Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS197532.roa
File:                     AS197532.roa (raw, json)
Hash identifier:          dv3n0bq2qJC0h/AsQFmMlQnp4pctmJ1JiJRTvKrEcXw=
Subject key identifier:   DB:9C:8E:79:51:D5:D4:68:2A:CC:93:82:4E:22:EB:92:E3:8B:47:BA
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       0E977D41B9D2A1A994215B4F2F00F61D0AA45C7A
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS197532.roa
Signing time:             Fri 15 Sep 2023 19:23:06 +0000
ROA not before:           Fri 15 Sep 2023 19:18:06 +0000
ROA not after:            Fri 13 Sep 2024 19:23:06 +0000
asID:                     197532
IP address blocks:        2a07:54c1:3600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:97:7d:41:b9:d2:a1:a9:94:21:5b:4f:2f:00:f6:1d:0a:a4:5c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Sep 15 19:18:06 2023 GMT
            Not After : Sep 13 19:23:06 2024 GMT
        Subject: CN=DB9C8E7951D5D4682ACC93824E22EB92E38B47BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:55:95:40:90:e6:d8:62:a9:96:a8:fe:34:9f:
                    3f:e8:ea:78:0d:72:af:db:bd:e9:d3:c0:a5:8e:7d:
                    80:d7:6b:35:ec:53:08:1e:8a:c6:51:32:79:79:7e:
                    f8:18:ea:4f:db:fc:34:56:3d:bf:88:6e:da:8f:34:
                    97:c1:69:fb:89:31:f6:04:de:04:5f:2a:e3:56:cc:
                    98:0d:18:90:8c:44:c2:ae:49:6f:86:9c:c9:31:ed:
                    49:80:e4:b8:2b:77:51:cc:a6:97:e0:84:d2:ba:69:
                    ed:15:32:c4:51:72:36:86:1c:31:2e:d0:46:ba:86:
                    16:16:25:5a:34:c3:3c:40:93:8a:63:71:cd:99:11:
                    e8:57:7c:a9:3f:ae:12:ca:e0:e1:4f:38:eb:e4:f7:
                    79:72:40:79:b5:f4:e2:4d:67:2c:26:22:8d:56:76:
                    c9:0a:88:0a:6d:cc:60:74:ac:bb:3d:24:e7:04:53:
                    c2:9b:84:65:22:e7:67:ff:6c:72:24:ad:8a:e8:04:
                    82:8b:f2:8e:ea:56:03:cb:67:82:24:d7:49:96:c8:
                    b7:d8:4a:00:8d:28:5b:04:44:79:9a:ae:e0:59:4a:
                    47:9d:6a:0f:11:3c:d7:3f:ed:ea:4a:e3:96:f1:a6:
                    86:fe:ae:aa:ce:35:ff:ef:ec:f2:15:45:ec:97:2f:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9C:8E:79:51:D5:D4:68:2A:CC:93:82:4E:22:EB:92:E3:8B:47:BA
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS197532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3600::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:36:3d:cf:59:57:bf:e0:2b:9c:13:81:93:c3:bf:06:8c:7d:
         f4:39:3a:31:4b:09:ab:43:cc:da:66:06:2a:3c:09:b8:95:5b:
         e4:01:76:03:5a:ef:7a:6f:c0:4b:f0:d8:02:b7:8b:41:ff:1a:
         c2:ae:1e:60:e1:d2:3e:4a:62:75:90:b6:b2:38:a2:d5:6a:1a:
         9e:4d:b1:18:bd:3c:53:0b:c2:8f:1f:64:eb:26:01:b0:db:7b:
         c3:9f:01:00:01:89:59:67:dc:c7:bd:00:04:b0:23:af:9b:05:
         00:94:ed:f0:5e:58:36:e8:16:0f:6a:63:21:1b:ce:dc:9d:2d:
         c7:e2:a1:2c:75:01:16:9d:2b:7e:97:e0:c5:47:ca:5f:c0:2e:
         07:4e:77:81:51:c4:e4:db:fe:5e:96:88:88:60:6f:d9:2d:68:
         68:55:8f:ea:60:60:a3:f1:b0:70:bc:69:ab:8b:95:7c:7f:e1:
         40:70:12:5e:dd:4b:b9:f8:32:58:60:ad:1b:36:a5:6e:ab:78:
         6c:79:63:55:19:5a:65:6e:8f:6c:24:50:9c:fd:a9:46:28:e5:
         e6:3f:1e:bd:d5:65:21:81:4a:83:fd:b4:9e:57:98:88:3d:b5:
         73:dd:cb:ab:92:2d:bc:9b:fe:23:d4:9f:e2:05:92:7e:c9:d3:
         7d:a3:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org