Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210013.roa
File:                     AS210013.roa (raw, json)
Hash identifier:          DUPqECMfFL5s2C64db+3T3gpoFa5ook+dm6GN4h7/0M=
Subject key identifier:   F6:26:05:E0:6C:3D:02:5D:2A:8C:08:C4:1A:03:DC:91:F5:0A:4B:43
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       1C61782317797CECAB6E6EB3D96C3F0B9113AC95
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210013.roa
Signing time:             Wed 21 Dec 2022 16:56:53 +0000
ROA not before:           Wed 21 Dec 2022 16:51:53 +0000
ROA not after:            Wed 20 Dec 2023 16:56:53 +0000
asID:                     210013
IP address blocks:        2a06:a005:490::/44 maxlen: 48
                          2a06:a005:1460::/44 maxlen: 48
                          2a06:a005:1510::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:61:78:23:17:79:7c:ec:ab:6e:6e:b3:d9:6c:3f:0b:91:13:ac:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:53 2022 GMT
            Not After : Dec 20 16:56:53 2023 GMT
        Subject: CN=F62605E06C3D025D2A8C08C41A03DC91F50A4B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6c:0d:44:c9:bf:89:aa:88:f6:16:17:4f:d7:
                    cb:51:4a:c9:7d:0e:71:f1:2a:e8:3f:74:d9:2e:4e:
                    04:95:82:3a:0e:88:1b:b2:28:19:f9:f6:a8:6f:00:
                    38:f4:b0:62:51:b0:8e:28:02:a5:a7:78:54:f3:17:
                    21:46:c9:6b:7d:01:97:f3:8d:36:4a:73:3c:55:8a:
                    5a:06:24:81:4c:db:f2:e9:0c:80:d0:84:97:82:1c:
                    cf:bf:99:fe:43:00:52:cf:fd:22:c7:d2:f9:0d:77:
                    06:8e:fe:1d:30:a6:e1:c9:1b:81:83:db:dc:8b:0e:
                    c0:e6:90:b1:6d:00:02:e2:39:31:8c:8d:1b:18:15:
                    50:7b:77:3b:4d:2c:3f:a6:3d:1c:a8:d8:ab:1d:15:
                    28:03:23:34:c6:b4:49:98:ef:70:82:af:a8:1b:d9:
                    b5:01:1d:8d:03:c3:34:5c:ad:89:5c:47:af:f2:f6:
                    91:5e:ae:58:39:e1:dd:e6:61:1d:3e:13:c4:8c:c0:
                    6a:0c:44:7e:ae:e6:dd:b7:86:b6:2f:ba:0c:7c:be:
                    26:4c:f1:26:ef:45:22:f1:74:1e:45:11:1b:a4:5f:
                    cb:56:9d:4a:cf:f4:d6:9c:5b:3a:c6:12:57:0e:68:
                    d1:ca:97:07:94:e3:c3:c3:5d:5e:ba:42:cc:e1:1d:
                    4c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:26:05:E0:6C:3D:02:5D:2A:8C:08:C4:1A:03:DC:91:F5:0A:4B:43
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS210013.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:490::/44
                  2a06:a005:1460::/44
                  2a06:a005:1510::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:ec:3a:a7:5d:a8:a5:13:34:f8:be:fb:7c:88:b1:40:2d:fa:
         81:08:81:f6:37:bc:10:d0:7d:c2:d4:f0:0b:a6:1a:d5:24:0a:
         e4:bf:50:63:c5:9b:5a:7b:85:dc:06:be:94:4b:e1:ec:8c:56:
         cb:2a:e1:f9:26:2e:e1:b5:ae:94:a2:32:6a:61:f6:51:d4:d3:
         4e:a1:39:35:df:6b:82:a1:df:36:5b:8b:a3:b9:ad:8e:d9:89:
         20:f8:cd:29:41:8f:51:51:8d:8b:77:8f:3f:78:e9:52:94:c3:
         56:9e:13:d7:b0:32:48:02:6d:d9:e1:e2:7f:5a:31:af:25:5b:
         2e:0a:49:89:31:3a:87:a1:5a:9c:21:96:1b:ff:44:55:1f:cd:
         54:64:c0:da:ed:c3:59:00:5f:e9:1f:1d:11:35:f5:9d:77:54:
         68:ef:02:b1:cc:2c:1e:64:90:bb:4d:18:86:cf:c4:a7:54:8c:
         bb:71:dc:ec:aa:dd:59:5b:f5:6d:20:1a:12:b5:aa:a8:69:32:
         a1:89:73:04:50:97:3a:10:a0:d9:8e:8a:94:04:a7:b8:76:ad:
         29:64:c7:45:46:ad:6c:2c:1c:7b:cc:71:d6:50:9c:77:27:68:
         15:69:eb:53:66:7f:d2:c4:cb:b5:9b:7e:fe:d7:6f:0a:d8:c8:
         e9:bb:8d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----