Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212504.roa
File:                     AS212504.roa (raw, json)
Hash identifier:          LYJzMXXXeBuAeiEpYg+fuPRBcbjJZC8QyfVzZdmd3fM=
Subject key identifier:   B3:7B:03:65:74:C0:2E:FE:B3:C4:C3:5C:0F:49:C0:08:76:66:43:1A
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       726E682DA7033ABD82D1DDEB2C15567830D03144
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212504.roa
Signing time:             Wed 08 Mar 2023 18:45:18 +0000
ROA not before:           Wed 08 Mar 2023 18:40:18 +0000
ROA not after:            Wed 06 Mar 2024 18:45:18 +0000
asID:                     212504
IP address blocks:        2a05:dfc7:93e0::/43 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6e:68:2d:a7:03:3a:bd:82:d1:dd:eb:2c:15:56:78:30:d0:31:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:18 2023 GMT
            Not After : Mar  6 18:45:18 2024 GMT
        Subject: CN=B37B036574C02EFEB3C4C35C0F49C0087666431A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:f5:23:88:a4:9d:98:09:5d:f2:68:60:eb:
                    b9:f0:55:a5:db:91:79:4f:80:b0:89:98:69:8e:9b:
                    d3:49:7b:67:d0:80:32:44:90:c9:ca:79:38:62:92:
                    36:53:16:20:cb:e8:ac:57:f1:8c:02:0a:81:28:d1:
                    76:b0:b1:0c:29:b8:c5:09:cf:6a:f2:c9:d7:be:16:
                    3d:c1:05:3e:fa:af:ae:a3:ee:74:cb:53:ee:7c:05:
                    36:3f:5c:12:b5:79:61:5c:40:5c:8a:3a:fe:ab:21:
                    91:f9:8e:1a:bf:0a:6d:99:d6:42:a6:fc:12:de:61:
                    81:47:ea:40:9d:39:0f:1f:67:64:80:f3:dc:a3:b4:
                    3a:c5:0a:4b:f4:c4:28:f2:9b:08:4e:13:89:17:d2:
                    4c:ee:d4:60:60:8c:8f:ff:9f:ea:36:d6:f0:21:8f:
                    b3:89:e6:dc:5a:2e:94:ae:06:19:7a:c1:b8:91:5b:
                    72:84:3b:91:9a:d7:be:3e:2d:2c:5e:92:06:c9:11:
                    9d:17:6d:ec:c5:dd:d8:32:dc:fa:cb:cb:90:32:26:
                    d4:2a:1a:c2:0e:43:5b:48:9f:dd:1d:da:27:34:ac:
                    54:af:71:a1:e7:27:1f:5b:ec:28:4a:d1:00:67:88:
                    86:ea:ef:ef:ee:a4:c1:c6:45:28:05:60:e8:20:d1:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7B:03:65:74:C0:2E:FE:B3:C4:C3:5C:0F:49:C0:08:76:66:43:1A
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212504.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:93e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         be:e1:f0:32:7d:8d:ae:80:95:c2:a1:51:85:a3:b9:2f:45:c4:
         52:5a:86:92:21:9b:f7:68:91:ed:46:b7:53:ec:67:2f:97:75:
         a7:3b:cc:61:2f:3d:23:06:44:0d:3f:e4:b2:8c:93:3f:cf:1f:
         c1:1c:a9:fa:40:e6:db:a6:0c:f4:12:81:6c:0d:e5:e7:8a:cb:
         e7:3e:ed:a7:c7:11:4e:a1:e2:a8:51:21:43:b8:b1:7d:25:fe:
         35:65:6f:60:4b:c2:77:57:8e:0a:46:58:a2:dd:89:d8:78:1f:
         4d:ea:ff:1a:76:8e:54:aa:95:a5:76:e2:b4:23:25:6c:48:95:
         e6:6e:a3:35:d1:5f:38:a7:b5:a7:0d:7f:24:df:5a:97:c1:9d:
         51:27:ab:1d:78:db:37:d1:e7:0b:77:b0:21:91:fe:e2:6d:b4:
         a6:b2:71:3f:59:bf:3d:16:73:49:55:99:2b:04:fd:ed:23:73:
         ac:94:e6:4c:6e:ac:0a:cd:0f:f7:72:58:f7:71:4a:07:63:93:
         6a:83:3c:ff:36:34:e1:8f:a7:bb:08:19:b6:4d:45:a6:04:44:
         bf:7e:7a:21:8b:90:b1:01:54:13:cf:d9:db:b5:e1:33:9f:bd:
         c5:25:e3:6c:9c:28:f6:25:23:8a:68:b0:96:9a:3f:4c:94:9b:
         a5:17:f1:63
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUcm5oLacDOr2C0d3rLBVWeDDQMUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMzAzMDgxODQwMThaFw0yNDAzMDYxODQ1MThaMDMxMTAvBgNV
BAMTKEIzN0IwMzY1NzRDMDJFRkVCM0M0QzM1QzBGNDlDMDA4NzY2NjQzMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWvUjiKSdmAld8mhg67nwVaXb
kXlPgLCJmGmOm9NJe2fQgDJEkMnKeThikjZTFiDL6KxX8YwCCoEo0XawsQwpuMUJ
z2ryyde+Fj3BBT76r66j7nTLU+58BTY/XBK1eWFcQFyKOv6rIZH5jhq/Cm2Z1kKm
/BLeYYFH6kCdOQ8fZ2SA89yjtDrFCkv0xCjymwhOE4kX0kzu1GBgjI//n+o21vAh
j7OJ5txaLpSuBhl6wbiRW3KEO5Ga174+LSxekgbJEZ0XbezF3dgy3PrLy5AyJtQq
GsIOQ1tIn90d2ic0rFSvcaHnJx9b7ChK0QBniIbq7+/upMHGRSgFYOgg0YzVAgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQUs3sDZXTALv6zxMNcD0nACHZmQxowHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMF0GCCsGAQUF
BwELBFEwTzBNBggrBgEFBQcwC4ZBcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29t
L3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC9BUzIxMjUwNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSoF
38eT4DANBgkqhkiG9w0BAQsFAAOCAQEAvuHwMn2NroCVwqFRhaO5L0XEUlqGkiGb
92iR7Ua3U+xnL5d1pzvMYS89IwZEDT/ksoyTP88fwRyp+kDm26YM9BKBbA3l54rL
5z7tp8cRTqHiqFEhQ7ixfSX+NWVvYEvCd1eOCkZYot2J2HgfTer/GnaOVKqVpXbi
tCMlbEiV5m6jNdFfOKe1pw1/JN9al8GdUSerHXjbN9HnC3ewIZH+4m20prJxP1m/
PRZzSVWZKwT97SNzrJTmTG6sCs0P93JY93FKB2OTaoM8/zY04Y+nuwgZtk1FpgRE
v356IYuQsQFUE8/Z27XhM5+9xSXjbJwo9iUjimiwlpo/TJSbpRfxYw==
-----END CERTIFICATE-----