Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323130363435.roa
File:                     326130373a353463323a623030623a3a2f34382d3438203d3e20323130363435.roa (raw, json)
Hash identifier:          eE6AA/1R/u9jXNTJHWXXga1bYlPrhfAhW5zgnLmTagA=
Subject key identifier:   98:87:74:FF:AF:3C:C6:A8:CC:3E:04:05:66:DD:E6:52:CB:83:EB:DB
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       1445BA86D2C4ABBF13E88E1989A8D298B7CD46A5
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323130363435.roa
Signing time:             Thu 02 Feb 2023 13:00:37 +0000
ROA not before:           Thu 02 Feb 2023 12:55:37 +0000
ROA not after:            Thu 01 Feb 2024 13:00:37 +0000
asID:                     210645
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:45:ba:86:d2:c4:ab:bf:13:e8:8e:19:89:a8:d2:98:b7:cd:46:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb  2 12:55:37 2023 GMT
            Not After : Feb  1 13:00:37 2024 GMT
        Subject: CN=988774FFAF3CC6A8CC3E040566DDE652CB83EBDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e5:d6:ed:83:f5:c4:8c:63:bc:ff:35:65:6e:
                    9e:f6:3d:27:bc:cd:a8:70:de:43:41:f5:a8:8b:8f:
                    77:b7:7a:9f:27:57:2b:e7:7f:ea:3e:40:36:7b:21:
                    02:60:83:83:33:3d:ff:b9:f8:51:ad:2c:c0:4b:35:
                    93:48:bc:7f:05:d6:88:78:9f:30:96:24:b3:18:a8:
                    c2:02:70:8f:c7:a2:db:26:7a:8e:47:24:d7:66:04:
                    dd:3d:03:c7:ba:e5:7c:0c:78:74:01:f6:88:4a:2a:
                    70:ae:89:24:9e:60:13:ea:63:3c:8b:45:f5:21:e3:
                    c8:1c:a4:7c:2d:2c:c4:e3:ce:08:94:e6:d8:2a:67:
                    16:81:86:57:13:84:0c:d2:d9:9e:4e:d1:3b:b3:16:
                    df:aa:1b:b2:ee:4e:d1:83:11:2b:b4:91:8e:b4:d7:
                    f9:e5:2c:60:11:fd:93:88:62:ec:7b:42:8c:c7:ad:
                    cc:e8:88:53:08:67:1f:ec:a1:25:8b:3a:eb:47:86:
                    53:4d:e8:1e:d1:4b:39:8a:5c:44:8f:10:81:ff:9b:
                    c4:ce:ba:1a:81:83:fa:f8:8e:79:4d:56:49:c6:b9:
                    cf:53:79:84:e1:c9:29:bc:43:f4:13:3f:75:0f:d3:
                    47:8c:f3:89:b2:eb:e0:71:87:d1:a1:9c:95:0f:8f:
                    3a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:87:74:FF:AF:3C:C6:A8:CC:3E:04:05:66:DD:E6:52:CB:83:EB:DB
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463323a623030623a3a2f34382d3438203d3e20323130363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         dc:03:b6:cb:bd:70:20:61:e9:39:11:c3:38:9e:c7:97:b3:5f:
         d7:4a:9a:8b:9c:67:2b:6d:55:f0:ea:a7:14:9c:13:ee:d9:29:
         e7:7c:a1:b3:ef:4f:19:20:93:47:8e:49:4d:9c:ca:fe:28:90:
         3d:7a:1f:a9:9c:05:16:cb:13:c5:32:b4:fa:93:26:ca:c0:a3:
         39:62:81:46:44:15:99:7a:bf:37:89:47:67:81:2d:a3:05:c4:
         c3:e2:9b:68:e2:77:92:04:a5:d0:fb:24:00:d6:62:d1:38:8c:
         80:2b:71:9e:65:5d:60:4a:d7:f3:65:37:b6:87:f5:02:7d:b2:
         af:4d:4a:32:6c:56:81:32:4f:0c:e6:95:40:8b:7a:db:a6:a9:
         cc:ec:98:de:51:07:6d:71:36:38:3a:ab:05:b7:2a:4f:30:56:
         17:86:e5:de:62:1f:3a:60:37:4b:9b:84:f9:db:e5:73:f9:b9:
         78:e0:14:93:37:7d:fa:dd:ef:48:84:07:f5:17:c0:2f:e8:7f:
         51:ce:1d:19:ac:08:92:e5:b0:51:44:91:d9:e4:76:2f:4e:84:
         68:f8:81:55:fc:b5:b2:63:a2:99:36:50:9b:21:39:f4:ac:28:
         d6:ed:15:2e:ad:24:2e:d6:8b:d0:8e:6f:11:b7:5d:d4:41:79:
         cc:d9:cd:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUFEW6htLEq78T6I4ZiajSmLfNRqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2OEFFNkM4
NzNGREZGRTAeFw0yMzAyMDIxMjU1MzdaFw0yNDAyMDExMzAwMzdaMDMxMTAvBgNV
BAMTKDk4ODc3NEZGQUYzQ0M2QThDQzNFMDQwNTY2RERFNjUyQ0I4M0VCREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn5dbtg/XEjGO8/zVlbp72PSe8
zahw3kNB9aiLj3e3ep8nVyvnf+o+QDZ7IQJgg4MzPf+5+FGtLMBLNZNIvH8F1oh4
nzCWJLMYqMICcI/Hotsmeo5HJNdmBN09A8e65XwMeHQB9ohKKnCuiSSeYBPqYzyL
RfUh48gcpHwtLMTjzgiU5tgqZxaBhlcThAzS2Z5O0TuzFt+qG7LuTtGDESu0kY60
1/nlLGAR/ZOIYux7QozHrczoiFMIZx/soSWLOutHhlNN6B7RSzmKXESPEIH/m8TO
uhqBg/r4jnlNVknGuc9TeYThySm8Q/QTP3UP00eM84my6+Bxh9GhnJUPjzprAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUmId0/688xqjMPgQFZt3mUsuD69swHwYDVR0j
BBgwFoAU9sBpsUupesYUGDdJVmiubIc/3/4wDgYDVR0PAQH/BAQDAgeAMHUGA1Ud
HwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL05P
UlRITEFZRVJfVUlEXzEzODY0LzAvRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2
OEFFNkM4NzNGREZGRS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChlty
c3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0Y2
QzA2OUIxNEJBOTdBQzYxNDE4Mzc0OTU2NjhBRTZDODczRkRGRkUuY2VyMIGbBggr
BgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8vcnBraS56YXBwaWVo
b3N0LmNvbS9yZXBvL05PUlRITEFZRVJfVUlEXzEzODY0LzAvMzI2MTMwMzczYTM1
MzQ2MzMyM2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzMDM2
MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHACoHVMKwCzANBgkqhkiG9w0BAQsFAAOCAQEA3AO2y71w
IGHpORHDOJ7Hl7Nf10qai5xnK21V8OqnFJwT7tkp53yhs+9PGSCTR45JTZzK/iiQ
PXofqZwFFssTxTK0+pMmysCjOWKBRkQVmXq/N4lHZ4EtowXEw+KbaOJ3kgSl0Psk
ANZi0TiMgCtxnmVdYErX82U3tof1An2yr01KMmxWgTJPDOaVQIt626apzOyY3lEH
bXE2ODqrBbcqTzBWF4bl3mIfOmA3S5uE+dvlc/m5eOAUkzd9+t3vSIQH9RfAL+h/
Uc4dGawIkuWwUUSR2eR2L06EaPiBVfy1smOimTZQmyE59Kwo1u0VLq0kLtaL0I5v
Ebdd1EF5zNnN1w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org