Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS203867.roa
File:                     AS203867.roa (raw, json)
Hash identifier:          RsLpTOj6/Egu+MPnxJMN1PFS1P8YveySXFisEo4zR5I=
Subject key identifier:   51:4C:54:56:64:95:94:0A:44:C2:D7:17:01:03:DA:11:C0:9D:BB:B6
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       3CACB5069F7994C6272F06AB0D7B5A4505CEAFD1
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS203867.roa
Signing time:             Sat 25 Feb 2023 00:07:32 +0000
ROA not before:           Sat 25 Feb 2023 00:02:32 +0000
ROA not after:            Sat 24 Feb 2024 00:07:32 +0000
asID:                     203867
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a07:54c4:1758::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ac:b5:06:9f:79:94:c6:27:2f:06:ab:0d:7b:5a:45:05:ce:af:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 25 00:02:32 2023 GMT
            Not After : Feb 24 00:07:32 2024 GMT
        Subject: CN=514C54566495940A44C2D7170103DA11C09DBBB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:32:c5:56:db:4e:d1:15:08:fe:8d:bf:ff:7f:
                    31:b9:9c:92:3a:62:33:da:87:38:14:52:a8:6c:6a:
                    c1:be:20:51:41:71:ca:98:cb:0c:be:cf:fa:5e:a2:
                    f3:c4:5a:05:12:e6:04:25:5e:fd:9f:67:b7:d5:00:
                    0d:5f:ed:5e:d6:18:ab:c0:9a:fb:a3:c2:8c:b7:e4:
                    84:b8:6c:34:15:4c:a1:20:61:3d:79:c6:d2:dd:24:
                    2b:da:65:7c:30:c4:e5:00:d1:b2:61:e0:b1:3f:e4:
                    dd:6b:83:e3:4c:e7:e3:50:c2:9e:11:86:2b:56:b7:
                    16:53:07:88:28:e8:d4:41:82:4f:aa:63:cf:f3:ba:
                    e8:8d:36:ac:d0:0f:64:46:41:43:55:5c:2e:22:b5:
                    61:fe:25:48:0d:08:91:34:12:0f:d2:70:7b:d3:49:
                    b9:2d:68:f6:e6:10:4e:56:00:b8:99:17:bd:3e:5e:
                    13:ad:85:bc:26:38:a5:48:3d:2a:ec:87:41:1d:67:
                    da:bf:1f:c2:be:f5:62:89:18:39:e2:fc:1d:fd:c1:
                    48:cc:b1:90:de:cd:90:6c:41:c4:f6:1f:09:24:24:
                    ac:3a:a7:f5:ce:23:88:74:ff:89:10:af:1b:45:d5:
                    92:10:b6:43:8d:15:c1:0c:0d:49:45:43:8b:6e:1e:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4C:54:56:64:95:94:0A:44:C2:D7:17:01:03:DA:11:C0:9D:BB:B6
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS203867.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48
                  2a07:54c4:1758::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:ca:e9:b9:8e:11:26:ea:8f:3e:2b:2e:5a:19:21:b4:13:94:
         94:f3:77:56:c7:15:a8:8c:e3:57:8f:39:81:b0:ff:bb:1f:36:
         f5:45:b7:7f:d1:96:64:ae:9d:67:2b:b5:33:f7:d5:a7:08:f2:
         8e:18:32:c0:b6:50:5c:26:05:9b:34:72:c6:91:fa:f2:41:e3:
         3b:97:44:5c:8f:76:3e:fd:e7:97:af:a9:9d:12:04:c6:a6:19:
         c5:fc:83:26:19:b7:5c:e2:7b:66:b3:b6:8e:66:39:00:f4:94:
         94:e8:8b:2e:37:3b:ac:68:59:68:30:44:20:76:04:7f:27:31:
         ca:4f:92:20:33:11:27:a8:37:eb:b6:49:3d:aa:1f:0a:31:0c:
         f5:bd:a0:3b:e2:01:c1:18:da:76:31:d3:8c:c8:ba:ca:df:13:
         17:22:e5:79:1c:00:dd:72:8c:18:c4:50:4c:94:e5:b5:01:14:
         5d:a4:78:04:62:4f:7c:e2:d2:2e:7b:b5:f3:b8:75:6d:41:b2:
         3a:f8:80:17:92:06:46:d8:74:4f:16:3b:5f:e5:0a:27:4e:d5:
         42:95:3d:8e:da:23:a7:0e:ee:5d:41:c8:dc:a8:9b:0c:30:d2:
         92:b4:51:ec:1f:2e:56:a0:6f:f3:c9:45:6e:df:bd:64:5a:a9:
         f1:78:fa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org