Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS21738.roa
File:                     AS21738.roa (raw, json)
Hash identifier:          ozt/hHnMTp25eIgtOYKpXxn1DLwIg2OTJZ0DZQeZuP0=
Subject key identifier:   62:8A:96:BC:E4:4B:C8:C8:04:66:1D:CD:94:A4:19:83:F3:DD:30:41
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       677DA60B2BF852566D3D9FC56B96F2EF88110E7F
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS21738.roa
Signing time:             Mon 20 Mar 2023 03:46:22 +0000
ROA not before:           Mon 20 Mar 2023 03:41:22 +0000
ROA not after:            Mon 18 Mar 2024 03:46:22 +0000
asID:                     21738
IP address blocks:        2a06:1287:fe00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7d:a6:0b:2b:f8:52:56:6d:3d:9f:c5:6b:96:f2:ef:88:11:0e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar 20 03:41:22 2023 GMT
            Not After : Mar 18 03:46:22 2024 GMT
        Subject: CN=628A96BCE44BC8C804661DCD94A41983F3DD3041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:df:23:a2:cc:d9:13:55:62:11:2e:39:44:
                    55:d0:e5:4f:9e:ec:7b:d0:34:e0:60:d9:52:0f:d5:
                    16:d3:91:94:91:54:f5:70:1a:df:7f:19:53:a3:0a:
                    ef:32:f3:bb:d4:43:90:5e:68:9a:8a:14:f0:b9:67:
                    6a:8f:2b:93:0c:ce:6c:81:f8:10:3e:43:10:92:6f:
                    b4:fd:eb:6f:20:86:37:a6:af:a6:41:ad:fa:de:58:
                    9b:a7:f5:99:a6:90:34:04:b4:f9:8b:76:52:87:3f:
                    78:d2:59:db:7a:dd:be:0b:03:55:1e:d1:22:3a:59:
                    9d:5b:b7:23:03:b2:5e:fd:65:60:07:95:a7:cd:d3:
                    ae:05:c3:8b:37:a6:70:b0:48:87:de:62:fa:01:c3:
                    9e:f8:73:0f:72:ce:16:bc:3c:1f:e1:19:9a:28:17:
                    8e:57:e2:17:a5:18:c9:5f:7f:01:6b:62:4f:d8:b9:
                    f5:71:cc:ed:49:aa:76:5d:01:d5:4d:e9:0f:ee:f1:
                    fd:d5:4b:86:df:b8:c9:2b:63:30:9f:6f:f9:6a:d1:
                    e3:e3:32:4a:ec:60:6d:5b:41:f5:6e:5a:90:9e:36:
                    5a:60:46:c6:9b:f5:0e:a5:66:1f:e7:db:2c:37:3c:
                    dd:6c:fd:38:68:0f:cf:a5:5c:ae:94:fe:98:c7:c8:
                    e4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8A:96:BC:E4:4B:C8:C8:04:66:1D:CD:94:A4:19:83:F3:DD:30:41
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS21738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:fe00::/39

    Signature Algorithm: sha256WithRSAEncryption
         23:72:70:20:3d:2d:b3:04:31:5f:59:cc:65:ec:f5:90:f6:66:
         ee:76:8c:65:18:14:34:ea:8c:d7:78:c6:f1:9e:6d:e3:63:c2:
         6e:32:e4:2e:fe:db:75:b4:de:9b:f7:ed:81:32:5d:c1:fe:6d:
         e8:7d:0f:5f:78:28:93:86:39:f5:2b:da:4d:b4:c8:e2:28:f0:
         29:4a:f7:ff:dd:14:41:cc:3d:e6:db:80:cd:d5:a1:1f:a4:c4:
         af:39:39:20:20:41:95:bf:c7:a6:54:2c:b4:29:73:c0:a6:18:
         2f:6c:b2:d2:83:d6:65:5a:40:45:52:16:3a:2c:4f:16:1e:1a:
         a1:9e:b0:af:8f:70:71:e0:70:f6:dd:18:7d:62:43:8c:5c:92:
         bd:11:d6:26:8d:67:10:99:3f:95:27:06:eb:3a:18:69:23:f2:
         0f:81:a3:9a:94:16:73:28:07:5d:71:35:64:c9:9f:f9:71:b1:
         9b:54:ca:0a:52:de:9c:2d:8a:15:8c:9f:27:49:62:e3:2a:d8:
         aa:07:ae:6a:bb:95:a0:b8:72:e7:dd:40:46:7f:a5:68:82:2c:
         24:5a:40:e6:4d:d4:bd:a2:7b:4a:a0:f6:4f:b9:da:09:ad:1e:
         0f:dc:40:24:7e:82:f1:b9:d4:c2:12:31:03:da:d3:5c:f4:50:
         70:6d:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----