Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS199177.roa
File:                     AS199177.roa (raw, json)
Hash identifier:          qlxJY4Nq1NvoQb0n/6EyIuYXWm44cpI79reHS6U0Edw=
Subject key identifier:   D4:6A:D7:92:0F:9D:F4:63:3F:5D:D6:47:82:7C:96:1F:48:AC:CB:69
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       0E495886055313C071FC82B9A99ADE6D78ED68C8
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS199177.roa
Signing time:             Sun 04 Jun 2023 00:04:00 +0000
ROA not before:           Sat 03 Jun 2023 23:59:00 +0000
ROA not after:            Sun 02 Jun 2024 00:04:00 +0000
asID:                     199177
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:49:58:86:05:53:13:c0:71:fc:82:b9:a9:9a:de:6d:78:ed:68:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Jun  3 23:59:00 2023 GMT
            Not After : Jun  2 00:04:00 2024 GMT
        Subject: CN=D46AD7920F9DF4633F5DD647827C961F48ACCB69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:4a:a7:7c:a1:df:38:6d:d6:c8:58:35:68:
                    e4:e5:80:51:2f:55:62:98:42:20:50:1c:69:0a:8a:
                    b7:d5:39:1f:46:0d:75:e5:bb:14:d7:05:83:ac:6c:
                    23:3a:bb:df:b5:e8:d4:35:30:9a:d8:3a:4b:c5:77:
                    98:41:27:71:97:21:58:a5:44:54:fa:fd:26:9d:f1:
                    d9:79:a4:9c:3c:dc:d1:bd:ba:20:c9:fb:ba:85:f1:
                    44:74:98:1f:03:f7:8e:4f:61:38:7d:0c:dc:15:d8:
                    4a:8b:79:cb:69:f7:c4:c6:6a:34:7f:d5:ca:11:33:
                    93:76:cf:7c:73:5e:95:6e:7d:32:af:70:50:5c:61:
                    52:5f:7c:b8:e6:b5:be:f3:81:ea:75:d0:80:ca:fb:
                    f5:3c:14:ad:32:20:39:fe:c7:69:28:75:da:6a:d6:
                    be:67:23:b7:90:8d:ab:95:0c:ed:fa:85:60:9c:a8:
                    9d:ea:d1:3b:14:0c:e3:90:d1:c8:66:9c:13:c6:f6:
                    c3:0a:f4:e7:5b:8d:29:07:e9:b9:ba:4f:c8:5b:61:
                    4a:44:41:ac:49:29:0e:48:e5:a3:37:5b:86:3f:77:
                    62:0f:ee:ca:4d:88:98:f0:12:d8:9b:c5:e6:01:58:
                    b3:96:bd:bf:59:ca:fd:0e:f4:d8:5a:db:61:93:6a:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6A:D7:92:0F:9D:F4:63:3F:5D:D6:47:82:7C:96:1F:48:AC:CB:69
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS199177.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:2c:06:05:25:f7:31:30:3c:06:41:38:fe:25:bf:bf:18:98:
         c6:bd:c5:bd:d6:03:26:a4:bd:36:db:a2:7d:83:c8:ae:e2:93:
         5c:b7:21:8c:bd:1c:79:be:9a:27:00:b1:18:fd:e3:8b:9a:0b:
         9d:aa:11:1e:19:df:4e:98:19:24:45:4f:45:50:a4:01:32:4a:
         96:8f:19:cd:30:8f:3c:0a:9d:dd:49:77:e0:1c:5f:be:8d:69:
         63:38:e1:16:46:7c:e4:20:96:ab:2f:e2:8f:cd:8f:b5:8c:74:
         90:39:68:30:b8:a0:8c:00:ed:79:cb:eb:87:7e:93:88:8e:da:
         09:cb:67:fa:ba:5a:8d:35:5d:25:4d:f1:ca:0e:76:77:a7:21:
         3c:72:70:c9:53:b5:8f:eb:96:9b:ef:e7:eb:ec:a6:52:07:2d:
         96:fd:59:56:62:7b:d2:c4:05:24:a0:74:b9:cd:bd:3d:59:83:
         92:65:79:f3:8f:15:5d:07:74:c7:f0:28:f0:b2:85:78:10:6a:
         e5:b1:42:3e:07:01:c7:77:f0:4f:c7:27:08:23:6d:c8:69:80:
         10:40:46:52:1e:31:7f:e6:b9:6e:68:22:af:da:84:99:01:97:
         34:25:1c:36:70:13:b6:45:98:54:e4:98:14:d4:59:b2:dc:af:
         16:2b:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org