Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS6145.roa
File:                     AS6145.roa (raw, json)
Hash identifier:          2PmYTveffFEdZHfMuWooh1IHtkYgnDy53tIIV38CahM=
Subject key identifier:   24:19:29:E7:96:D7:DF:D0:2E:84:B4:94:A2:3C:BC:E1:C2:AF:13:E5
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       7F08B4697BDCA356CEA3981B76C99358FD71C917
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS6145.roa
Signing time:             Wed 21 Dec 2022 16:56:45 +0000
ROA not before:           Wed 21 Dec 2022 16:51:45 +0000
ROA not after:            Wed 20 Dec 2023 16:56:45 +0000
asID:                     6145
IP address blocks:        2a06:a005:1500::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:08:b4:69:7b:dc:a3:56:ce:a3:98:1b:76:c9:93:58:fd:71:c9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:45 2022 GMT
            Not After : Dec 20 16:56:45 2023 GMT
        Subject: CN=241929E796D7DFD02E84B494A23CBCE1C2AF13E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:96:ce:bb:b6:27:59:5e:94:00:d9:2d:b1:bd:
                    3a:ac:e6:74:77:55:71:76:53:69:bb:56:41:87:17:
                    30:20:b0:81:4e:87:e3:a9:16:54:80:02:f4:a4:c3:
                    28:b7:46:e7:1a:74:78:e9:2b:40:05:dd:3c:1d:75:
                    6a:af:18:c2:ef:94:c7:c3:e8:46:8a:11:97:1d:e8:
                    dc:8c:16:62:a7:5f:ad:4d:75:26:5f:d4:1c:5b:25:
                    bd:2b:fe:1d:90:85:fa:c7:5d:18:1a:52:f4:02:f2:
                    da:60:0d:23:c7:72:49:b0:3b:07:85:fe:41:d3:a7:
                    7e:c0:72:a5:92:ca:57:43:29:33:2a:0b:95:91:d9:
                    49:d6:9d:dc:f5:ee:de:a0:94:2c:a3:cd:2a:2e:eb:
                    03:9a:2a:79:33:e6:30:b6:77:98:57:29:10:0e:dc:
                    51:2c:b7:ad:23:d3:44:6f:b4:b2:00:13:c4:73:bb:
                    09:f6:ca:70:bd:ae:ef:34:e8:e0:ed:35:94:82:d9:
                    3a:df:38:b9:c1:0b:5a:58:92:1c:c9:61:e7:7b:28:
                    8e:21:26:88:b8:0c:28:04:cf:e5:d3:5e:d9:e7:3f:
                    51:8c:af:2b:fb:c0:8b:b3:9f:d0:d1:10:f3:9e:ce:
                    87:4c:26:53:5a:86:1f:a9:78:ac:60:2b:e7:65:31:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:19:29:E7:96:D7:DF:D0:2E:84:B4:94:A2:3C:BC:E1:C2:AF:13:E5
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS6145.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1500::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:dc:d4:57:e1:2c:29:d8:92:81:ab:cc:cc:f5:86:22:13:0a:
         66:b3:c0:80:21:bb:bc:a2:89:ab:8f:a1:95:d1:2b:6a:7b:63:
         20:7f:31:52:ab:50:ef:cb:1d:3e:76:e2:0a:84:a0:4e:d5:21:
         38:2a:f0:7b:24:76:1d:d2:54:4a:8a:3a:ec:89:f8:87:58:88:
         fa:d0:cc:79:d0:5a:5b:a4:89:4b:0d:99:6c:71:c6:2e:ba:22:
         c5:4b:b4:36:9b:0a:49:9d:6b:50:5b:d9:55:62:23:2d:20:63:
         65:f8:14:f4:95:56:e5:a4:59:f3:ff:67:08:01:41:72:30:37:
         0b:75:b5:89:7e:bc:74:0f:fc:50:b8:b3:a7:5a:43:a6:5f:52:
         e2:95:fb:7c:78:3f:0c:aa:ac:fa:35:2f:8b:99:c8:e4:77:0c:
         6e:f0:d0:b5:92:87:90:6c:b4:e7:4e:64:e4:b8:5f:78:d1:17:
         a4:7e:2c:56:e9:4a:00:bb:00:75:be:e1:3c:97:6d:e6:c7:c1:
         2d:34:56:18:60:f4:13:13:50:5c:61:fb:45:48:60:05:be:31:
         b7:85:f5:6a:bd:74:32:da:2b:e7:d6:d7:50:8b:68:21:4d:2c:
         a1:5b:f4:5a:53:f8:90:3f:09:a6:04:ee:f9:1c:0d:db:35:65:
         c2:01:aa:d4
-----BEGIN CERTIFICATE-----
MIIEszCCA5ugAwIBAgIUfwi0aXvco1bOo5gbdsmTWP1xyRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNDVaFw0yMzEyMjAxNjU2NDVaMDMxMTAvBgNV
BAMTKDI0MTkyOUU3OTZEN0RGRDAyRTg0QjQ5NEEyM0NCQ0UxQzJBRjEzRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkls67tidZXpQA2S2xvTqs5nR3
VXF2U2m7VkGHFzAgsIFOh+OpFlSAAvSkwyi3RucadHjpK0AF3TwddWqvGMLvlMfD
6EaKEZcd6NyMFmKnX61NdSZf1BxbJb0r/h2QhfrHXRgaUvQC8tpgDSPHckmwOweF
/kHTp37AcqWSyldDKTMqC5WR2UnWndz17t6glCyjzSou6wOaKnkz5jC2d5hXKRAO
3FEst60j00RvtLIAE8Rzuwn2ynC9ru806ODtNZSC2TrfOLnBC1pYkhzJYed7KI4h
Joi4DCgEz+XTXtnnP1GMryv7wIuzn9DREPOezodMJlNahh+peKxgK+dlMcxNAgMB
AAGjggG9MIIBuTAdBgNVHQ4EFgQUJBkp55bX39AuhLSUojy84cKvE+UwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVQYIKwYBBQUHAQsESTBHMEUGCCsGAQUFBzALhjlyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTNjE0
NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACoGoAUVADANBgkqhkiG9w0BAQsFAAOCAQEAaNzUV+EsKdiS
gavMzPWGIhMKZrPAgCG7vKKJq4+hldErantjIH8xUqtQ78sdPnbiCoSgTtUhOCrw
eyR2HdJUSoo67In4h1iI+tDMedBaW6SJSw2ZbHHGLroixUu0NpsKSZ1rUFvZVWIj
LSBjZfgU9JVW5aRZ8/9nCAFBcjA3C3W1iX68dA/8ULizp1pDpl9S4pX7fHg/DKqs
+jUvi5nI5HcMbvDQtZKHkGy0505k5LhfeNEXpH4sVulKALsAdb7hPJdt5sfBLTRW
GGD0ExNQXGH7RUhgBb4xt4X1ar10Mtor59bXUItoIU0soVv0WlP4kD8JpgTu+RwN
2zVlwgGq1A==
-----END CERTIFICATE-----