Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20313437303230.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20313437303230.roa (raw, json)
Hash identifier:          T51Mpki/84GmgSyym1Yps6nhYSd0Oq/gqzElqQEDpNU=
Subject key identifier:   A0:AE:86:18:3F:7B:76:1F:00:70:2D:12:62:67:FF:D3:E6:CE:CA:D2
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       2A5B197E6A9E8BBDC20FE742BDBB438222E45F98
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20313437303230.roa
Signing time:             Fri 09 Dec 2022 15:39:33 +0000
ROA not before:           Fri 09 Dec 2022 15:34:33 +0000
ROA not after:            Fri 08 Dec 2023 15:39:33 +0000
asID:                     147020
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5b:19:7e:6a:9e:8b:bd:c2:0f:e7:42:bd:bb:43:82:22:e4:5f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:33 2022 GMT
            Not After : Dec  8 15:39:33 2023 GMT
        Subject: CN=A0AE86183F7B761F00702D126267FFD3E6CECAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:f2:12:25:d0:ae:e3:38:85:bd:8e:cb:6f:
                    4b:8a:08:c6:cf:db:8c:ec:97:25:d3:b4:1f:a6:99:
                    13:42:8d:a8:37:8b:cd:f0:d3:09:da:70:dd:7f:4a:
                    82:09:de:13:e7:f2:7d:25:34:b8:e0:77:da:5f:03:
                    af:a1:d8:c5:eb:2d:73:60:6e:55:75:25:fd:8b:93:
                    f9:2c:8b:21:1c:04:69:09:39:23:66:16:aa:51:cc:
                    8f:02:76:a5:84:1b:5a:67:bd:e7:ee:37:17:20:67:
                    b8:4c:d8:ef:b0:55:15:fc:55:20:4f:95:56:01:4e:
                    7b:92:69:26:e7:3d:03:38:58:c2:eb:37:51:0b:34:
                    cc:9f:3d:b5:1c:62:1d:b4:26:b5:73:69:50:89:85:
                    7d:a4:9b:97:c7:c5:2d:a2:e1:d2:3f:6c:f4:8e:6e:
                    b8:de:6c:0d:9b:53:df:b7:6f:1f:8e:3b:10:dc:5a:
                    41:85:4d:96:bc:e4:70:0a:42:4d:c4:9d:d5:ad:77:
                    05:53:79:0a:95:63:1e:9e:c1:69:2f:c1:85:9a:00:
                    58:5f:0b:8f:8d:82:c8:e3:a5:7d:6b:cf:93:79:c5:
                    94:0d:40:4e:cc:e9:1f:b0:4c:4c:07:4c:25:d9:51:
                    5b:0d:34:81:c6:42:0d:88:4e:8a:f8:bb:a5:40:e5:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AE:86:18:3F:7B:76:1F:00:70:2D:12:62:67:FF:D3:E6:CE:CA:D2
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20313437303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:29:91:58:22:1f:07:26:37:d2:94:6d:d5:3e:c4:e6:55:ce:
         c2:b8:1a:2b:b3:41:2a:05:2d:0b:84:dc:e4:49:76:fc:43:11:
         2e:82:43:3a:d3:f6:7a:bd:8c:a7:b5:a8:eb:70:08:88:e3:24:
         d7:fd:39:bd:ba:ca:b7:7c:36:7d:fe:dd:d5:b5:c5:34:94:e7:
         15:53:6e:bf:0e:79:33:8e:a5:db:f6:7c:e6:24:73:43:29:80:
         dd:32:af:d2:13:8b:c1:4f:1a:da:2c:7d:e6:15:6e:f1:66:93:
         9c:c5:93:5a:54:1f:34:79:2f:0b:1c:fa:9b:8b:a8:fe:fc:0a:
         19:3d:53:03:57:a5:bf:4b:95:9d:d2:7e:05:32:59:ff:eb:b2:
         49:cc:b4:50:46:c7:97:e0:69:6d:d1:6c:0d:55:66:d3:da:17:
         79:18:85:b3:50:78:71:73:0f:f1:5c:ff:cf:bd:ad:3f:ac:7f:
         e1:86:a3:d7:4c:a5:dc:9a:6c:1d:ce:8b:e5:82:75:23:eb:50:
         dc:55:79:64:ce:ab:dd:9a:2f:05:26:36:2f:69:71:2a:a7:a5:
         89:51:b6:72:8f:31:c0:78:24:90:3e:f7:36:f5:d3:2d:b6:3f:
         84:ad:0c:40:24:c2:dd:61:40:ef:fd:bb:96:96:f6:e0:0d:f0:
         d7:16:84:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org