                    00:84:7d:3b:59:0e:fe:8f:40:28:02:a9:eb:60:dc:
                    61:13:18:00:70:6a:83:80:a0:5f:d0:7d:37:b2:4d:
                    8c:64:63:73:da:90:69:fb:ca:31:ce:23:64:d5:68:
                    ce:c6:ad:d1:b1:36:21:18:ef:4a:9d:b3:f6:2c:38:
                    b7:fb:6c:23:5f:a1:a1:81:26:1b:d3:b4:f7:3a:4d:
                    74:74:14:4f:2f:c3:59:4d:7a:e1:17:1d:68:5c:e9:
                    9a:36:5e:00:ed:fc:3e:72:f5:78:d4:ec:c9:0a:11:
                    5b:c8:5d:2d:88:1a:f6:b4:8e:f0:2d:f3:3a:a6:32:
                    d4:ce:e1:d2:d1:fb:41:13:a0:66:82:f0:ee:89:0f:
                    81:ac:7b:cb:68:c7:8c:78:66:9f:c2:60:b1:5d:c4:
                    1d:e7:5b:bb:f1:0f:ea:54:22:23:a9:f8:eb:ab:29:
                    c5:d3:37:b4:b3:b3:86:99:0f:9d:77:e1:00:4e:06:
                    14:03:d5:3b:91:0d:79:16:b5:ca:db:42:93:b7:93:
                    61:d3:06:f9:5f:4b:2a:42:be:79:32:bd:c1:98:af:
                    5e:fc:e2:c2:ee:2a:84:ca:29:ab:82:b5:bd:5a:90:
                    46:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:11:87:A9:AE:C6:DC:D5:52:12:A1:05:C4:56:F3:F0:E6:79:27:0C
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:c8:27:1b:d2:4d:ce:65:56:2c:65:76:2e:0a:41:4a:a2:22:
         fa:32:1c:9a:6b:2f:70:6a:a8:63:43:a0:01:77:27:79:11:dc:
         f6:2c:58:ca:1f:93:89:4c:19:55:7e:bd:e7:31:92:ee:0b:ff:
         6e:f2:2e:f0:0a:61:ff:f5:75:fd:84:c7:58:71:d7:06:38:37:
         d4:6c:42:0f:93:ec:18:90:78:b1:f9:21:cf:e3:5a:b3:1e:77:
         8b:fd:d8:c5:79:fd:06:27:89:24:45:15:48:17:02:a4:2f:e5:
         ca:e6:8f:aa:e7:64:a3:78:c0:2d:1c:b5:26:42:3c:9d:8e:29:
         94:7f:fb:cf:a6:f1:f8:7a:6f:6c:88:c3:2e:b8:b1:30:da:30:
         1d:dc:72:27:88:24:4a:3b:5d:88:be:31:37:04:db:c5:10:b9:
         1d:bf:1b:5b:e4:71:09:14:3a:19:5e:4f:2c:b9:49:8b:70:56:
         25:a8:e7:e7:53:31:5d:40:64:fc:db:4a:a8:ef:f3:99:1a:0b:
         f7:6a:be:a0:38:c3:b0:f6:fb:72:05:0d:e6:94:c1:07:dd:81:
         c7:04:7b:32:11:83:f8:be:a6:52:5f:55:b5:29:e4:7c:d2:a2:
         0a:45:99:87:b8:d5:87:ef:17:11:38:8e:34:00:bd:cf:9b:7d:
         ad:18:09:17
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUOU6VrS1TT2KAWzL4lTlYgHDo474wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMzA0MDcxNjEwMDFaFw0yNDA0MDUxNjE1MDFaMDMxMTAvBgNV
BAMTKEIzMTE4N0E5QUVDNkRDRDU1MjEyQTEwNUM0NTZGM0YwRTY3OTI3MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDirC1hRGewCx4g/jtcl5U2A3Dv
eXF2ABYcx6Jw0QCEfTtZDv6PQCgCqetg3GETGABwaoOAoF/QfTeyTYxkY3PakGn7
yjHOI2TVaM7GrdGxNiEY70qds/YsOLf7bCNfoaGBJhvTtPc6TXR0FE8vw1lNeuEX
HWhc6Zo2XgDt/D5y9XjU7MkKEVvIXS2IGva0jvAt8zqmMtTO4dLR+0EToGaC8O6J
D4Gse8tox4x4Zp/CYLFdxB3nW7vxD+pUIiOp+OurKcXTN7Szs4aZD5134QBOBhQD
1TuRDXkWtcrbQpO3k2HTBvlfSypCvnkyvcGYr1784sLuKoTKKauCtb1akEaRAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUsxGHqa7G3NVSEqEFxFbz8OZ5JwwwHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMF0GCCsGAQUF
BwELBFEwTzBNBggrBgEFBQcwC4ZBcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29t
L3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC9BUzIxMjI1Mi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF
38ciMA0GCSqGSIb3DQEBCwUAA4IBAQBQyCcb0k3OZVYsZXYuCkFKoiL6Mhyaay9w
aqhjQ6ABdyd5Edz2LFjKH5OJTBlVfr3nMZLuC/9u8i7wCmH/9XX9hMdYcdcGODfU
bEIPk+wYkHix+SHP41qzHneL/djFef0GJ4kkRRVIFwKkL+XK5o+q52SjeMAtHLUm
QjydjimUf/vPpvH4em9siMMuuLEw2jAd3HIniCRKO12IvjE3BNvFELkdvxtb5HEJ
FDoZXk8suUmLcFYlqOfnUzFdQGT820qo7/OZGgv3ar6gOMOw9vtyBQ3mlMEH3YHH
BHsyEYP4vqZSX1W1KeR80qIKRZmHuNWH7xcROI40AL3Pm32tGAkX
-----END CERTIFICATE-----