Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201412.roa
File:                     AS201412.roa (raw, json)
Hash identifier:          dvpVWz93GUXAj8Rz1ChnK41WLCIn/N/4GlA8Rb/NmO8=
Subject key identifier:   CD:CC:8C:99:87:94:33:2E:AD:F3:0F:FE:F3:60:34:C0:8A:9A:CD:1B
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       06A98AE6FD5CFFF103046E7BFB76F5D21F9B6197
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201412.roa
Signing time:             Thu 22 Dec 2022 20:13:08 +0000
ROA not before:           Thu 22 Dec 2022 20:08:08 +0000
ROA not after:            Thu 21 Dec 2023 20:13:08 +0000
asID:                     201412
IP address blocks:        2a06:a005:2720::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a9:8a:e6:fd:5c:ff:f1:03:04:6e:7b:fb:76:f5:d2:1f:9b:61:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 22 20:08:08 2022 GMT
            Not After : Dec 21 20:13:08 2023 GMT
        Subject: CN=CDCC8C998794332EADF30FFEF36034C08A9ACD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:9f:d0:9d:7f:61:0b:5c:fd:6b:22:90:13:
                    92:08:35:7c:6d:2b:a5:5f:b1:5e:b3:ee:d9:f8:db:
                    a1:ee:5f:f1:63:54:ce:e5:55:68:a1:66:d1:32:41:
                    5b:e7:77:20:87:87:60:4e:ca:87:22:aa:16:e6:62:
                    8e:08:ec:46:60:05:4b:49:5b:30:46:22:b3:aa:ce:
                    48:3a:f0:98:e7:4c:cc:93:0c:49:f7:50:6c:0e:14:
                    05:07:d5:67:78:9b:cb:fb:d0:53:27:db:20:e4:93:
                    45:33:d1:1d:a6:12:3c:64:6b:dc:87:4a:3b:8d:a8:
                    77:f2:c6:52:55:26:40:db:0b:53:32:6e:b7:c9:36:
                    73:15:38:42:cb:64:a4:b4:c3:c4:18:b4:d2:05:ed:
                    a9:56:e3:9f:d2:84:63:76:3a:f4:02:6f:8a:ea:1b:
                    76:49:54:0a:77:4d:31:cd:83:5c:a5:30:7e:f7:b3:
                    93:90:93:0c:70:e9:1e:f3:57:14:92:98:72:8c:ae:
                    e0:14:20:58:be:1a:b8:a0:c0:d8:78:82:b2:43:9d:
                    97:4d:53:6a:59:78:e2:1c:cc:a5:98:01:64:51:93:
                    16:b9:ad:b8:b0:5e:62:3d:e7:e3:9e:2a:18:df:ac:
                    b0:61:bf:41:d3:38:a6:91:6b:b8:27:20:63:6c:07:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CC:8C:99:87:94:33:2E:AD:F3:0F:FE:F3:60:34:C0:8A:9A:CD:1B
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS201412.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2720::/44

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:5d:f7:10:24:dd:10:06:66:15:4a:15:49:ed:17:f1:2c:
         05:41:f3:03:ac:18:9a:fc:55:4a:fa:d3:56:08:57:73:2a:f2:
         93:59:d5:a5:78:66:36:94:23:a3:de:8b:36:80:99:5b:e3:17:
         9b:9c:a3:95:ba:2c:75:ad:b8:ab:5c:9b:e4:ba:fb:7a:de:5b:
         99:74:e3:45:fe:17:e2:3f:97:2c:c1:85:18:b8:a4:47:11:88:
         4a:67:3c:1d:ed:f9:c6:17:f1:b8:2c:69:24:74:0b:43:9f:2d:
         84:59:d7:af:60:ad:69:8d:12:02:c8:da:0d:ff:25:f7:4e:c1:
         8c:f6:c8:17:a1:cf:74:10:ad:d8:76:0c:af:b1:8b:7e:6f:16:
         13:4e:11:94:7a:34:76:1e:ce:0b:ca:5e:0b:06:7f:f7:49:27:
         b4:c8:70:40:6e:52:ce:77:a8:90:30:2b:30:9c:c5:7e:4f:2e:
         c6:43:e6:2d:bb:47:81:45:a2:da:a2:f1:38:c1:ce:5b:ed:19:
         e9:f8:c5:7a:39:a7:c9:78:5d:46:ac:bd:1c:c0:e3:fd:6e:5c:
         4c:2e:9e:14:dd:1f:03:bc:78:b5:be:9a:be:2b:07:fd:41:c4:
         ad:af:1c:61:45:9f:2d:0b:5a:61:b0:d6:11:48:51:3a:90:ca:
         61:ec:8b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----