Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS142598.roa
File:                     AS142598.roa (raw, json)
Hash identifier:          990TRCMt+Nbp0JCnCzybDL0fCi/q/TOxoDhsEFi0LM4=
Subject key identifier:   FF:3F:64:3A:31:E9:2F:D2:C5:AD:12:BD:1C:F6:68:BC:18:39:C5:BC
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       277A45D597D60D08B00CF39840CB1A2788E3943B
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS142598.roa
Signing time:             Thu 23 Feb 2023 18:37:13 +0000
ROA not before:           Thu 23 Feb 2023 18:32:13 +0000
ROA not after:            Thu 22 Feb 2024 18:37:13 +0000
asID:                     142598
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7a:45:d5:97:d6:0d:08:b0:0c:f3:98:40:cb:1a:27:88:e3:94:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:13 2023 GMT
            Not After : Feb 22 18:37:13 2024 GMT
        Subject: CN=FF3F643A31E92FD2C5AD12BD1CF668BC1839C5BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:ae:1b:2d:7b:f2:05:20:a2:85:df:33:2a:
                    06:ea:f1:5f:44:00:c0:70:e0:76:84:2b:e6:a0:c0:
                    42:df:18:0a:b0:d8:be:5b:8c:6c:1d:3b:0e:3c:20:
                    a5:63:9b:25:ac:03:d7:b9:e2:f8:00:bb:2f:b8:33:
                    7c:be:88:94:36:d1:d5:1b:32:c9:26:18:99:5b:c9:
                    d7:d3:3a:24:5b:7b:a5:dd:59:ab:44:49:1a:43:37:
                    60:26:8c:56:81:66:ac:81:c3:08:e7:4b:eb:1e:ca:
                    f7:fd:4b:5d:c3:10:0d:40:b9:4a:bb:8a:cb:dd:4a:
                    5a:e8:bf:69:71:fe:e6:82:d9:0a:18:92:07:29:78:
                    e2:45:3f:27:fc:25:c4:31:39:6e:db:1a:2d:3c:7f:
                    b6:2f:32:c9:8a:5e:fa:85:96:a2:96:b3:56:f2:e6:
                    fc:2a:d1:18:65:06:c7:e0:95:88:9e:8c:0e:a5:c6:
                    7d:57:0b:c8:f0:c3:24:73:ac:49:75:52:7e:6e:06:
                    21:05:e9:ae:fc:b3:2f:11:29:dd:ec:ae:db:fc:cb:
                    44:b7:d7:98:92:71:2c:66:0b:b0:fb:0b:06:4f:71:
                    c9:df:e6:26:a3:98:b6:cf:4d:fa:00:69:3f:c0:b9:
                    3f:4d:a0:be:93:2c:fb:c5:b5:a9:7b:af:35:8f:67:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3F:64:3A:31:E9:2F:D2:C5:AD:12:BD:1C:F6:68:BC:18:39:C5:BC
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS142598.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:90:58:df:d4:58:6f:ff:2f:f2:c0:b1:d1:6f:40:76:9a:
         7a:c4:98:51:f2:a0:3c:1e:62:d9:8b:a8:59:01:e0:9e:f6:f0:
         75:63:c1:5b:73:12:0c:dc:5d:ba:34:49:59:27:65:ab:bc:80:
         63:d8:19:68:c1:03:15:65:2a:22:46:f4:e8:04:cf:f2:19:71:
         0f:60:b0:12:e1:f0:be:a8:8f:92:e8:74:53:7a:eb:65:99:82:
         27:00:9e:6c:86:cd:0c:4c:8f:71:55:2c:44:c3:8e:3f:50:42:
         1e:21:9f:22:be:36:5e:ea:2a:a6:59:79:2e:65:a0:aa:94:e8:
         a2:c2:22:be:21:94:e3:64:a0:4c:1a:83:2b:64:87:39:64:4f:
         e4:02:60:5e:a9:e8:ed:28:ed:4d:4d:1e:f9:00:5c:28:bc:d3:
         40:af:ea:06:23:25:96:4b:77:a2:49:6b:06:dc:8c:af:7c:b4:
         fd:7d:61:47:8c:61:d7:13:bd:23:f2:d8:66:a2:aa:1f:56:8b:
         22:a0:8c:02:71:7b:5e:41:94:77:1b:c6:01:fc:eb:c3:eb:ff:
         5f:5c:51:c9:35:25:6b:05:df:fe:02:90:17:af:3a:f9:b6:c8:
         14:f8:2d:23:e8:89:29:e2:92:a6:53:75:08:af:7b:0d:6a:1f:
         89:48:f5:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org