Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS1018.roa
File:                     AS1018.roa (raw, json)
Hash identifier:          T/nZ9e+5t1DTr1gppaX04YVHNSjw1bTanIpN6bWOInI=
Subject key identifier:   73:BF:4D:E4:54:75:1A:89:C8:BE:BC:25:D8:B4:EA:A3:78:86:3C:B7
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       6ADA0E9F91DC7CE21AE301B495C6D3EA24A0CAD9
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS1018.roa
Signing time:             Wed 21 Dec 2022 16:56:49 +0000
ROA not before:           Wed 21 Dec 2022 16:51:49 +0000
ROA not after:            Wed 20 Dec 2023 16:56:49 +0000
asID:                     1018
IP address blocks:        2a06:a005:5f8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:da:0e:9f:91:dc:7c:e2:1a:e3:01:b4:95:c6:d3:ea:24:a0:ca:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:49 2022 GMT
            Not After : Dec 20 16:56:49 2023 GMT
        Subject: CN=73BF4DE454751A89C8BEBC25D8B4EAA378863CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:bb:27:fd:5d:41:c3:44:12:e1:ee:f5:03:
                    ca:09:1f:9f:b7:40:25:b1:4a:0c:10:5a:62:ac:45:
                    55:e8:93:50:08:2f:6d:e2:cd:e7:72:5e:10:1a:57:
                    44:16:51:88:37:25:b8:34:c3:28:47:66:8d:8b:9e:
                    cd:7d:ad:ac:be:72:03:7f:ef:26:42:98:06:14:f0:
                    07:fa:92:6c:7a:75:9f:60:35:e6:16:c6:6c:cb:db:
                    15:b2:ee:43:cf:f2:f9:b9:06:e9:f8:d8:48:70:f4:
                    ff:bd:5c:9c:5a:ac:ac:1c:95:6b:12:bd:f0:d6:93:
                    6e:57:63:b3:be:7a:dd:46:75:47:7d:6f:96:c9:20:
                    74:25:1b:26:6b:ec:36:42:c4:e4:96:e4:b5:e5:e7:
                    c6:3c:92:ed:70:18:b2:5c:3e:9d:8f:e4:6d:ed:77:
                    47:2b:dd:20:d6:03:13:59:4b:e7:e3:6e:2e:18:9f:
                    6c:5f:f2:2e:ad:79:72:fb:f7:40:6d:1a:4a:12:9c:
                    47:97:8b:6e:98:2f:ad:e9:2a:c4:75:37:58:ef:48:
                    6e:d1:a2:e9:94:6c:bf:b7:0b:31:09:d2:7d:df:3b:
                    be:fa:f9:7f:ee:b6:c1:f1:93:df:c1:06:81:11:39:
                    2f:3f:69:bf:71:d4:3d:72:19:62:fd:8c:42:1b:6f:
                    e3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BF:4D:E4:54:75:1A:89:C8:BE:BC:25:D8:B4:EA:A3:78:86:3C:B7
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS1018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:fa:75:28:4e:a6:da:e2:5c:ff:39:f5:68:aa:a5:30:30:1c:
         87:5b:54:89:9a:be:44:a3:e6:92:5d:68:cc:60:63:78:77:b6:
         92:47:d2:00:56:48:1c:a1:a8:b1:87:73:7b:10:a2:4b:73:d2:
         05:5c:a1:57:3a:ba:8b:ec:a4:de:f1:a2:8a:fd:6d:9c:31:19:
         52:82:0d:e2:bf:a0:bf:f1:57:e3:ec:b4:81:cb:c6:c2:c0:0d:
         8f:39:4a:e3:7a:aa:08:e9:bb:c5:4f:18:55:2d:62:de:a4:3a:
         61:4f:71:ba:f3:d9:87:cf:ae:ec:05:af:c4:60:41:fc:59:3e:
         6f:07:bb:8b:4c:84:69:ea:ba:e1:6a:e9:c5:e1:b2:4b:b4:e1:
         ff:c9:17:77:38:be:ad:ea:52:bc:82:8c:b2:0a:ea:5b:f6:80:
         39:6f:5a:30:fb:4b:f6:9a:7b:f9:16:60:34:4e:0f:8d:62:57:
         f6:8e:a9:99:21:01:af:e1:b0:17:ba:70:a7:98:d4:60:84:a1:
         ea:84:64:a3:67:71:06:36:04:c4:99:40:b8:27:e4:b5:3f:93:
         75:9e:fe:64:7a:c3:b2:a5:d3:80:e8:a2:ff:2f:ec:ac:f7:51:
         58:02:75:99:72:4f:31:af:97:b8:db:91:e1:cf:da:ae:63:f5:
         f4:3a:c1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----