Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204375.roa
File:                     AS204375.roa (raw, json)
Hash identifier:          nfSBLA2j3Z8jI5x0WL6gU3Z99uN2aALozIFEtnro1g4=
Subject key identifier:   92:D2:F9:E4:B1:34:09:D8:6B:E9:1C:9C:BE:C0:4A:ED:F3:A0:6C:BE
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       27A72D4D0EA7328D0BC68ABCDD30DC1EF45D308F
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204375.roa
Signing time:             Thu 23 Feb 2023 18:37:40 +0000
ROA not before:           Thu 23 Feb 2023 18:32:40 +0000
ROA not after:            Thu 22 Feb 2024 18:37:40 +0000
asID:                     204375
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a7:2d:4d:0e:a7:32:8d:0b:c6:8a:bc:dd:30:dc:1e:f4:5d:30:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:40 2023 GMT
            Not After : Feb 22 18:37:40 2024 GMT
        Subject: CN=92D2F9E4B13409D86BE91C9CBEC04AEDF3A06CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:29:85:9d:6d:7c:e3:ee:ce:0d:17:b5:e9:
                    ec:40:32:85:bb:7f:f9:69:e6:97:1c:20:6e:07:0c:
                    50:23:2a:50:3c:e7:76:93:98:ec:9d:9f:0c:a7:9a:
                    2d:9f:68:64:48:f6:1e:ac:93:2f:d3:4b:62:c3:da:
                    d3:0f:85:4e:25:61:76:2e:37:0c:df:2b:5f:60:75:
                    b4:c9:16:7e:27:29:6d:76:a6:af:fb:21:24:29:39:
                    71:98:50:3d:97:84:84:7e:8d:9a:d7:ad:a9:67:46:
                    05:67:47:0a:a0:a5:25:e9:94:8d:4b:7e:47:9f:62:
                    bc:c4:87:34:e2:3b:60:05:eb:29:4e:92:b6:45:d7:
                    48:8a:c4:d8:4a:de:63:ba:4b:aa:b6:61:82:96:30:
                    9d:89:a9:6c:44:7a:d3:c8:73:27:5a:38:6d:68:e3:
                    6b:c4:f1:86:7f:85:d5:13:02:ea:59:b3:6c:ba:87:
                    93:a8:89:a3:15:10:f9:7c:21:23:96:d4:fd:b2:b9:
                    21:ac:a4:af:b9:e8:b7:b8:10:bc:b9:d8:33:03:b4:
                    ec:80:ec:74:1d:7a:23:42:a9:6b:ed:17:d4:22:7f:
                    6b:8b:86:50:b1:a5:94:54:72:db:a8:cb:5b:04:45:
                    0c:85:ec:a5:4f:04:1d:7f:c4:46:92:f4:bc:e6:98:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D2:F9:E4:B1:34:09:D8:6B:E9:1C:9C:BE:C0:4A:ED:F3:A0:6C:BE
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:27:5d:95:82:69:ad:86:ae:e8:62:17:03:66:99:be:17:a1:
         fa:be:a1:20:ea:84:1c:03:d1:97:6e:d7:06:bc:63:8b:d2:16:
         45:b8:42:aa:a1:50:a5:63:21:c6:17:17:bd:4e:5c:ed:ca:a4:
         1b:31:54:c0:31:2c:14:58:7a:07:a5:00:f3:30:dc:9b:87:c7:
         a1:24:80:4c:38:29:f6:6c:31:79:a9:31:16:53:60:65:a9:73:
         90:54:71:43:8f:fc:6b:ee:9e:8b:b8:43:15:45:bc:b5:0a:63:
         c2:73:f2:fe:b6:20:e6:8e:6d:28:0f:3b:5b:58:83:c0:0b:b6:
         73:73:2b:77:53:f2:e1:c1:37:d4:df:b6:8b:db:4c:50:ed:ce:
         da:5e:eb:26:e8:2f:82:93:b1:fd:21:4f:5f:ee:b4:79:c9:ed:
         df:94:f3:a7:f4:dc:8d:a8:10:c4:26:fb:70:3d:ae:98:1d:54:
         1c:39:47:81:81:46:06:52:46:b2:d7:34:18:5e:14:28:ae:5a:
         ad:e4:ba:6f:6d:e0:8a:1c:10:ed:59:b0:24:f1:0a:61:52:bd:
         91:c1:7a:92:e5:df:8f:a1:0d:6b:62:24:5c:40:5a:2f:dd:40:
         0c:b7:62:08:1a:85:98:4f:4e:ee:53:e9:f4:e4:d0:88:10:c9:
         04:f8:55:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org