Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a323a3a2f34382d3438203d3e20323036313235.roa
File:                     326130373a353463343a323a3a2f34382d3438203d3e20323036313235.roa (raw, json)
Hash identifier:          r+tUWQUQNY79pNVA/V3cQTGr6PQ6wSgkjNVIWOJ8Vfk=
Subject key identifier:   AB:7E:FE:A3:58:F8:DC:D4:60:37:65:65:1E:3F:32:B1:DE:1C:FD:F9
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       181C93EB1D46E934D56E6CCA06F036ABE72C9E0F
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a323a3a2f34382d3438203d3e20323036313235.roa
Signing time:             Fri 09 Dec 2022 15:39:34 +0000
ROA not before:           Fri 09 Dec 2022 15:34:34 +0000
ROA not after:            Fri 08 Dec 2023 15:39:34 +0000
asID:                     206125
IP address blocks:        2a07:54c4:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1c:93:eb:1d:46:e9:34:d5:6e:6c:ca:06:f0:36:ab:e7:2c:9e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Dec  9 15:34:34 2022 GMT
            Not After : Dec  8 15:39:34 2023 GMT
        Subject: CN=AB7EFEA358F8DCD4603765651E3F32B1DE1CFDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:3e:55:e5:cf:b6:6d:8f:be:38:ad:18:fc:
                    5a:7b:8a:ae:6f:c3:8a:a4:05:76:50:08:c5:35:eb:
                    f0:05:dc:4f:a2:5f:6f:b6:a8:85:f2:3b:c2:42:ff:
                    78:0b:a5:e0:77:49:4d:22:75:65:3c:1a:42:36:5c:
                    b6:f3:b5:00:8a:c9:03:cf:a7:9b:b0:e1:26:94:62:
                    26:92:37:ae:65:da:54:92:1e:46:a5:1f:d7:8f:78:
                    b3:8e:b7:68:c5:8d:a6:94:c3:42:ef:9d:fd:b0:f6:
                    48:e6:44:b1:aa:90:09:48:90:2d:09:e1:e1:d4:90:
                    5e:fd:ac:35:3d:2f:74:a5:8a:5a:f3:56:9e:c2:a8:
                    9a:23:cc:9b:d3:f5:ef:dc:1f:20:cd:35:47:cd:10:
                    aa:9b:99:c2:0c:b9:65:e4:57:cf:0d:86:a3:5d:11:
                    db:79:a0:cb:a8:41:e3:ab:4f:97:3b:44:dc:a3:0c:
                    cb:ab:92:5d:6b:7e:43:15:5b:2a:8d:7d:f9:5d:43:
                    12:4c:e9:12:27:34:4f:e8:3e:19:bd:d5:9f:72:36:
                    9f:b1:28:50:30:65:f0:78:a3:d1:4e:37:7e:35:6b:
                    ee:3a:42:26:11:b9:2f:78:91:00:aa:38:44:ad:67:
                    7d:d3:3b:a6:31:b7:2f:b2:bf:9d:ee:96:06:06:b8:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7E:FE:A3:58:F8:DC:D4:60:37:65:65:1E:3F:32:B1:DE:1C:FD:F9
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/326130373a353463343a323a3a2f34382d3438203d3e20323036313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:f2:93:85:ee:d6:6e:de:f6:ff:25:7e:13:60:29:a5:57:ae:
         ca:78:a6:f3:fc:7c:9b:fd:68:82:e2:fa:f1:17:c2:93:54:16:
         45:e7:42:35:c2:87:60:a4:11:a1:4c:18:a8:51:5f:a1:4f:13:
         b6:39:72:80:9b:46:30:18:26:2e:81:6a:09:19:7a:f3:d4:71:
         f3:c2:af:50:90:82:3b:29:c5:1a:1e:0c:c6:d4:bf:3f:45:9d:
         e1:38:f1:f4:61:7b:bb:81:bb:bd:47:52:55:30:cb:9b:c7:d9:
         f8:9a:e4:90:82:a4:f1:e9:84:80:d1:05:75:fc:45:f5:ef:12:
         37:27:64:d8:b0:92:a2:d9:16:9c:bb:69:16:3e:05:97:74:81:
         d2:00:9f:71:97:89:8a:3e:c8:18:72:ed:2a:f0:11:b0:1a:8c:
         7f:37:47:bc:90:eb:5c:79:2f:4c:45:8a:9c:0a:7b:a4:a5:96:
         69:69:a6:97:17:22:f9:20:0c:40:af:cf:01:d1:a2:8e:37:b0:
         59:31:31:ca:70:f9:85:d7:db:85:59:8c:ea:fe:03:cf:8d:ee:
         43:7b:d4:8d:92:c2:70:af:fe:32:75:a7:5c:c1:c5:c8:f2:0e:
         fe:26:3a:de:ae:66:d1:4f:97:0f:5f:03:c4:31:eb:24:43:d1:
         bf:a8:5f:84
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUGByT6x1G6TTVbmzKBvA2q+csng8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2OEFFNkM4
NzNGREZGRTAeFw0yMjEyMDkxNTM0MzRaFw0yMzEyMDgxNTM5MzRaMDMxMTAvBgNV
BAMTKEFCN0VGRUEzNThGOERDRDQ2MDM3NjU2NTFFM0YzMkIxREUxQ0ZERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3z5V5c+2bY++OK0Y/Fp7iq5v
w4qkBXZQCMU16/AF3E+iX2+2qIXyO8JC/3gLpeB3SU0idWU8GkI2XLbztQCKyQPP
p5uw4SaUYiaSN65l2lSSHkalH9ePeLOOt2jFjaaUw0Lvnf2w9kjmRLGqkAlIkC0J
4eHUkF79rDU9L3SlilrzVp7CqJojzJvT9e/cHyDNNUfNEKqbmcIMuWXkV88NhqNd
Edt5oMuoQeOrT5c7RNyjDMurkl1rfkMVWyqNffldQxJM6RInNE/oPhm91Z9yNp+x
KFAwZfB4o9FON341a+46QiYRuS94kQCqOEStZ33TO6Yxty+yv53ulgYGuHNBAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUq37+o1j43NRgN2VlHj8ysd4c/fkwHwYDVR0j
BBgwFoAU9sBpsUupesYUGDdJVmiubIc/3/4wDgYDVR0PAQH/BAQDAgeAMHUGA1Ud
HwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL05P
UlRITEFZRVJfVUlEXzEzODY0LzAvRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2
OEFFNkM4NzNGREZGRS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChlty
c3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0Y2
QzA2OUIxNEJBOTdBQzYxNDE4Mzc0OTU2NjhBRTZDODczRkRGRkUuY2VyMIGVBggr
BgEFBQcBCwSBiDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS56YXBwaWVo
b3N0LmNvbS9yZXBvL05PUlRITEFZRVJfVUlEXzEzODY0LzAvMzI2MTMwMzczYTM1
MzQ2MzM0M2EzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNjMxMzIzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoHVMQAAjANBgkqhkiG9w0BAQsFAAOCAQEAsPKThe7Wbt72/yV+
E2AppVeuynim8/x8m/1oguL68RfCk1QWRedCNcKHYKQRoUwYqFFfoU8TtjlygJtG
MBgmLoFqCRl689Rx88KvUJCCOynFGh4MxtS/P0Wd4Tjx9GF7u4G7vUdSVTDLm8fZ
+JrkkIKk8emEgNEFdfxF9e8SNydk2LCSotkWnLtpFj4Fl3SB0gCfcZeJij7IGHLt
KvARsBqMfzdHvJDrXHkvTEWKnAp7pKWWaWmmlxci+SAMQK/PAdGijjewWTExynD5
hdfbhVmM6v4Dz43uQ3vUjZLCcK/+MnWnXMHFyPIO/iY63q5m0U+XD18DxDHrJEPR
v6hfhA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org