Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212983.roa
File:                     AS212983.roa (raw, json)
Hash identifier:          Jo1FR4AzweAl4rG45HBhbX+0lzDRSWWwYjSHU6Sv3Ts=
Subject key identifier:   0F:C4:EC:45:77:55:29:20:8F:B8:5F:94:58:11:16:34:1B:ED:65:5D
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       46095F572DA25DA91FF50C10CA9096A5CDA300D0
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212983.roa
Signing time:             Wed 08 Mar 2023 18:45:22 +0000
ROA not before:           Wed 08 Mar 2023 18:40:22 +0000
ROA not after:            Wed 06 Mar 2024 18:45:22 +0000
asID:                     212983
IP address blocks:        2a06:1287:1700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:09:5f:57:2d:a2:5d:a9:1f:f5:0c:10:ca:90:96:a5:cd:a3:00:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:22 2023 GMT
            Not After : Mar  6 18:45:22 2024 GMT
        Subject: CN=0FC4EC45775529208FB85F94581116341BED655D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:4d:18:5f:eb:ae:df:fc:47:96:98:40:be:
                    aa:04:ae:fa:12:f0:28:fe:36:d7:ac:d6:30:a4:d2:
                    bd:f7:4a:80:a5:92:c6:36:c7:7e:36:50:0f:d6:3a:
                    1f:f3:c3:94:c6:91:1f:ab:92:4a:7b:60:6e:f0:c4:
                    b7:45:24:4a:69:fa:0c:ae:a0:c0:2c:73:a4:07:e5:
                    21:95:0f:14:a5:76:99:2e:17:31:dc:79:e7:ec:3d:
                    b2:73:07:8a:3f:8d:c7:31:64:0a:ee:e0:d0:20:af:
                    f4:a5:54:1e:9b:c4:52:a7:0d:01:6c:ce:f4:39:97:
                    84:11:a5:84:22:10:5d:a5:ee:00:d3:13:49:11:8f:
                    96:27:fb:53:f9:db:5d:9f:7b:a2:67:a5:8f:78:b9:
                    55:d3:7e:f5:90:ec:df:5d:37:17:9f:2d:82:8c:56:
                    8c:13:18:24:6e:1b:8d:7c:dd:48:91:cb:1b:ad:df:
                    d2:0d:7d:bc:13:8d:13:d9:8a:1f:61:15:49:12:ad:
                    df:9e:e4:09:a1:c3:c7:5a:6c:c2:41:8b:f4:a0:55:
                    de:1c:2d:f4:c1:05:d5:1f:59:d4:48:56:80:ab:10:
                    29:a7:3e:8f:95:d1:73:f1:37:d9:00:8d:88:33:9c:
                    75:a1:ab:f4:e6:5c:93:42:dd:e1:28:cc:42:cf:c5:
                    4d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C4:EC:45:77:55:29:20:8F:B8:5F:94:58:11:16:34:1B:ED:65:5D
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS212983.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:e9:50:ab:fe:2e:7e:6e:53:7f:f4:1f:9d:f6:e8:0e:e9:2f:
         ac:a6:0b:f6:cf:a1:6f:01:ec:28:fe:a2:d4:23:c4:1a:83:36:
         73:57:51:73:37:fb:09:d8:fa:08:9c:f0:41:9c:26:ec:da:4a:
         82:38:aa:cf:07:a0:c4:e2:15:ac:a5:87:45:9b:9e:33:96:55:
         a2:7d:2b:45:0e:e7:14:d0:08:cd:f1:bb:70:c2:4a:c2:5c:23:
         f8:79:87:ae:92:24:1c:26:3a:17:4e:6a:9c:00:c0:7a:b2:11:
         01:da:28:17:9d:f4:ec:98:82:b0:5b:09:ac:79:c0:7f:3b:d0:
         6f:0f:a2:df:e4:2c:d1:0f:41:e3:44:4f:eb:1b:47:ce:60:e6:
         21:82:fc:ce:a0:87:04:d5:53:4f:48:f5:ab:de:3d:19:24:48:
         f5:be:66:60:1a:4a:33:7b:5b:e0:5a:f3:b9:ba:60:9b:f6:92:
         b1:77:12:2c:c9:dc:f4:a9:8b:c1:35:a7:53:7d:47:ac:3b:7e:
         9a:51:21:bd:f4:32:e7:5e:57:19:c0:91:2d:3c:5f:b9:13:e6:
         25:d3:34:df:23:a5:f2:ca:0f:21:e7:9a:60:19:be:bd:26:37:
         81:c8:37:98:3d:d1:27:74:e2:47:6e:01:75:33:fd:a6:22:3a:
         10:bf:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----