Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS62430.roa
File:                     AS62430.roa (raw, json)
Hash identifier:          WUQ2btFxnEWHJXri/psVmp0dWaV2mEYXfBfM3Z8wmKw=
Subject key identifier:   3F:89:39:8A:A8:8B:3E:39:59:E9:03:8E:17:47:DF:71:81:C6:42:E7
Certificate issuer:       /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial:       0D344606C78D06032047B5BB646F2E38636344EC
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS62430.roa
Signing time:             Wed 21 Dec 2022 16:56:43 +0000
ROA not before:           Wed 21 Dec 2022 16:51:43 +0000
ROA not after:            Wed 20 Dec 2023 16:56:43 +0000
asID:                     62430
IP address blocks:        2a06:a005:19::/48 maxlen: 48
                          2a06:a005:840::/44 maxlen: 48
                          2a06:a005:ba4::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:34:46:06:c7:8d:06:03:20:47:b5:bb:64:6f:2e:38:63:63:44:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
        Validity
            Not Before: Dec 21 16:51:43 2022 GMT
            Not After : Dec 20 16:56:43 2023 GMT
        Subject: CN=3F89398AA88B3E3959E9038E1747DF7181C642E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:75:6c:e7:96:b7:d5:19:52:5f:f2:6c:88:a9:
                    8f:58:fc:99:ff:d2:21:f8:0f:a1:19:bb:87:08:ac:
                    50:4f:b1:8c:50:8f:ab:52:57:ff:98:2b:9d:db:04:
                    b1:45:c8:fc:56:e6:24:f5:f3:4c:58:fc:1a:6a:a5:
                    fe:db:1d:7e:ec:52:8f:13:42:b1:66:cc:8b:43:76:
                    74:e0:29:ff:06:48:7c:1f:b2:8e:38:70:37:82:33:
                    8f:20:07:43:40:0f:da:74:45:0b:02:6d:07:bf:39:
                    b0:bf:31:75:03:f1:3d:bd:92:64:10:f4:38:87:d6:
                    cd:71:e5:76:cc:6b:5a:a4:1e:06:59:65:77:f1:6f:
                    eb:e3:43:2a:2e:80:59:64:e5:39:82:bf:3e:f9:09:
                    36:31:0a:9f:d5:a6:b1:db:c1:86:0f:e3:cc:f0:75:
                    27:48:56:0a:8d:f2:10:91:26:5c:02:28:4e:b8:f2:
                    b1:8b:e2:2b:3b:80:c6:03:09:4d:a6:ce:a7:a3:63:
                    8c:61:a0:d1:15:97:28:9b:4a:2b:90:f9:af:f2:48:
                    cd:07:7a:db:3d:8c:b8:e3:c2:85:a6:ac:6f:b3:a2:
                    cf:aa:30:4d:77:96:1e:0d:33:f9:41:e7:9c:54:54:
                    89:7f:de:72:4a:30:a8:cc:3d:8e:3c:1f:72:cb:8a:
                    a5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:89:39:8A:A8:8B:3E:39:59:E9:03:8E:17:47:DF:71:81:C6:42:E7
            X509v3 Authority Key Identifier:
                keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS62430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:19::/48
                  2a06:a005:840::/44
                  2a06:a005:ba4::/46

    Signature Algorithm: sha256WithRSAEncryption
         0d:ef:9b:36:fd:d2:29:41:bf:64:f8:cd:48:2d:63:1f:00:74:
         0c:b1:b7:45:49:f2:d1:52:b4:45:05:d0:01:f8:4c:be:b8:8d:
         75:f2:ea:01:fe:53:2e:43:f1:fa:3b:7c:52:11:3e:36:80:27:
         a6:a4:50:70:f9:b7:a0:43:df:b6:18:55:bd:8c:6b:4c:97:f4:
         80:b3:9c:82:71:9b:62:88:b5:2a:0d:7d:ed:f1:a3:d5:ab:c9:
         fd:1e:54:c4:be:0b:0b:d2:f6:7b:69:73:f2:44:ad:77:fb:54:
         d5:c9:b6:29:b0:aa:46:42:19:c0:c1:54:f9:85:49:45:6f:a8:
         64:98:9b:ba:a7:36:38:5f:a2:09:89:ee:18:ce:2c:c7:a2:c2:
         ea:d4:60:37:c4:f3:6a:c8:43:e5:aa:09:b9:7d:d4:75:0e:9c:
         77:76:ee:4b:b4:0d:84:91:b6:22:fb:0a:f6:c2:62:06:09:81:
         d7:af:14:8e:cc:8f:bb:75:2e:d6:cc:e7:37:fd:7f:17:6b:77:
         0f:c3:f3:ca:6b:34:b2:a0:95:dc:74:b3:b2:6e:c3:83:38:62:
         22:3c:ec:15:9e:5d:99:40:c0:a6:57:92:cc:ea:d3:49:44:24:
         22:0d:dc:e0:4d:a5:20:dd:14:d2:d7:c8:51:18:21:29:45:e0:
         84:40:57:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----