Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS200454.roa
File:                     AS200454.roa (raw, json)
Hash identifier:          k5gsD7pYXttZO8eIUwLKqAEIC167449UsmMB6V/ImBk=
Subject key identifier:   DA:4C:AF:A1:BA:DA:88:7E:1A:B9:99:1D:25:C9:97:D3:87:AF:B2:56
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       68B528A194941EF23D9502EFEABF91C1C4D17FED
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS200454.roa
Signing time:             Sun 17 Sep 2023 21:27:23 +0000
ROA not before:           Sun 17 Sep 2023 21:22:23 +0000
ROA not after:            Sun 15 Sep 2024 21:27:23 +0000
asID:                     200454
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a07:54c4:1759::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b5:28:a1:94:94:1e:f2:3d:95:02:ef:ea:bf:91:c1:c4:d1:7f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Sep 17 21:22:23 2023 GMT
            Not After : Sep 15 21:27:23 2024 GMT
        Subject: CN=DA4CAFA1BADA887E1AB9991D25C997D387AFB256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:97:89:57:6e:0d:a6:02:83:2e:88:3e:76:
                    38:e5:6a:92:c6:89:1d:67:b9:d3:d7:38:30:39:ba:
                    a0:0b:86:af:22:e4:f3:c2:58:e3:2c:44:ab:3f:cd:
                    3e:c8:54:cc:74:f2:86:2a:6f:fb:ee:b0:6f:92:43:
                    9b:f3:99:d8:2a:27:c6:06:48:18:30:a8:fb:f3:bd:
                    6b:dc:0a:3f:2d:85:82:17:35:ce:db:ff:fa:97:e3:
                    88:0a:ed:68:66:04:3d:08:bb:ca:b6:d3:c5:9e:42:
                    4a:f5:4c:c4:c1:2f:7e:c6:5d:9d:be:c1:8e:59:ed:
                    c8:94:1f:75:cc:94:00:76:98:54:7e:54:f1:9c:42:
                    42:a7:c4:1b:ce:95:13:e7:ad:a1:4e:83:cf:a7:fc:
                    d0:5e:82:75:5a:ed:05:57:18:7f:10:35:f8:f8:8b:
                    90:bd:f6:8d:6f:1c:14:2e:d8:cd:40:6f:bb:6b:f3:
                    0d:db:68:71:2f:44:c1:40:f4:51:3a:fc:73:c9:c6:
                    67:cb:7f:4d:64:d8:e2:5b:05:92:1a:08:80:ff:4a:
                    72:63:dd:f5:5b:63:1c:2f:43:0c:b1:b0:0c:81:43:
                    28:27:7d:d9:fb:b4:a9:f5:1d:f4:5d:e6:7f:bd:34:
                    3f:8d:1b:a4:4e:5e:1d:11:e5:34:26:d7:27:21:50:
                    80:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4C:AF:A1:BA:DA:88:7E:1A:B9:99:1D:25:C9:97:D3:87:AF:B2:56
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS200454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48
                  2a07:54c4:1759::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:30:07:40:32:64:52:26:6d:8d:cb:cd:0a:23:40:a2:a2:f6:
         b6:5e:24:a0:40:e2:24:cd:30:08:0a:4a:d2:32:65:c3:c0:f0:
         fb:b3:35:39:cc:0b:05:41:88:2f:cf:e9:02:3c:6d:b9:7e:6f:
         25:21:e6:d5:61:b8:49:4e:48:49:65:8a:76:32:a9:ac:eb:a0:
         e4:5f:d3:d3:21:44:da:11:59:61:79:22:d9:c8:93:c7:cd:a2:
         84:c4:2e:a1:6e:9e:f8:89:e2:61:69:7d:53:80:eb:f5:7a:ab:
         20:38:a1:fe:4b:c7:03:7a:7c:41:c8:58:c3:be:60:a4:8b:b0:
         d6:f6:69:f4:cb:b5:fa:72:0c:eb:53:26:29:c9:58:d1:cd:77:
         86:38:e8:4c:58:c6:fa:11:11:f7:e0:f5:6b:7d:e3:d4:81:df:
         4b:8a:50:dc:fc:93:c3:af:b1:ff:3f:c7:d0:25:59:eb:bb:6d:
         e5:13:ea:97:2e:61:cb:5a:b4:85:0a:6d:65:7e:38:57:90:21:
         ef:e0:3e:c5:d3:db:d5:a3:77:66:5e:a4:79:0b:00:db:87:c6:
         da:c4:3a:71:27:3e:74:2f:d7:f7:d4:4f:10:03:fa:1e:73:f9:
         e6:e7:c7:d5:31:8d:a0:cc:ee:ca:03:93:64:ef:2c:cd:d8:b0:
         ac:e6:0b:a2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUaLUooZSUHvI9lQLv6r+RwcTRf+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2OEFFNkM4
NzNGREZGRTAeFw0yMzA5MTcyMTIyMjNaFw0yNDA5MTUyMTI3MjNaMDMxMTAvBgNV
BAMTKERBNENBRkExQkFEQTg4N0UxQUI5OTkxRDI1Qzk5N0QzODdBRkIyNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQoZeJV24NpgKDLog+djjlapLG
iR1nudPXODA5uqALhq8i5PPCWOMsRKs/zT7IVMx08oYqb/vusG+SQ5vzmdgqJ8YG
SBgwqPvzvWvcCj8thYIXNc7b//qX44gK7WhmBD0Iu8q208WeQkr1TMTBL37GXZ2+
wY5Z7ciUH3XMlAB2mFR+VPGcQkKnxBvOlRPnraFOg8+n/NBegnVa7QVXGH8QNfj4
i5C99o1vHBQu2M1Ab7tr8w3baHEvRMFA9FE6/HPJxmfLf01k2OJbBZIaCID/SnJj
3fVbYxwvQwyxsAyBQygnfdn7tKn1HfRd5n+9ND+NG6ROXh0R5TQm1ychUIBzAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU2kyvobraiH4auZkdJcmX04evslYwHwYDVR0j
BBgwFoAU9sBpsUupesYUGDdJVmiubIc/3/4wDgYDVR0PAQH/BAQDAgeAMHUGA1Ud
HwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL05P
UlRITEFZRVJfVUlEXzEzODY0LzAvRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2
OEFFNkM4NzNGREZGRS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw
AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm
ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzIvRjZDMDY5QjE0QkE5N0FDNjE0MTgz
NzQ5NTY2OEFFNkM4NzNGREZGRS5jZXIwYAYIKwYBBQUHAQsEVDBSMFAGCCsGAQUF
BzALhkRyc3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9OT1JUSExBWUVS
X1VJRF8xMzg2NC8wL0FTMjAwNDU0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgdUwrALAwcAKgdUxBdZ
MA0GCSqGSIb3DQEBCwUAA4IBAQANMAdAMmRSJm2Ny80KI0Ciova2XiSgQOIkzTAI
CkrSMmXDwPD7szU5zAsFQYgvz+kCPG25fm8lIebVYbhJTkhJZYp2Mqms66DkX9PT
IUTaEVlheSLZyJPHzaKExC6hbp74ieJhaX1TgOv1eqsgOKH+S8cDenxByFjDvmCk
i7DW9mn0y7X6cgzrUyYpyVjRzXeGOOhMWMb6ERH34PVrfePUgd9LilDc/JPDr7H/
P8fQJVnru23lE+qXLmHLWrSFCm1lfjhXkCHv4D7F09vVo3dmXqR5CwDbh8baxDpx
Jz50L9f31E8QA/oec/nm58fVMY2gzO7KA5Nk7yzN2LCs5gui
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org