Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS213327.roa
File:                     AS213327.roa (raw, json)
Hash identifier:          YHfBSUYMNo8Lt3LvAMkJ0EUkdnlC6Y2SL0WP0HIOpGw=
Subject key identifier:   56:F4:2B:11:0C:C1:70:03:AA:D5:4A:54:71:8F:63:CA:CE:A5:9B:EA
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       2F108880C44FAC7BFA23126FD5EC07D9D099BA84
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS213327.roa
Signing time:             Mon 03 Apr 2023 16:09:37 +0000
ROA not before:           Mon 03 Apr 2023 16:04:37 +0000
ROA not after:            Mon 01 Apr 2024 16:09:37 +0000
asID:                     213327
IP address blocks:        2a05:dfc7:4600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:10:88:80:c4:4f:ac:7b:fa:23:12:6f:d5:ec:07:d9:d0:99:ba:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Apr  3 16:04:37 2023 GMT
            Not After : Apr  1 16:09:37 2024 GMT
        Subject: CN=56F42B110CC17003AAD54A54718F63CACEA59BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:92:d3:b8:74:0b:d9:73:a8:9a:e1:dd:54:fa:
                    9b:4c:bc:2f:2d:e2:ab:14:2a:82:2c:00:d9:7f:da:
                    6f:64:77:4f:5c:fd:8f:dd:20:7b:40:ac:ad:5c:86:
                    e2:44:05:b7:09:f0:c2:43:3e:a7:52:cc:61:9f:da:
                    78:53:f2:bd:dc:1e:09:57:5a:1a:ca:c5:5c:7d:ec:
                    09:e1:6b:cd:ab:8d:2e:9c:41:36:03:1a:c5:fb:65:
                    fd:30:cd:e5:5e:e8:a6:99:c7:98:b0:03:82:37:c3:
                    6f:3e:6d:9c:93:f9:87:f5:71:94:e1:e6:9a:d9:89:
                    b0:8d:21:be:17:d3:2a:12:78:e5:32:c1:93:8d:33:
                    ad:02:9a:45:c4:a3:7c:1a:6c:19:ea:b9:88:18:cd:
                    81:ac:42:c5:4a:c8:b8:e8:fd:30:b0:8f:12:c9:9e:
                    47:7e:b2:ba:78:1e:0e:30:4d:6a:47:52:39:aa:1e:
                    78:91:e8:80:3f:33:8d:c3:37:bd:65:8c:d6:45:35:
                    dc:09:b9:ae:d9:93:ba:0a:13:0b:1a:8f:a0:d6:23:
                    4f:ee:a0:63:6c:36:f1:2d:d6:8a:62:e2:91:27:3b:
                    41:83:de:77:6a:af:7f:0a:71:49:0a:ed:8f:35:92:
                    ff:b9:7e:55:a7:10:d8:f7:bc:59:e1:5b:ae:59:5f:
                    1e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F4:2B:11:0C:C1:70:03:AA:D5:4A:54:71:8F:63:CA:CE:A5:9B:EA
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS213327.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4600::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:b1:18:76:77:52:62:5e:20:a4:36:9e:38:b7:4a:06:bf:51:
         76:aa:27:ff:b3:0a:ed:a9:13:94:81:11:69:da:18:03:64:3b:
         5c:1f:75:49:4b:7f:37:c5:dd:f2:c3:b3:93:96:26:58:40:84:
         80:cd:0c:fd:25:57:a4:7d:04:9c:2a:63:21:84:6e:47:f6:03:
         aa:1b:6a:4a:8c:95:4e:06:0b:28:7c:f8:6e:f8:ce:38:76:e3:
         d2:ed:fd:fd:d3:16:fb:05:8f:6a:f3:f6:36:d0:f4:d3:d6:13:
         fb:65:58:c2:f0:c6:64:c1:4f:24:15:5c:3f:55:6a:d3:51:4f:
         7a:e3:0a:fd:fe:25:b4:63:65:b1:44:8b:74:74:b8:95:68:bd:
         49:5a:52:b1:3d:b3:c3:9e:84:3d:64:a3:e7:12:af:9c:1d:80:
         51:92:ff:de:73:af:49:c9:9a:b1:2f:81:3f:8d:2b:bf:11:04:
         f2:01:e8:d8:e8:1e:fb:f6:eb:f6:e6:46:f2:45:e3:4e:10:43:
         b6:87:34:90:73:60:88:16:36:e8:57:30:1a:6a:7c:07:ef:9c:
         70:2e:ea:3d:65:59:1e:da:ef:8c:e7:df:8c:fc:5e:2d:3f:5c:
         73:d1:6e:fc:16:d1:b6:f6:c4:a8:15:a2:53:1f:59:5d:90:ad:
         91:15:3d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:26 2024 by rpki-client on console-fra.rpki-client.org