Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS133098.roa
File:                     AS133098.roa (raw, json)
Hash identifier:          dIy+pGSKhyoGjspiUTSPcez3ctZBHDOLCC8yGuznqLo=
Subject key identifier:   49:34:D7:14:8B:B6:B8:34:D0:91:98:CA:EC:D1:86:A9:4F:20:6B:EB
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       2F00288A81EFA5D7DC5DAB710C1629FF29BB4BF1
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS133098.roa
Signing time:             Thu 23 Feb 2023 18:37:29 +0000
ROA not before:           Thu 23 Feb 2023 18:32:29 +0000
ROA not after:            Thu 22 Feb 2024 18:37:29 +0000
asID:                     133098
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:00:28:8a:81:ef:a5:d7:dc:5d:ab:71:0c:16:29:ff:29:bb:4b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:29 2023 GMT
            Not After : Feb 22 18:37:29 2024 GMT
        Subject: CN=4934D7148BB6B834D09198CAECD186A94F206BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3a:c7:e3:ed:48:a6:fa:a8:1e:24:66:86:9c:
                    57:0d:fe:f6:f4:c7:15:be:d6:16:9e:41:15:3d:6b:
                    40:e6:d3:2c:fb:5f:b4:91:37:96:20:60:1e:02:a0:
                    ec:6a:71:76:bd:72:71:73:53:46:0a:52:f2:cf:45:
                    a1:31:d3:73:e0:f8:85:ee:61:1e:3c:47:02:eb:60:
                    19:55:16:06:ef:be:e4:21:ef:25:7e:65:75:b7:fd:
                    66:05:3b:a9:77:0d:e6:65:c1:a3:a0:d9:6d:39:8d:
                    6b:9a:f7:1d:c1:42:3e:62:2c:9a:2b:4f:ea:3e:2e:
                    a9:fe:f6:94:8e:15:06:de:60:bf:e5:8f:11:f5:b9:
                    1f:84:4d:e0:b4:07:74:83:25:40:e6:79:52:f4:78:
                    89:5d:70:03:9d:e6:81:9c:98:e2:e2:76:c3:2b:ff:
                    a4:2b:f0:a5:06:91:bf:26:72:4e:b7:fc:9d:48:6e:
                    a7:a7:08:c6:dc:ee:27:dc:a2:17:f3:db:f5:5e:70:
                    a1:21:26:af:34:54:d6:05:47:0e:96:fc:39:e2:d8:
                    17:0d:b6:e2:a9:92:bc:f8:cf:e5:b8:2a:55:f0:83:
                    29:33:be:9a:f3:30:22:a9:a1:a3:5f:bb:89:6f:8b:
                    9c:79:58:b9:13:1e:c4:79:d7:e5:d7:33:a8:fe:00:
                    74:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:34:D7:14:8B:B6:B8:34:D0:91:98:CA:EC:D1:86:A9:4F:20:6B:EB
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS133098.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:35:6f:89:be:ca:ba:25:9a:cf:8a:b1:54:44:0b:33:b9:1e:
         fa:69:4c:45:bc:e9:bb:43:d7:6e:3b:2b:a9:0c:8b:b0:ea:fe:
         6c:c1:3c:0b:3c:c9:88:11:29:e4:bf:f6:d5:e3:fb:4a:1a:f7:
         ff:e0:27:0f:d5:00:af:66:94:c9:90:fd:fa:f5:15:40:60:56:
         6b:32:c5:0e:52:35:4e:69:c8:8b:29:77:58:cd:16:aa:c0:a9:
         5a:5c:7f:9c:58:40:f6:50:45:c9:26:1b:12:38:2d:ff:eb:31:
         61:84:50:9e:f1:14:b0:6d:b2:38:49:6d:f7:fe:ed:a3:14:f1:
         69:c1:fd:14:95:a9:c7:27:6d:c9:b8:be:5d:53:58:a8:07:84:
         53:ce:de:d9:ff:42:bc:61:99:d5:7b:f3:b0:2a:8f:57:9c:db:
         16:e0:f7:c2:b6:5d:4e:71:10:a2:df:6a:8c:c9:91:77:39:3d:
         4c:00:f1:06:5d:35:d2:54:a2:53:7c:e8:01:62:a3:d6:26:65:
         8b:2f:76:33:4b:c1:94:fb:55:f1:6d:cd:98:fe:16:aa:03:c6:
         3b:57:40:db:0d:59:8a:cd:8d:17:62:24:24:ed:42:d8:4a:e7:
         8a:46:78:53:09:05:6f:26:d5:90:d3:dc:db:d6:3e:c1:45:c1:
         3f:c1:68:29
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIULwAoioHvpdfcXatxDBYp/ym7S/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2OEFFNkM4
NzNGREZGRTAeFw0yMzAyMjMxODMyMjlaFw0yNDAyMjIxODM3MjlaMDMxMTAvBgNV
BAMTKDQ5MzRENzE0OEJCNkI4MzREMDkxOThDQUVDRDE4NkE5NEYyMDZCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOsfj7Uim+qgeJGaGnFcN/vb0
xxW+1haeQRU9a0Dm0yz7X7SRN5YgYB4CoOxqcXa9cnFzU0YKUvLPRaEx03Pg+IXu
YR48RwLrYBlVFgbvvuQh7yV+ZXW3/WYFO6l3DeZlwaOg2W05jWua9x3BQj5iLJor
T+o+Lqn+9pSOFQbeYL/ljxH1uR+ETeC0B3SDJUDmeVL0eIldcAOd5oGcmOLidsMr
/6Qr8KUGkb8mck63/J1IbqenCMbc7ifcohfz2/VecKEhJq80VNYFRw6W/Dni2BcN
tuKpkrz4z+W4KlXwgykzvprzMCKpoaNfu4lvi5x5WLkTHsR51+XXM6j+AHSFAgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQUSTTXFIu2uDTQkZjK7NGGqU8ga+swHwYDVR0j
BBgwFoAU9sBpsUupesYUGDdJVmiubIc/3/4wDgYDVR0PAQH/BAQDAgeAMHUGA1Ud
HwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL05P
UlRITEFZRVJfVUlEXzEzODY0LzAvRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2
OEFFNkM4NzNGREZGRS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChlty
c3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0Y2
QzA2OUIxNEJBOTdBQzYxNDE4Mzc0OTU2NjhBRTZDODczRkRGRkUuY2VyMGAGCCsG
AQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3Qu
Y29tL3JlcG8vTk9SVEhMQVlFUl9VSURfMTM4NjQvMC9BUzEzMzA5OC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoHVMKwCzANBgkqhkiG9w0BAQsFAAOCAQEApjVvib7KuiWaz4qxVEQLM7ke
+mlMRbzpu0PXbjsrqQyLsOr+bME8CzzJiBEp5L/21eP7Shr3/+AnD9UAr2aUyZD9
+vUVQGBWazLFDlI1TmnIiyl3WM0WqsCpWlx/nFhA9lBFySYbEjgt/+sxYYRQnvEU
sG2yOElt9/7toxTxacH9FJWpxydtybi+XVNYqAeEU87e2f9CvGGZ1XvzsCqPV5zb
FuD3wrZdTnEQot9qjMmRdzk9TADxBl010lSiU3zoAWKj1iZliy92M0vBlPtV8W3N
mP4WqgPGO1dA2w1Zis2NF2IkJO1C2ErnikZ4UwkFbybVkNPc29Y+wUXBP8FoKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org