Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS52210.roa
File:                     AS52210.roa (raw, json)
Hash identifier:          StOvWDmGzmmmi63taccTRzmsZrqtORgkspB1f7WH1E0=
Subject key identifier:   43:6A:D2:05:69:14:85:28:AE:2C:1C:55:5B:11:19:6A:B0:2F:0B:AF
Certificate issuer:       /CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Certificate serial:       439181B7561C5253F7D758D1DFEFD50DBB4819C7
Authority key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS52210.roa
Signing time:             Fri 09 Dec 2022 07:58:41 +0000
ROA not before:           Fri 09 Dec 2022 07:53:41 +0000
ROA not after:            Fri 08 Dec 2023 07:58:41 +0000
asID:                     52210
IP address blocks:        2a0a:6040:c500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:91:81:b7:56:1c:52:53:f7:d7:58:d1:df:ef:d5:0d:bb:48:19:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
        Validity
            Not Before: Dec  9 07:53:41 2022 GMT
            Not After : Dec  8 07:58:41 2023 GMT
        Subject: CN=436AD20569148528AE2C1C555B11196AB02F0BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:e3:3a:2e:01:dc:ba:a5:cf:4a:f7:bf:09:
                    c8:57:b6:bd:de:ee:15:52:31:85:b3:a3:a4:67:b8:
                    da:e9:5e:36:28:94:01:74:58:5c:8c:e7:64:11:c4:
                    35:b9:8f:b3:45:73:8d:20:09:be:1b:46:aa:97:bc:
                    a0:23:93:30:29:b5:c0:6d:49:7e:1d:90:27:26:60:
                    7b:78:94:02:81:72:4d:a6:6e:db:3f:f0:1a:27:c8:
                    da:25:13:be:17:70:72:92:f3:a6:00:04:d4:4f:a2:
                    66:98:6d:b2:fd:be:15:17:3b:14:74:b6:55:b5:54:
                    67:70:b6:7b:1c:5a:90:7a:57:08:d6:1b:ee:99:84:
                    f0:50:5c:f5:11:0b:42:f9:b4:b3:a2:9b:01:05:c5:
                    be:5c:49:a6:6a:33:f9:fb:55:b9:79:0b:10:80:2f:
                    04:e1:4a:0e:16:01:79:3e:ab:1d:c6:7d:d9:47:68:
                    8d:4a:92:f3:d4:bf:e6:15:98:ed:8b:29:9d:e4:b7:
                    f5:35:83:22:c1:a5:97:09:36:f8:c7:71:af:f7:04:
                    53:5f:de:b7:76:cc:64:f6:76:80:21:b7:f9:36:6f:
                    dd:7a:a6:5f:00:9c:27:a1:f6:96:46:7c:36:b3:ff:
                    cc:32:c1:ef:bb:e3:2c:5b:9a:98:ce:da:63:06:e7:
                    09:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6A:D2:05:69:14:85:28:AE:2C:1C:55:5B:11:19:6A:B0:2F:0B:AF
            X509v3 Authority Key Identifier:
                keyid:75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS52210.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c500::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:89:70:20:8e:1f:31:de:8f:5b:a4:8c:19:02:f3:70:c1:53:
         cb:1d:e3:65:60:fb:f0:30:49:c6:3a:54:38:48:66:5d:c9:92:
         36:f0:e9:18:20:3d:7c:de:82:e9:e2:70:7f:48:46:ba:4a:87:
         b5:74:00:16:7c:08:70:49:fb:a1:aa:30:1a:7f:c6:c7:e8:96:
         c6:b2:3b:78:e6:f6:14:6b:ce:3d:a5:23:24:74:fc:83:51:3d:
         5f:ba:9d:2d:60:30:76:c7:4c:a0:8f:dd:ba:4a:c4:04:b9:5f:
         d8:d8:16:c1:31:87:48:bf:e0:95:00:d4:11:8a:cc:33:4c:6d:
         68:64:3f:2e:35:22:64:80:dd:7f:4b:bc:43:b5:68:73:89:21:
         32:a2:7d:f5:91:43:9a:c8:69:b1:29:cb:66:ce:94:27:aa:8c:
         5a:fd:f3:5f:58:1b:7a:f6:b7:cd:56:f9:cd:44:f7:28:4a:f5:
         c8:c7:38:f3:14:35:b3:58:81:7b:74:cd:d4:52:ba:6e:9f:ad:
         58:3f:a2:5c:5d:4c:22:27:55:9b:3e:39:ef:22:5d:6a:f9:a3:
         fa:95:34:a5:6c:f6:27:fa:f2:aa:1e:b7:a3:86:21:f9:67:bd:
         6c:1f:a4:1f:27:7c:37:3b:bd:76:10:03:2f:cd:88:e2:9f:58:
         00:0f:43:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----