Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211562.roa
File:                     AS211562.roa (raw, json)
Hash identifier:          0brMeaibY5/BKme+swAbwiRp+F9bRWyVgfqO+NfGczk=
Subject key identifier:   73:20:9B:1D:97:F2:C1:9F:F2:43:C4:37:5D:D9:00:90:02:D8:D5:27
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       3A63F22BFC09A1830D92602B6C8D20D3CBA3D8B1
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211562.roa
Signing time:             Fri 30 Dec 2022 17:46:37 +0000
ROA not before:           Fri 30 Dec 2022 17:41:37 +0000
ROA not after:            Fri 29 Dec 2023 17:46:37 +0000
asID:                     211562
IP address blocks:        2a06:a005:2990::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:63:f2:2b:fc:09:a1:83:0d:92:60:2b:6c:8d:20:d3:cb:a3:d8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 30 17:41:37 2022 GMT
            Not After : Dec 29 17:46:37 2023 GMT
        Subject: CN=73209B1D97F2C19FF243C4375DD9009002D8D527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:5e:70:fa:f3:82:e4:20:ae:00:48:07:0b:
                    ea:99:72:63:8b:42:a4:8b:41:6e:1f:9e:c2:f1:77:
                    cb:b4:7c:f4:b2:2c:87:38:5f:3d:52:6b:e6:fd:df:
                    36:ab:2a:65:80:43:05:28:36:dd:b1:00:67:d0:6c:
                    f0:50:d4:f5:44:2f:0c:f1:f3:ab:c4:f9:22:19:cc:
                    70:aa:ee:5f:d2:70:8f:6f:33:f5:c4:9e:17:e8:7a:
                    b4:80:98:07:8d:ab:f5:03:2f:2d:6c:93:a9:7a:ae:
                    6e:cf:00:71:80:73:cd:28:a7:98:69:3d:94:2b:f7:
                    1a:62:fb:c3:da:5a:d5:98:af:1d:a8:ec:b7:87:06:
                    72:4c:72:99:79:da:63:cc:d5:99:cb:3e:58:fd:dc:
                    5c:1f:8b:41:09:17:3f:58:ea:30:ac:0e:84:40:79:
                    9d:e9:ae:4c:32:7b:56:eb:d8:db:70:51:7b:28:1c:
                    64:4a:dd:92:4f:3b:ff:2a:77:2a:63:a6:ce:8f:6c:
                    81:fe:ab:2d:27:25:46:49:24:a3:ad:20:1d:5b:aa:
                    81:b0:d5:1f:14:5d:d1:bb:09:d4:86:3d:4b:38:88:
                    99:45:43:ca:1c:04:8c:ef:74:b2:5a:cf:3c:bc:3a:
                    b0:c5:3c:e4:73:43:a5:65:09:7f:52:e1:93:46:07:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:20:9B:1D:97:F2:C1:9F:F2:43:C4:37:5D:D9:00:90:02:D8:D5:27
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211562.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2990::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:36:1d:b3:dd:95:ad:9d:15:52:07:c9:50:7f:2b:8e:ed:26:
         12:79:73:e5:29:c6:e1:68:01:a9:2c:96:33:8a:db:f0:f1:28:
         90:88:bb:60:65:5c:0d:e5:5e:d8:ea:74:64:fe:d6:5b:b7:0d:
         2c:e0:a2:83:a3:06:50:27:af:61:ef:9c:ac:d5:fa:44:0e:53:
         42:80:b8:91:01:cb:23:10:10:80:42:77:19:0e:a9:39:b4:89:
         58:93:90:f0:90:2d:3f:38:76:a3:e6:06:56:a7:9f:7a:ff:f8:
         7f:ff:fc:77:58:2c:f3:db:d6:6c:02:f0:37:20:b7:de:eb:5b:
         dd:6a:4b:51:52:05:36:35:6a:53:ba:34:a6:33:fe:51:fa:d7:
         48:7b:10:43:36:5c:81:60:4f:51:4f:3c:b6:fc:af:f0:b4:46:
         aa:3a:ac:1a:02:2e:64:7a:96:7f:f1:04:a8:64:da:1f:a0:58:
         5f:87:f5:e8:a3:61:48:eb:26:00:cb:4b:6d:50:df:1f:43:88:
         d8:cc:30:1a:66:c7:9d:a5:50:f6:86:3d:93:bb:2c:11:2a:78:
         00:fe:9f:5e:d3:1b:06:36:07:61:61:5a:3d:c6:9c:91:8c:8c:
         7d:45:42:49:bc:da:2a:81:74:2f:ae:f6:a3:c3:a6:f6:ba:cb:
         c0:5b:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----