Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/323630363a623934303a623030623a3a2f34382d3438203d3e20393435.roa
File:                     323630363a623934303a623030623a3a2f34382d3438203d3e20393435.roa (raw, json)
Hash identifier:          nHcgCDXspM9nAfUC30jzFP3hk54wOvyS/oUZtnqYj+I=
Subject key identifier:   38:F8:78:8D:90:A4:22:17:07:33:A3:9E:AC:82:A3:FF:5C:D7:79:AE
Certificate issuer:       /CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
Certificate serial:       7B7305E205ECF9008E64236F74FC7DB8490EEEC0
Authority key identifier: DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/323630363a623934303a623030623a3a2f34382d3438203d3e20393435.roa
Signing time:             Wed 21 Dec 2022 16:56:56 +0000
ROA not before:           Wed 21 Dec 2022 16:51:56 +0000
ROA not after:            Wed 20 Dec 2023 16:56:56 +0000
asID:                     945
IP address blocks:        2606:b940:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:73:05:e2:05:ec:f9:00:8e:64:23:6f:74:fc:7d:b8:49:0e:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94
        Validity
            Not Before: Dec 21 16:51:56 2022 GMT
            Not After : Dec 20 16:56:56 2023 GMT
        Subject: CN=38F8788D90A422170733A39EAC82A3FF5CD779AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:55:3e:3b:bb:b8:eb:f4:fc:04:09:ef:94:
                    81:f6:61:6e:3e:9f:d7:22:7f:eb:0c:bf:41:25:bb:
                    96:b4:01:b4:63:e8:3f:15:11:1c:e7:cb:53:86:48:
                    2f:5c:97:e5:46:01:cb:25:83:c3:5b:c6:d0:53:5a:
                    58:8f:7c:ee:14:53:5c:0d:2a:4c:5b:d8:4c:74:9a:
                    4f:90:8e:eb:a9:24:3d:8c:2b:56:21:44:24:0b:68:
                    5c:ec:eb:e0:29:b5:43:b7:b4:0e:e3:23:87:d0:34:
                    e4:2b:4b:73:63:2c:12:35:f6:52:7d:d9:43:2a:f8:
                    96:ea:b9:ee:67:6d:a9:af:b3:ad:54:b1:07:a1:27:
                    76:23:63:65:bc:fd:2c:72:a4:92:ee:db:2b:0a:fa:
                    e0:41:40:cf:53:f2:9a:7c:63:92:05:10:0a:10:4e:
                    69:44:74:2b:40:94:bc:9b:21:73:5e:d6:bf:c3:f2:
                    8f:4e:2a:45:a0:97:fc:35:ad:cb:36:bc:a3:b3:e7:
                    e7:09:4f:99:57:39:5a:4d:e9:40:da:7d:04:13:bf:
                    26:49:2b:1e:05:b6:63:a2:cd:14:6e:61:69:b6:11:
                    46:96:4e:a9:ce:2c:7f:6a:1f:ae:23:79:2a:47:1e:
                    ed:c9:cf:53:2d:e7:a1:8b:30:85:c6:af:f3:7b:08:
                    12:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F8:78:8D:90:A4:22:17:07:33:A3:9E:AC:82:A3:FF:5C:D7:79:AE
            X509v3 Authority Key Identifier:
                keyid:DE:6F:18:B4:61:95:8D:DD:20:74:CB:5A:19:1A:64:0D:32:0B:B5:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/DE6F18B461958DDD2074CB5A191A640D320BB580.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a607f0ca81b84e2bcc70a47498444207847a86a94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/323630363a623934303a623030623a3a2f34382d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b940:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:39:91:95:e0:c4:51:9b:eb:b3:9c:70:31:7a:44:f7:6a:2d:
         1d:6a:fc:54:ac:87:ed:c1:8e:9e:8b:c2:43:d9:58:b4:d6:9c:
         0d:c4:3a:bf:d2:ae:a3:69:ea:8d:6d:56:05:22:dd:02:8c:47:
         0a:0d:7d:68:cd:43:4e:92:21:9e:71:7f:de:40:63:1c:52:81:
         75:9c:d2:cd:6e:4f:53:70:18:23:13:86:c0:90:ba:1f:5d:3c:
         40:2f:b1:9e:ea:0c:e1:cd:93:3d:60:01:7b:c1:96:2f:0e:aa:
         29:1d:7a:cb:b2:08:ac:16:65:ef:d3:b0:92:c7:7f:9c:3a:e8:
         b9:b2:4f:0e:6b:f2:8a:d7:56:33:8f:ec:df:e0:08:02:3e:93:
         88:93:bf:8a:cc:81:71:6c:8d:3e:23:89:b3:60:33:a7:32:8b:
         0c:60:81:b8:4f:cf:ab:8d:c1:73:aa:21:0a:f6:38:9f:f5:15:
         58:3a:9f:d7:b8:aa:51:53:d8:f0:0c:20:ac:47:98:c0:f0:95:
         08:2b:e8:ed:ad:84:74:d4:c1:10:0e:63:f5:28:ba:4a:7c:db:
         e5:f8:22:d0:22:9d:44:02:e4:95:7c:8d:2b:ac:90:ae:62:87:
         b7:af:69:8a:fd:57:11:99:fe:e5:6b:e7:3b:d9:10:9b:d2:6a:
         f2:5b:5a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----