Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323033383638.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323033383638.roa (raw, json)
Hash identifier:          3i11i4kOtgSRsVqBK74FLbu5J8erPR1y8eV8TI7Ce8E=
Subject key identifier:   A8:9E:17:63:DD:23:9A:0D:01:AE:C0:0C:D5:F4:BD:36:54:26:2A:89
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       6B291F03D4AF1449D697844231AB2E26752C7D25
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323033383638.roa
Signing time:             Fri 09 Dec 2022 15:39:40 +0000
ROA not before:           Fri 09 Dec 2022 15:34:40 +0000
ROA not after:            Fri 08 Dec 2023 15:39:40 +0000
asID:                     203868
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:29:1f:03:d4:af:14:49:d6:97:84:42:31:ab:2e:26:75:2c:7d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:40 2022 GMT
            Not After : Dec  8 15:39:40 2023 GMT
        Subject: CN=A89E1763DD239A0D01AEC00CD5F4BD3654262A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:06:bd:d2:3f:d8:ec:00:bd:8f:a4:39:11:
                    b6:b5:93:b1:13:39:be:ce:1e:ee:c9:4c:be:74:19:
                    d7:b7:99:b6:c6:b7:80:23:76:61:9a:fe:c0:b7:b1:
                    55:f3:49:03:ce:ab:07:db:f0:2b:5e:ce:6d:75:5d:
                    51:7a:b4:aa:27:46:09:d2:81:d4:47:ac:a9:4a:8b:
                    df:f5:05:02:37:44:69:cf:07:a8:fd:6e:db:bf:fa:
                    83:8a:d2:d4:f0:32:9c:f8:60:b0:0c:e1:87:bb:ee:
                    48:49:31:4d:f8:c5:59:77:21:cb:51:07:1e:e9:34:
                    53:74:ff:95:99:c5:6a:ba:8f:93:65:3d:f9:16:4e:
                    8b:7f:d3:90:76:f9:9c:9c:7c:b1:b3:8c:2c:ad:db:
                    38:a7:31:d1:45:d8:b1:bf:e5:23:2d:6d:af:28:58:
                    eb:56:53:7a:01:1d:70:d4:75:5d:db:8f:ec:cb:82:
                    f8:2e:42:55:59:9c:ec:25:88:eb:98:59:86:33:8e:
                    3b:47:6c:be:dd:38:2c:d3:b5:c7:6c:c5:58:79:8a:
                    f6:5b:83:2d:26:0c:4e:fc:71:cf:ac:d6:14:16:ea:
                    ef:b0:dd:03:05:16:7d:21:7a:46:b1:dc:8b:39:f9:
                    61:b3:58:a9:0e:71:51:c7:21:c3:64:85:87:ad:a9:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9E:17:63:DD:23:9A:0D:01:AE:C0:0C:D5:F4:BD:36:54:26:2A:89
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323033383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:d8:12:99:91:43:e2:51:70:2e:79:0b:f0:ae:47:10:c2:b5:
         0a:a1:f6:cb:f7:95:1f:7b:81:20:57:e9:8f:6b:3e:24:7e:5e:
         c6:21:70:6b:c3:65:9e:18:0d:df:34:86:3f:d7:58:24:0b:32:
         80:03:5a:75:ad:f1:c7:c3:69:5e:66:0e:e9:77:f7:7c:2a:5c:
         d2:8f:c6:cd:0f:3e:16:50:bf:4b:fd:82:d1:03:d9:61:0d:c8:
         8a:4f:7b:20:bc:3d:ae:ec:f8:40:ce:ff:11:63:a6:d9:42:6a:
         74:91:08:9f:f8:dc:fa:bd:c0:30:8f:43:f7:6e:89:90:02:89:
         53:87:fe:23:bc:a1:57:ba:77:97:4d:02:6a:2b:b7:d3:47:a6:
         f1:1e:d8:57:d5:d8:d2:01:3b:d7:4a:11:69:14:57:85:76:a0:
         6b:19:aa:71:c5:d6:dd:a2:32:6f:ea:6f:07:26:69:1f:32:18:
         21:2f:af:9b:0a:9f:4b:e8:a0:c4:79:cc:96:50:64:67:0b:0b:
         b0:87:db:ac:61:c2:0e:b3:af:1d:65:69:de:42:3d:49:47:39:
         9c:e1:c5:70:e6:b6:ab:ce:57:8e:88:d1:de:19:34:ab:d9:47:
         ce:01:1c:dd:d6:60:2d:7c:15:98:42:69:f5:40:69:b4:fd:60:
         af:36:6e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org