Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204585.roa
File:                     AS204585.roa (raw, json)
Hash identifier:          a9RAFDxqAGkmKiTpXst9wlgh9e5MqetXRVLVDar6338=
Subject key identifier:   48:51:C9:4F:1C:AF:70:7A:BF:10:25:F8:E4:34:08:DC:65:45:5F:0D
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       31E9DEED4C2BB67ED953C8B7965F38963B9F2022
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204585.roa
Signing time:             Thu 23 Feb 2023 18:37:16 +0000
ROA not before:           Thu 23 Feb 2023 18:32:16 +0000
ROA not after:            Thu 22 Feb 2024 18:37:16 +0000
asID:                     204585
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e9:de:ed:4c:2b:b6:7e:d9:53:c8:b7:96:5f:38:96:3b:9f:20:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:16 2023 GMT
            Not After : Feb 22 18:37:16 2024 GMT
        Subject: CN=4851C94F1CAF707ABF1025F8E43408DC65455F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:c0:d3:7a:7e:d1:68:3c:0a:1f:42:c7:67:
                    c8:56:4e:35:3e:67:03:a9:03:40:d3:1e:49:e9:05:
                    9c:10:23:ad:47:96:c0:91:63:a4:3e:67:36:3d:cd:
                    1b:e4:99:ee:c6:93:c5:bf:bb:42:a6:99:3d:81:dd:
                    9b:c9:64:fc:3e:5b:81:d2:4f:5c:25:1f:83:a5:31:
                    81:13:9c:91:82:63:80:21:31:0a:b7:d7:3b:4e:27:
                    16:6f:ab:b1:f7:17:2d:23:64:33:7c:ad:f5:83:53:
                    33:66:9a:29:4b:82:af:dc:49:f9:72:c8:55:47:02:
                    aa:91:29:56:01:a4:64:18:7d:9c:07:99:37:01:f8:
                    df:71:fe:e6:5a:ea:d1:cc:dd:a3:7a:20:7e:fd:42:
                    6e:02:0e:31:0a:cd:06:6a:ea:ec:22:33:3f:b8:4e:
                    d2:bb:87:95:94:24:d0:e6:18:cc:d3:69:0a:42:27:
                    8d:01:7c:a9:ba:80:1a:f1:22:c6:bb:79:65:6c:d5:
                    bb:30:34:a7:e2:64:5f:22:41:d9:9d:82:40:87:d6:
                    1b:e2:ce:1f:8a:c4:24:73:7b:b0:29:de:7d:8c:fb:
                    b2:08:2f:80:e1:39:f6:d2:6d:13:d5:98:be:b7:9b:
                    3f:75:b9:55:44:d6:b7:86:51:b4:18:fc:85:3a:94:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:51:C9:4F:1C:AF:70:7A:BF:10:25:F8:E4:34:08:DC:65:45:5F:0D
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204585.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:68:e6:10:50:dc:8b:31:a7:45:b2:59:b8:92:c4:65:6c:87:
         ec:fc:42:37:9c:c2:48:44:33:bc:bb:74:cb:04:b1:50:b7:94:
         97:e6:ec:65:c2:77:9c:41:88:e8:3c:e1:e5:f4:57:da:21:94:
         5a:f4:01:05:f4:fd:db:77:78:e7:93:f6:9b:26:64:ea:38:54:
         22:3d:62:e0:a2:70:bb:f0:a8:19:9e:80:18:b2:1e:4d:7a:db:
         48:26:73:05:25:fb:d8:5c:a6:d3:a3:79:fc:5c:7b:d4:0c:92:
         f6:cc:b6:f8:b1:aa:42:d0:d8:e8:41:5a:57:65:56:79:6b:3f:
         6e:c4:89:03:42:a1:4e:6c:13:b1:2d:17:79:04:8d:0f:70:40:
         1e:98:dc:3f:86:30:38:fa:78:db:8c:45:d0:18:08:bd:77:6e:
         7d:74:09:8d:92:1d:9c:ee:97:0f:14:ec:40:74:b9:66:0a:97:
         99:e9:38:38:e7:5f:6a:fc:60:15:51:ff:4f:c3:94:07:0c:40:
         ed:de:09:f9:79:6a:a7:c5:5b:c3:93:32:1f:81:62:44:b4:3c:
         3a:03:15:ac:fb:55:8b:a3:f4:b8:ee:7e:71:32:04:fb:61:be:
         ec:56:c2:4f:3a:88:ca:c8:3e:52:17:d3:a5:ab:1d:28:5e:08:
         00:f4:9e:fe
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUMene7Uwrtn7ZU8i3ll84ljufICIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2OEFFNkM4
NzNGREZGRTAeFw0yMzAyMjMxODMyMTZaFw0yNDAyMjIxODM3MTZaMDMxMTAvBgNV
BAMTKDQ4NTFDOTRGMUNBRjcwN0FCRjEwMjVGOEU0MzQwOERDNjU0NTVGMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFsDTen7RaDwKH0LHZ8hWTjU+
ZwOpA0DTHknpBZwQI61HlsCRY6Q+ZzY9zRvkme7Gk8W/u0KmmT2B3ZvJZPw+W4HS
T1wlH4OlMYETnJGCY4AhMQq31ztOJxZvq7H3Fy0jZDN8rfWDUzNmmilLgq/cSfly
yFVHAqqRKVYBpGQYfZwHmTcB+N9x/uZa6tHM3aN6IH79Qm4CDjEKzQZq6uwiMz+4
TtK7h5WUJNDmGMzTaQpCJ40BfKm6gBrxIsa7eWVs1bswNKfiZF8iQdmdgkCH1hvi
zh+KxCRze7Ap3n2M+7IIL4DhOfbSbRPVmL63mz91uVVE1reGUbQY/IU6lHbpAgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQUSFHJTxyvcHq/ECX45DQI3GVFXw0wHwYDVR0j
BBgwFoAU9sBpsUupesYUGDdJVmiubIc/3/4wDgYDVR0PAQH/BAQDAgeAMHUGA1Ud
HwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL05P
UlRITEFZRVJfVUlEXzEzODY0LzAvRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2
OEFFNkM4NzNGREZGRS5jcmwwdwYIKwYBBQUHAQEEazBpMGcGCCsGAQUFBzAChlty
c3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0Y2
QzA2OUIxNEJBOTdBQzYxNDE4Mzc0OTU2NjhBRTZDODczRkRGRkUuY2VyMGAGCCsG
AQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnphcHBpZWhvc3Qu
Y29tL3JlcG8vTk9SVEhMQVlFUl9VSURfMTM4NjQvMC9BUzIwNDU4NS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoHVMKwCzANBgkqhkiG9w0BAQsFAAOCAQEAaGjmEFDcizGnRbJZuJLEZWyH
7PxCN5zCSEQzvLt0ywSxULeUl+bsZcJ3nEGI6Dzh5fRX2iGUWvQBBfT923d455P2
myZk6jhUIj1i4KJwu/CoGZ6AGLIeTXrbSCZzBSX72Fym06N5/Fx71AyS9sy2+LGq
QtDY6EFaV2VWeWs/bsSJA0KhTmwTsS0XeQSND3BAHpjcP4YwOPp424xF0BgIvXdu
fXQJjZIdnO6XDxTsQHS5ZgqXmek4OOdfavxgFVH/T8OUBwxA7d4J+Xlqp8Vbw5My
H4FiRLQ8OgMVrPtVi6P0uO5+cTIE+2G+7FbCTzqIysg+UhfTpasdKF4IAPSe/g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org