Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS36351.roa
File:                     AS36351.roa (raw, json)
Hash identifier:          XNfpRPRUvsWBNiQy0rkqSZBaEIRrZUiWlC9ZA0Qn/EE=
Subject key identifier:   BC:68:92:71:34:3F:41:DC:36:9B:01:67:91:F5:D7:F1:04:59:81:97
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       4E1732D2DD4B1B393B47B9897016358A043E1290
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS36351.roa
Signing time:             Wed 08 Mar 2023 18:45:25 +0000
ROA not before:           Wed 08 Mar 2023 18:40:25 +0000
ROA not after:            Wed 06 Mar 2024 18:45:25 +0000
asID:                     36351
IP address blocks:        2a05:dfc7:30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:17:32:d2:dd:4b:1b:39:3b:47:b9:89:70:16:35:8a:04:3e:12:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:25 2023 GMT
            Not After : Mar  6 18:45:25 2024 GMT
        Subject: CN=BC689271343F41DC369B016791F5D7F104598197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9d:0b:99:ee:36:ed:5a:0b:5d:5a:3b:11:00:
                    36:f2:4a:1a:40:75:11:c3:a7:e4:d6:83:ea:d1:1e:
                    90:80:47:ad:6c:2e:42:f5:3f:f4:79:4c:bd:8c:1c:
                    b9:66:6d:4d:09:81:66:2d:8e:98:2f:71:0f:85:de:
                    bc:c2:dc:c2:3b:96:e7:00:49:78:08:4c:7d:dc:bf:
                    09:11:f5:c7:2d:59:a3:68:eb:1c:e5:48:e0:2d:e1:
                    d9:c3:a9:b4:12:f4:22:b8:35:a7:8a:46:73:59:49:
                    96:94:dd:ef:25:9d:1d:14:94:c4:4b:b6:73:67:10:
                    33:aa:6f:1d:28:36:d4:79:fe:a6:f9:cf:38:4c:cc:
                    17:b9:96:ef:62:f1:04:9b:b6:69:ae:cd:f5:d7:f3:
                    9b:b3:62:e9:85:d8:04:ea:d3:2c:24:24:89:13:5f:
                    a8:10:8e:8d:6a:57:4a:be:6d:74:88:78:87:eb:1a:
                    21:56:6a:77:bc:57:97:f7:91:57:28:49:6e:55:22:
                    fc:ad:f9:fa:6e:05:8a:a9:a1:2b:8f:02:48:45:78:
                    e9:c5:ad:d5:2b:e9:37:ec:87:27:5f:e8:2a:62:25:
                    61:95:28:7f:c3:83:fd:b1:5c:25:2c:f1:39:b6:c3:
                    0a:15:0c:15:8a:9f:7d:ff:c0:bd:c7:0e:50:04:2b:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:68:92:71:34:3F:41:DC:36:9B:01:67:91:F5:D7:F1:04:59:81:97
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS36351.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:8f:bc:03:74:86:92:8a:1f:77:f1:e2:6f:80:63:c2:60:3a:
         f7:1c:62:b4:84:58:8e:26:f3:1b:7b:c6:aa:63:41:77:4f:25:
         43:87:cd:64:2f:05:4d:1a:39:ba:ba:f2:3f:9f:1c:0b:38:19:
         5c:6f:b4:5a:75:44:f8:a8:5a:a0:c7:28:4f:d4:53:b5:a5:04:
         26:71:ca:74:3f:a2:30:ed:7f:6d:02:13:d0:92:ce:25:01:d4:
         84:2d:0d:af:1d:26:7c:8e:86:2e:32:d0:ff:d5:29:a1:49:69:
         15:28:c4:9c:fa:b0:9d:02:2e:54:b6:e6:e5:7e:f2:9e:01:cd:
         cb:e7:e2:dc:cf:0e:b6:59:13:91:d9:5f:a6:b6:9e:e7:00:6e:
         f3:50:bf:a8:e1:70:6e:f4:f9:82:fa:6a:52:4c:fd:ea:e7:2d:
         ba:97:aa:42:df:32:47:26:a6:26:a3:36:c7:4d:af:19:01:d5:
         72:f0:46:77:45:e5:ff:09:99:cb:5a:4e:67:e9:bc:92:c2:47:
         61:79:ff:3e:e9:94:ba:f2:c4:7b:c5:36:ad:d3:1e:c8:ec:50:
         7d:28:7e:f0:14:57:f6:2d:00:fd:ee:ef:c2:a7:3a:d0:63:de:
         43:b1:e0:96:43:1b:92:ae:24:2b:aa:30:c7:41:a9:cd:fb:be:
         b8:22:b5:87
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUThcy0t1LGzk7R7mJcBY1igQ+EpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMzAzMDgxODQwMjVaFw0yNDAzMDYxODQ1MjVaMDMxMTAvBgNV
BAMTKEJDNjg5MjcxMzQzRjQxREMzNjlCMDE2NzkxRjVEN0YxMDQ1OTgxOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjnQuZ7jbtWgtdWjsRADbyShpA
dRHDp+TWg+rRHpCAR61sLkL1P/R5TL2MHLlmbU0JgWYtjpgvcQ+F3rzC3MI7lucA
SXgITH3cvwkR9cctWaNo6xzlSOAt4dnDqbQS9CK4NaeKRnNZSZaU3e8lnR0UlMRL
tnNnEDOqbx0oNtR5/qb5zzhMzBe5lu9i8QSbtmmuzfXX85uzYumF2ATq0ywkJIkT
X6gQjo1qV0q+bXSIeIfrGiFWane8V5f3kVcoSW5VIvyt+fpuBYqpoSuPAkhFeOnF
rdUr6Tfshydf6CpiJWGVKH/Dg/2xXCUs8Tm2wwoVDBWKn33/wL3HDlAEK3+bAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUvGiScTQ/Qdw2mwFnkfXX8QRZgZcwHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMFwGCCsGAQUF
BwELBFAwTjBMBggrBgEFBQcwC4ZAcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29t
L3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC9BUzM2MzUxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXf
xwAwMA0GCSqGSIb3DQEBCwUAA4IBAQA/j7wDdIaSih938eJvgGPCYDr3HGK0hFiO
JvMbe8aqY0F3TyVDh81kLwVNGjm6uvI/nxwLOBlcb7RadUT4qFqgxyhP1FO1pQQm
ccp0P6Iw7X9tAhPQks4lAdSELQ2vHSZ8joYuMtD/1SmhSWkVKMSc+rCdAi5Utubl
fvKeAc3L5+Lczw62WROR2V+mtp7nAG7zUL+o4XBu9PmC+mpSTP3q5y26l6pC3zJH
JqYmozbHTa8ZAdVy8EZ3ReX/CZnLWk5n6bySwkdhef8+6ZS68sR7xTat0x7I7FB9
KH7wFFf2LQD97u/CpzrQY95DseCWQxuSriQrqjDHQanN+764IrWH
-----END CERTIFICATE-----