Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS203069.roa
File:                     AS203069.roa (raw, json)
Hash identifier:          PpsXfb57RqzllmvGxQN8ZlkwpLER9L9vH4LKjqejJ04=
Subject key identifier:   50:9C:30:6C:90:E8:34:94:3E:7E:5D:8C:A4:BF:F5:62:AE:80:09:21
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       5F32CCD6DDCD4AC1E0471C87A173A1FE6B3637A5
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS203069.roa
Signing time:             Thu 23 Feb 2023 18:37:21 +0000
ROA not before:           Thu 23 Feb 2023 18:32:21 +0000
ROA not after:            Thu 22 Feb 2024 18:37:21 +0000
asID:                     203069
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:32:cc:d6:dd:cd:4a:c1:e0:47:1c:87:a1:73:a1:fe:6b:36:37:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:21 2023 GMT
            Not After : Feb 22 18:37:21 2024 GMT
        Subject: CN=509C306C90E834943E7E5D8CA4BFF562AE800921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bb:28:84:33:20:20:88:96:29:80:2e:5f:9f:
                    1e:95:14:49:5e:1d:22:71:cf:0b:66:f4:77:5e:56:
                    ba:a8:c8:1b:d9:62:93:95:0c:6d:c4:bb:07:b8:d1:
                    e5:aa:db:6b:39:1b:56:3b:76:97:51:9e:27:4b:83:
                    41:7c:68:28:2a:73:fc:f8:44:e8:19:6f:b5:d3:cc:
                    8b:57:2c:47:7e:5c:3d:51:f2:50:25:45:3e:5c:e3:
                    15:43:ad:45:b1:91:33:40:d5:b7:58:f7:0c:01:dc:
                    1d:ff:fd:88:34:10:6f:eb:a5:34:5b:3a:d3:67:41:
                    d8:49:90:b4:c5:9f:a7:65:4b:aa:98:29:5e:b8:f2:
                    e9:cb:d1:26:8f:09:7b:7b:e6:04:2c:5c:6c:c3:e3:
                    ea:64:6f:0c:61:f3:1a:1d:21:c7:e3:3c:da:82:f6:
                    44:f7:3a:4b:d0:1f:56:c3:87:b1:36:13:3b:f0:e6:
                    55:23:89:25:ea:1a:a4:bb:01:25:91:84:49:2e:c4:
                    ac:92:76:0e:8b:cf:f1:5f:04:fa:9e:54:6a:86:28:
                    ff:ac:f0:b3:f2:53:60:87:b3:ce:60:fb:7f:1f:33:
                    c0:2e:ed:15:7e:9e:0e:87:ff:89:4e:48:19:57:d7:
                    f3:0a:13:92:e2:41:cc:ee:92:65:f9:48:0f:af:f6:
                    be:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9C:30:6C:90:E8:34:94:3E:7E:5D:8C:A4:BF:F5:62:AE:80:09:21
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS203069.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:dd:8c:31:83:c2:5e:4b:6f:da:01:fb:cf:41:f1:2a:d9:a6:
         3c:e3:2a:fc:27:7a:76:a8:f7:18:e1:7c:21:49:76:c4:92:51:
         c2:05:70:67:e9:3e:0d:e3:7c:0d:b3:6e:e4:5b:e6:21:d7:46:
         35:16:5a:cc:7a:69:f0:87:fe:8f:98:78:88:4d:5f:97:d1:4e:
         41:84:9a:c6:75:2d:10:3f:55:89:db:80:17:ba:eb:63:45:6a:
         2d:bc:57:51:d5:cf:0b:6a:0e:b5:3b:e8:e7:86:f5:ea:b8:de:
         cc:8a:d7:f9:58:ab:ae:3d:1b:63:7c:5f:87:cd:22:ec:7a:e5:
         5a:46:31:6f:a0:cb:01:d4:cb:b0:e2:d3:64:b3:1d:71:ea:fe:
         3a:4f:ad:0e:c5:25:b7:af:a7:35:b2:e5:c4:1d:e4:ec:d7:7f:
         8b:4c:bd:cc:c0:67:cc:fd:f9:4c:6d:a9:a3:ce:69:12:19:ff:
         43:4e:4b:a1:94:f4:1d:06:7b:45:26:97:c8:b4:04:82:31:de:
         73:91:61:c6:af:4d:e6:99:17:9a:79:49:2a:b5:38:ee:ba:17:
         a4:cc:47:74:14:3d:11:0e:5e:e2:8f:90:c8:af:01:b1:f0:64:
         ed:55:eb:22:b4:73:06:73:bb:eb:10:6c:2b:4a:6e:a1:de:d0:
         43:2d:c2:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org