Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a313735313a3a2f34382d3438203d3e20393531.roa
File:                     326130373a353463343a313735313a3a2f34382d3438203d3e20393531.roa (raw, json)
Hash identifier:          ZtKdyYT1T23mf+egMwTeAkWJjjbAzL6sS0YDHtR0kYk=
Subject key identifier:   E3:88:C5:2E:DD:C4:E5:7D:50:96:62:2A:7A:02:3C:B3:CA:57:3E:54
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       0BD599FE81CC38D2E59EBBB8A37AAC4610727752
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a313735313a3a2f34382d3438203d3e20393531.roa
Signing time:             Wed 22 Feb 2023 22:08:09 +0000
ROA not before:           Wed 22 Feb 2023 22:03:09 +0000
ROA not after:            Wed 21 Feb 2024 22:08:09 +0000
asID:                     951
IP address blocks:        2a07:54c4:1751::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d5:99:fe:81:cc:38:d2:e5:9e:bb:b8:a3:7a:ac:46:10:72:77:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 22 22:03:09 2023 GMT
            Not After : Feb 21 22:08:09 2024 GMT
        Subject: CN=E388C52EDDC4E57D5096622A7A023CB3CA573E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fb:5f:c1:13:c1:11:22:1a:d4:16:40:f6:82:
                    53:cc:8c:50:e8:97:8c:88:e7:9d:b9:7a:ed:66:c5:
                    1a:33:d4:3a:3b:bf:ed:8f:75:de:ee:ce:af:d2:1f:
                    a4:62:d5:d6:e3:94:57:41:65:eb:2c:50:c4:6a:88:
                    f7:ca:67:5c:fa:37:f6:ff:52:ba:c2:2d:e2:d5:55:
                    f6:d1:55:40:8b:5b:2c:bc:bd:8c:1c:f0:bf:a3:85:
                    af:b7:5b:96:dd:00:64:30:46:c9:48:ec:64:ab:07:
                    1f:19:26:a4:6f:2d:19:14:f7:31:e2:03:07:ef:02:
                    a6:d3:9b:48:d3:40:06:00:ac:22:e8:31:e8:de:9a:
                    db:dd:98:6c:f0:da:97:a4:cb:4e:d2:68:07:70:c3:
                    a4:49:83:18:a4:db:29:77:5a:70:a9:3c:57:91:ce:
                    c7:7a:39:51:8c:2e:95:8b:2c:58:ac:05:69:2e:80:
                    58:28:c4:d1:a5:1e:f4:40:d0:ce:b3:f4:aa:6b:6f:
                    62:62:66:e0:74:66:c6:ff:cc:0b:e9:ee:aa:db:db:
                    bf:7c:02:df:0b:a3:84:1d:b0:1b:eb:64:31:5e:8a:
                    3f:5c:c1:5c:b1:70:04:90:22:7d:bd:bc:0b:3b:a2:
                    64:d8:ae:ab:4e:5f:78:4a:08:b3:b6:9a:e1:07:ec:
                    54:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:88:C5:2E:DD:C4:E5:7D:50:96:62:2A:7A:02:3C:B3:CA:57:3E:54
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a313735313a3a2f34382d3438203d3e20393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:1751::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:f0:11:9a:97:f5:5f:19:71:fa:77:19:d5:89:b5:c6:53:8c:
         63:49:4f:28:44:d7:c5:72:67:34:94:14:85:ec:c4:4e:c6:e3:
         c4:8c:f3:b2:39:e1:88:11:f9:f4:20:eb:2b:30:84:76:ba:f9:
         cd:8e:19:c9:86:55:d3:bd:43:1c:ad:74:63:e5:f5:30:30:2d:
         4b:96:57:2a:01:c1:54:a2:9a:63:29:5f:8d:1a:98:a5:2b:49:
         c2:51:b9:da:cf:89:48:b5:b1:6a:47:53:59:d1:3d:0e:1e:34:
         63:4b:5d:89:00:cf:83:d7:4b:7f:ca:13:8e:b0:54:0a:8d:d4:
         14:87:76:4e:4e:2d:6e:95:db:b8:f6:40:bf:7d:d1:b2:e8:84:
         21:fd:c7:b6:a2:fe:d4:f3:72:95:ef:e9:da:62:b2:b0:00:7c:
         9b:87:5b:b5:4d:58:33:32:5d:f1:4d:3f:a2:09:43:85:69:d0:
         14:57:4e:b7:6f:58:71:00:3f:e1:ec:7a:88:e5:9a:8d:4a:de:
         c6:94:13:83:db:0e:d5:67:42:50:24:c9:61:09:58:5f:bf:3d:
         56:aa:62:ba:80:c3:a1:14:e4:26:02:c3:cb:b0:02:fe:41:81:
         6e:9c:2d:8a:8f:c8:b3:c8:0a:da:99:ef:9e:c4:57:37:ad:e5:
         fc:ff:ec:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org