Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS60438.roa
File:                     AS60438.roa (raw, json)
Hash identifier:          VpaW9K3ZLZpTdJIEO4pG3AsVdmV+wgsRuwc0PIv/CGA=
Subject key identifier:   CE:1B:42:AA:CF:9A:25:09:36:F2:C9:EE:5C:7C:A5:16:66:8C:DD:E6
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       0EDF1BC1904F87B015A11FDF93C94463837CB222
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS60438.roa
Signing time:             Sun 25 Dec 2022 11:54:47 +0000
ROA not before:           Sun 25 Dec 2022 11:49:47 +0000
ROA not after:            Sun 24 Dec 2023 11:54:47 +0000
asID:                     60438
IP address blocks:        2a06:a005:26c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:df:1b:c1:90:4f:87:b0:15:a1:1f:df:93:c9:44:63:83:7c:b2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 25 11:49:47 2022 GMT
            Not After : Dec 24 11:54:47 2023 GMT
        Subject: CN=CE1B42AACF9A250936F2C9EE5C7CA516668CDDE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:2d:f7:a2:ba:8c:fe:18:0e:1f:40:f0:3f:
                    3c:29:ca:63:a6:f3:62:c4:52:f5:13:f6:bb:fd:9a:
                    c1:e8:61:82:50:ec:b0:09:11:81:a0:c4:10:92:47:
                    ac:a6:fd:40:1e:47:b8:54:42:06:6c:0e:f0:40:9b:
                    2e:01:01:d0:e0:66:43:aa:0e:db:f2:20:bc:6d:b5:
                    d6:0a:25:cf:bd:24:b2:f3:bc:27:e3:e5:f4:45:4b:
                    2f:7a:3e:a8:6b:2a:1e:0f:32:19:bf:f8:68:59:e0:
                    c1:1b:d4:7f:3b:db:ad:39:62:ba:ca:e0:e4:c2:07:
                    8e:1a:4c:19:15:e5:6c:b0:79:eb:3c:d7:75:4b:43:
                    04:60:67:c4:d4:ca:71:ee:b1:3e:b0:73:4d:c6:22:
                    c2:f5:d8:db:3f:0b:23:ed:de:3e:b1:f2:a6:89:07:
                    fd:6d:09:fe:0d:35:77:6c:49:c9:e6:bd:55:47:9d:
                    13:f6:b6:0c:72:c0:3a:93:3a:00:5c:4b:b3:17:0d:
                    e9:6d:55:db:5b:de:d8:9a:04:1b:bf:69:c8:1d:d8:
                    30:db:01:6b:35:20:7d:4e:9f:4f:af:e1:aa:57:ce:
                    e2:91:fa:25:c5:bc:8d:ea:b3:18:be:dc:5f:f6:eb:
                    f0:78:70:0b:24:a1:11:61:6f:68:fc:06:db:15:d2:
                    0f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1B:42:AA:CF:9A:25:09:36:F2:C9:EE:5C:7C:A5:16:66:8C:DD:E6
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS60438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:26c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:7e:60:36:d3:1e:6b:58:2f:61:ea:96:dd:70:55:36:89:95:
         a2:d0:00:18:4e:d9:56:68:4f:ad:8d:d0:90:f4:5e:64:c1:2a:
         4b:57:6f:6e:cd:bb:07:04:47:cb:35:8f:64:e3:d2:09:12:79:
         77:73:e0:e3:be:2e:5e:18:d9:3a:70:73:01:11:27:7b:11:70:
         fb:30:de:95:5e:09:be:75:4a:fe:6d:6a:e2:6c:2f:8f:1e:30:
         e2:e9:3c:9f:61:9e:19:27:81:4e:b7:2d:4b:74:28:63:1d:b1:
         23:84:ed:5d:f1:0a:6e:b3:62:d6:cc:27:d5:a7:4f:9e:d7:5b:
         07:5a:5c:b2:38:cd:26:e6:f7:74:75:e3:8d:c5:48:93:eb:34:
         ff:63:2d:31:e5:3e:ca:14:d8:d1:be:37:64:d3:e2:ce:7e:1c:
         d0:b1:90:81:bf:22:ab:fb:45:b7:38:ed:c8:a1:45:28:9c:d6:
         d3:e1:19:48:e8:e4:71:5b:b7:dc:bf:cf:65:3a:2f:18:4c:d2:
         46:87:01:34:af:a1:f2:de:29:d5:b5:f9:2b:af:5c:d4:32:ff:
         e3:7c:df:d9:c3:75:da:1a:9f:6a:87:9d:f7:c9:19:92:4b:dd:
         8a:53:93:01:33:af:61:f8:73:ca:35:0c:37:17:be:f7:36:b1:
         95:59:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----