Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463313a333330303a3a2f34302d3438203d3e20323033343538.roa
File:                     326130373a353463313a333330303a3a2f34302d3438203d3e20323033343538.roa (raw, json)
Hash identifier:          mRd/PpPMhSEUxscevO0F7kEwQbgakxCxrrfvV1FghWA=
Subject key identifier:   CE:C2:11:7D:CB:E1:88:D3:9B:3D:60:F2:11:06:A2:8C:03:29:0D:8F
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       2218F8CEF1202ADB3C3ECB258B67CCF7894539F4
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463313a333330303a3a2f34302d3438203d3e20323033343538.roa
Signing time:             Thu 15 Dec 2022 19:40:45 +0000
ROA not before:           Thu 15 Dec 2022 19:35:45 +0000
ROA not after:            Thu 14 Dec 2023 19:40:45 +0000
asID:                     203458
IP address blocks:        2a07:54c1:3300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:18:f8:ce:f1:20:2a:db:3c:3e:cb:25:8b:67:cc:f7:89:45:39:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec 15 19:35:45 2022 GMT
            Not After : Dec 14 19:40:45 2023 GMT
        Subject: CN=CEC2117DCBE188D39B3D60F21106A28C03290D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:74:d1:c1:84:f6:36:6b:5c:9b:e2:b8:6a:
                    52:d8:ef:85:79:ff:04:22:0b:15:8a:7c:cf:c1:b7:
                    81:cf:27:05:66:39:01:ea:37:d8:a7:4c:b6:8a:6e:
                    16:d1:02:dd:ad:5f:32:5c:cc:e6:17:10:b5:85:d0:
                    15:b2:79:e9:d1:e2:f2:31:5c:89:3d:e5:42:4e:35:
                    cd:96:fb:56:5b:d7:16:b2:01:d4:0c:7e:5a:96:a6:
                    b9:cd:9b:62:b0:01:bd:09:10:16:93:f1:2e:4e:f6:
                    c5:e7:b9:55:d6:86:ad:9a:fd:c4:e5:8d:cf:77:eb:
                    be:ff:fb:2e:b5:c1:ab:95:55:ea:03:7a:91:a0:1f:
                    89:f8:66:56:63:e1:e4:eb:3b:d9:49:d0:a5:51:17:
                    26:69:99:ce:8d:92:00:30:ae:16:3e:0d:42:4d:3f:
                    87:ca:06:3e:2a:53:92:c6:f5:7e:2c:a4:f4:44:d9:
                    40:11:46:89:8a:d1:54:eb:04:4f:74:bb:92:53:b8:
                    62:46:7a:0b:fd:9a:84:2b:16:0e:47:7e:fd:89:4d:
                    61:80:e8:f5:13:cf:55:f3:54:77:cd:dc:df:ff:de:
                    0b:76:bd:79:d8:62:70:73:6b:39:4b:79:cf:51:17:
                    01:fc:54:3e:af:f7:1e:95:65:04:42:87:71:ea:ba:
                    c2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C2:11:7D:CB:E1:88:D3:9B:3D:60:F2:11:06:A2:8C:03:29:0D:8F
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463313a333330303a3a2f34302d3438203d3e20323033343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:09:1f:49:56:7c:aa:7b:5d:5f:4b:67:3e:57:ea:91:58:bf:
         8a:70:6a:7e:91:d4:28:0c:2c:3a:8d:ab:21:a7:49:da:0f:fb:
         b0:5d:5b:99:2b:86:44:47:17:30:c6:65:de:9b:e0:63:1b:04:
         5e:ee:6d:19:fc:42:72:b1:c6:98:72:2f:e0:5a:1d:8b:85:f2:
         e6:54:35:fe:35:73:61:4e:8c:ee:4b:5c:5d:d9:14:f9:17:7e:
         bd:90:33:32:68:41:a2:f0:5f:3a:32:1d:b2:79:ec:56:83:47:
         9a:5a:c4:8f:39:55:35:34:ae:8d:df:67:42:d6:fb:d5:cb:16:
         e1:52:3f:d8:14:c3:45:f5:00:c5:35:33:7e:69:ce:d9:15:c6:
         1c:ff:66:b1:58:3d:4c:68:af:61:49:95:98:ef:a8:21:19:88:
         2b:7a:25:d7:ff:94:fd:17:0e:0f:ab:5e:f6:34:5a:9f:b5:df:
         9c:36:b4:5b:01:28:a3:d8:94:47:1d:e7:b5:d9:5d:29:d7:b5:
         80:f6:f8:b6:8b:77:59:26:90:a7:50:aa:ee:ec:c7:92:fc:73:
         10:aa:6a:f0:75:17:a7:fa:c4:c5:ac:29:27:69:8d:0f:22:bb:
         9a:fa:d8:60:6b:13:30:83:1e:9d:e2:76:5f:b2:1d:75:5d:f6:
         88:18:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:51 2024 by rpki-client on console-ams.rpki-client.org