Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS49519.roa
File:                     AS49519.roa (raw, json)
Hash identifier:          9P4DsA1AG5o32Gct6z8jk2GyvVi0ix1znXbC6LHb6+0=
Subject key identifier:   1C:97:2A:3A:D0:88:40:7C:49:4C:8B:8E:F9:54:97:B3:76:1E:6D:1D
Certificate issuer:       /CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
Certificate serial:       684B68E1D425B55432D67E55A89993ED6BE9E58E
Authority key identifier: 68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS49519.roa
Signing time:             Wed 08 Mar 2023 18:45:22 +0000
ROA not before:           Wed 08 Mar 2023 18:40:22 +0000
ROA not after:            Wed 06 Mar 2024 18:45:22 +0000
asID:                     49519
IP address blocks:        2a05:dfc7:2400::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4b:68:e1:d4:25:b5:54:32:d6:7e:55:a8:99:93:ed:6b:e9:e5:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6841FC5C60B7081BC7EB747051E092B90C350B9E
        Validity
            Not Before: Mar  8 18:40:22 2023 GMT
            Not After : Mar  6 18:45:22 2024 GMT
        Subject: CN=1C972A3AD088407C494C8B8EF95497B3761E6D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:21:2d:c1:65:a0:c2:a7:61:e3:3d:bf:3a:
                    a8:68:13:95:be:62:d7:c9:32:80:e3:8f:05:43:ff:
                    d9:80:6a:e8:82:75:36:0d:dc:95:3e:c6:af:80:10:
                    c1:69:44:5a:4f:26:2a:a7:1f:c0:e2:59:2e:ea:0c:
                    a5:fb:2e:e7:4f:b4:a0:e2:64:87:c1:28:37:dc:30:
                    a2:00:a3:76:eb:50:34:fc:e6:3e:63:e9:e6:32:5a:
                    c0:7f:e5:59:07:17:b3:90:1d:1c:76:e1:63:4f:dd:
                    c5:49:e0:f4:1d:d1:57:2e:76:89:fa:7e:e9:50:c5:
                    2f:b4:3b:67:a8:8e:4f:19:5e:81:1d:ab:75:b3:56:
                    31:ba:c3:f5:1a:13:5f:72:f7:f1:42:5f:76:f0:59:
                    45:42:e7:8e:6d:c6:cd:d7:29:67:e1:92:49:5d:6a:
                    0c:5c:fc:73:73:ba:fb:2a:77:30:83:0e:1a:d6:3f:
                    d0:a8:de:f1:06:98:88:f9:14:dc:8c:bc:34:7e:66:
                    b6:cc:56:ef:bd:2e:5b:2f:79:f5:d9:cc:91:ff:3d:
                    d8:85:c2:47:01:b0:d3:f9:c3:ac:83:5a:83:43:a0:
                    f0:64:a5:47:6a:46:90:a5:73:84:23:10:08:65:e8:
                    00:2a:f6:28:03:b1:ac:3d:01:2d:33:cd:73:86:50:
                    8b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:97:2A:3A:D0:88:40:7C:49:4C:8B:8E:F9:54:97:B3:76:1E:6D:1D
            X509v3 Authority Key Identifier:
                keyid:68:41:FC:5C:60:B7:08:1B:C7:EB:74:70:51:E0:92:B9:0C:35:0B:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/6841FC5C60B7081BC7EB747051E092B90C350B9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/6841FC5C60B7081BC7EB747051E092B90C350B9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/WILLIAM_UID_11483/0/AS49519.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:cf:f3:e9:11:c9:db:1e:c0:d5:c6:9d:a1:42:bb:e4:76:0c:
         38:a7:f5:b2:4e:c4:dd:9d:b4:25:bc:d6:de:ff:a0:b0:c9:6f:
         fd:4a:8e:b6:ea:8c:7b:20:e0:39:3d:93:8a:0a:2f:f1:d0:9c:
         90:d1:17:70:3e:01:a6:98:ca:be:20:25:aa:d0:69:cd:eb:51:
         b2:d4:fd:05:84:9c:49:7c:34:40:cb:7b:b8:a8:78:8c:0b:82:
         e5:0c:06:77:c9:f9:c8:d1:72:7a:19:1a:b7:68:c0:f6:cd:16:
         d0:2a:9c:43:03:63:61:47:39:61:90:af:cb:ac:38:7f:b0:0e:
         33:f7:96:5b:4c:ee:78:f4:37:11:ba:12:88:8d:a2:f6:5b:f4:
         ad:07:57:b0:a3:95:45:69:6f:63:ba:a3:40:6a:3c:9f:74:8b:
         f7:86:c7:c3:c2:8d:ed:1c:dd:40:a4:57:8c:01:7c:22:bd:bb:
         a0:a5:5d:4c:20:50:1d:49:f2:88:e8:eb:47:86:a6:41:22:18:
         c2:55:8a:7b:92:18:4e:cb:2f:d1:8e:9f:8e:a5:35:d1:d6:4f:
         6e:82:57:f4:49:21:68:fc:b1:c5:ee:f9:5e:f1:1e:c5:ed:d9:
         2d:22:47:77:86:a8:e8:89:b2:7f:5a:e7:8c:93:84:0d:cf:44:
         d2:03:65:ee
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIUaEto4dQltVQy1n5VqJmT7Wvp5Y4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDkyQjkw
QzM1MEI5RTAeFw0yMzAzMDgxODQwMjJaFw0yNDAzMDYxODQ1MjJaMDMxMTAvBgNV
BAMTKDFDOTcyQTNBRDA4ODQwN0M0OTRDOEI4RUY5NTQ5N0IzNzYxRTZEMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWECEtwWWgwqdh4z2/OqhoE5W+
YtfJMoDjjwVD/9mAauiCdTYN3JU+xq+AEMFpRFpPJiqnH8DiWS7qDKX7LudPtKDi
ZIfBKDfcMKIAo3brUDT85j5j6eYyWsB/5VkHF7OQHRx24WNP3cVJ4PQd0Vcudon6
fulQxS+0O2eojk8ZXoEdq3WzVjG6w/UaE19y9/FCX3bwWUVC545txs3XKWfhkkld
agxc/HNzuvsqdzCDDhrWP9Co3vEGmIj5FNyMvDR+ZrbMVu+9LlsvefXZzJH/PdiF
wkcBsNP5w6yDWoNDoPBkpUdqRpClc4QjEAhl6AAq9igDsaw9AS0zzXOGUIs7AgMB
AAGjggHcMIIB2DAdBgNVHQ4EFgQUHJcqOtCIQHxJTIuO+VSXs3YebR0wHwYDVR0j
BBgwFoAUaEH8XGC3CBvH63RwUeCSuQw1C54wDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1dJ
TExJQU1fVUlEXzExNDgzLzAvNjg0MUZDNUM2MEI3MDgxQkM3RUI3NDcwNTFFMDky
QjkwQzM1MEI5RS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChltyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yLzY4NDFG
QzVDNjBCNzA4MUJDN0VCNzQ3MDUxRTA5MkI5MEMzNTBCOUUuY2VyMFwGCCsGAQUF
BwELBFAwTjBMBggrBgEFBQcwC4ZAcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3QuY29t
L3JlcG8vV0lMTElBTV9VSURfMTE0ODMvMC9BUzQ5NTE5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXf
xyQwDQYJKoZIhvcNAQELBQADggEBAHLP8+kRydsewNXGnaFCu+R2DDin9bJOxN2d
tCW81t7/oLDJb/1KjrbqjHsg4Dk9k4oKL/HQnJDRF3A+AaaYyr4gJarQac3rUbLU
/QWEnEl8NEDLe7ioeIwLguUMBnfJ+cjRcnoZGrdowPbNFtAqnEMDY2FHOWGQr8us
OH+wDjP3lltM7nj0NxG6EoiNovZb9K0HV7CjlUVpb2O6o0BqPJ90i/eGx8PCje0c
3UCkV4wBfCK9u6ClXUwgUB1J8ojo60eGpkEiGMJVinuSGE7LL9GOn46lNdHWT26C
V/RJIWj8scXu+V7xHsXt2S0iR3eGqOiJsn9a54yThA3PRNIDZe4=
-----END CERTIFICATE-----