Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211575.roa
File:                     AS211575.roa (raw, json)
Hash identifier:          mkpj3+hbc4B3Q9W/tuTVlBHd/LYiv6yoUclvNoX5p3w=
Subject key identifier:   79:4A:C7:49:19:C1:2C:E7:B5:2B:D0:D7:FC:C2:F0:29:8E:D2:B1:60
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       623E704DF95AFE44C7D5CA3964C00525F8D74CB3
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211575.roa
Signing time:             Wed 21 Dec 2022 16:56:52 +0000
ROA not before:           Wed 21 Dec 2022 16:51:52 +0000
ROA not after:            Wed 20 Dec 2023 16:56:52 +0000
asID:                     211575
IP address blocks:        2a06:a005:436::/48 maxlen: 48
                          2a06:a005:650::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3e:70:4d:f9:5a:fe:44:c7:d5:ca:39:64:c0:05:25:f8:d7:4c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:52 2022 GMT
            Not After : Dec 20 16:56:52 2023 GMT
        Subject: CN=794AC74919C12CE7B52BD0D7FCC2F0298ED2B160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:00:2d:71:2c:93:02:04:62:b5:01:15:8f:
                    1d:8f:f5:09:a5:4a:10:f6:d6:5d:6e:91:74:36:ab:
                    37:03:2d:f6:f0:b6:ca:3b:40:0d:52:be:3a:3d:e8:
                    27:f9:0d:67:aa:cd:9e:89:78:a5:e4:94:d5:cf:9b:
                    0d:4b:4b:0e:3a:6b:a7:3d:9b:48:da:ec:99:99:53:
                    6e:34:10:f3:40:63:8e:37:f8:1e:3b:f4:e0:a3:32:
                    de:ad:4d:c2:30:e3:e1:dd:d3:1e:d9:2a:12:66:32:
                    57:a3:1d:9f:9f:2e:3d:fb:b1:5f:2d:b1:5a:8e:83:
                    b9:0b:bc:89:24:31:97:5d:c3:58:bd:e8:8d:c2:a3:
                    d4:97:52:3c:cc:92:52:6f:4a:35:cb:d6:ec:e7:06:
                    b2:63:b5:55:0d:ee:23:d4:4b:b3:3a:55:d6:9a:b7:
                    59:a0:a9:82:39:42:01:cc:2c:df:13:cf:d1:e8:2c:
                    6a:e9:7f:d1:e3:78:d9:ff:2e:85:43:06:dd:c0:68:
                    1c:4d:6e:8f:59:71:bc:95:b1:b3:71:49:ae:32:82:
                    c7:fa:c4:83:be:65:20:62:51:a5:5e:d8:53:95:a8:
                    9d:8c:23:bd:2d:88:b3:f5:e7:00:aa:40:ad:f5:fd:
                    11:bd:11:d5:6c:05:d8:78:7a:2b:00:6e:94:30:ac:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4A:C7:49:19:C1:2C:E7:B5:2B:D0:D7:FC:C2:F0:29:8E:D2:B1:60
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS211575.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:436::/48
                  2a06:a005:650::/44

    Signature Algorithm: sha256WithRSAEncryption
         00:31:25:b6:c9:bf:26:a4:0c:6b:19:a5:9b:ce:fc:d6:ba:73:
         d4:c4:bc:cc:91:68:70:77:c0:23:c1:e1:b4:8c:60:4d:53:89:
         41:d6:ae:6d:a9:9b:7f:06:45:f3:e4:0b:5d:7a:04:e7:1d:a2:
         b5:11:0a:45:6e:d1:74:c3:d7:fe:38:4f:e2:87:a4:f0:9f:ab:
         bd:43:f8:04:f9:79:67:9a:f9:ce:d9:08:a8:90:ad:bb:08:d5:
         2c:9a:29:d9:c3:fe:15:90:ee:95:e9:d0:44:00:f5:e2:e4:b8:
         78:36:7f:08:bd:07:d1:bf:a7:f9:ba:0c:bb:f5:4c:63:32:9a:
         b6:0f:e4:58:71:dc:2d:50:6a:a9:44:8b:dc:07:de:41:56:cc:
         b1:02:5d:fc:59:ac:e5:c9:58:d0:48:6e:51:75:a9:13:67:e2:
         24:41:c2:43:e8:f4:fd:f4:3f:6f:93:7e:a7:88:f1:08:c6:1e:
         7d:91:25:1c:c2:c3:35:d1:f4:ec:4e:b7:bd:dc:4b:01:50:50:
         60:fe:12:47:b6:8c:62:36:7e:ce:74:e7:8d:b3:06:00:d0:2d:
         7d:ee:d2:f5:d8:16:12:30:9c:76:b7:a4:b7:35:6a:2a:5b:7e:
         09:c8:c2:40:24:d1:9c:58:d4:10:32:cb:fb:68:bf:6b:85:1e:
         42:ff:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----