Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS199573.roa
File:                     AS199573.roa (raw, json)
Hash identifier:          ceq/EcRiNJkJ/wyy3efmX806y45YvRn/nW1xyxifstY=
Subject key identifier:   62:38:0F:1B:84:1C:B7:27:02:87:DE:4F:C9:26:14:0A:2B:32:E2:17
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       46313DA760F2565A610224C10E39E84A1080E7F6
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS199573.roa
Signing time:             Sat 04 Mar 2023 17:58:46 +0000
ROA not before:           Sat 04 Mar 2023 17:53:46 +0000
ROA not after:            Sat 02 Mar 2024 17:58:46 +0000
asID:                     199573
IP address blocks:        2a07:54c1:b000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:31:3d:a7:60:f2:56:5a:61:02:24:c1:0e:39:e8:4a:10:80:e7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Mar  4 17:53:46 2023 GMT
            Not After : Mar  2 17:58:46 2024 GMT
        Subject: CN=62380F1B841CB7270287DE4FC926140A2B32E217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:6f:3d:26:2a:a6:3b:75:1c:36:a6:4a:2f:
                    79:ef:e3:ea:a9:c2:1d:57:5b:d9:9d:c3:d8:e3:12:
                    65:63:fc:2a:51:7d:12:04:8c:1e:09:5e:9a:92:ea:
                    f8:17:d5:7f:66:7b:a7:9b:aa:26:2e:0e:d6:5c:83:
                    ce:73:20:f7:f9:09:18:05:a1:d2:1c:11:89:cd:6c:
                    5f:f7:fe:36:d4:63:8a:e0:8f:21:1e:11:f3:e3:4d:
                    85:62:74:93:b8:f1:e6:ff:01:49:ad:49:84:73:e6:
                    65:e1:f4:77:e8:0d:64:04:f4:58:37:f6:c3:52:b1:
                    c5:fd:3b:87:4d:da:4d:db:ad:ea:ed:e2:45:b6:92:
                    d9:9d:93:99:7d:a1:7b:71:59:6e:0c:5e:ee:0d:d7:
                    2b:ee:c4:ed:e6:22:bf:30:4a:96:38:e5:ec:3d:f6:
                    1e:3c:88:dd:15:df:e0:01:53:e3:3f:73:3d:5f:68:
                    69:9e:c9:fc:48:a6:83:bc:97:87:c3:dc:86:94:47:
                    91:81:9b:66:ba:5f:be:6a:e2:d5:e2:b3:b1:35:21:
                    35:66:1a:3a:37:3a:25:c9:b5:8a:c0:6c:39:a0:6d:
                    6c:67:5d:87:2b:90:17:80:6b:30:99:83:8a:f4:64:
                    eb:51:a1:2a:6b:c8:b4:46:ef:2c:ae:ab:cb:ed:5a:
                    a4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:38:0F:1B:84:1C:B7:27:02:87:DE:4F:C9:26:14:0A:2B:32:E2:17
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS199573.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:25:9c:a6:47:90:ba:56:c8:b8:03:f2:f2:ae:f4:3b:32:0b:
         14:b3:ee:12:b6:37:68:c9:20:d3:b0:51:40:2a:46:b3:aa:4a:
         5f:87:80:a3:d6:8f:97:cd:49:5d:96:1e:ea:90:5a:3a:c3:54:
         e7:a4:9c:95:86:65:c2:ca:ea:f8:c9:10:f0:68:e1:f4:28:85:
         67:39:d6:de:7a:a5:5c:73:58:5b:6f:95:bd:e4:75:3c:bd:cd:
         5b:b7:58:75:91:d6:5c:e2:92:df:28:ae:fe:d5:ad:98:3c:2b:
         66:55:fc:9f:ac:38:df:e8:75:56:72:e3:55:1e:55:93:f2:fe:
         c1:4e:2d:24:5c:46:07:d4:bc:a6:cf:cf:fd:f2:90:af:3a:09:
         e4:7f:49:1a:2e:89:8f:0a:1e:21:ee:3a:67:98:77:cb:f5:98:
         51:df:eb:8f:8a:88:78:27:7f:e5:62:b1:f8:57:0a:c6:ee:c7:
         0c:e6:00:1d:96:f1:bd:1f:72:fa:8d:9e:bd:70:fc:c6:af:75:
         23:20:f7:cc:70:0f:ad:a3:c6:c0:e2:6f:14:81:94:75:d7:ac:
         ce:e3:1a:84:d3:8b:1a:55:6f:1f:9e:e6:a5:05:14:5c:0b:8e:
         c0:c7:98:36:34:dd:41:d5:f3:1c:99:b9:6b:26:ac:ad:17:eb:
         e6:c6:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org