Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204857.roa
File:                     AS204857.roa (raw, json)
Hash identifier:          j8Nqwvmg8/4f8nxzI+IuvGG9RLz0jJgqF3vDCrix8HQ=
Subject key identifier:   08:41:E9:74:41:3A:D6:4A:DB:C8:2E:DD:8A:2B:8F:AF:83:C2:87:1E
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       2D5FDCF3A3EF584B35C6F36489E1E70599F20330
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204857.roa
Signing time:             Tue 25 Jul 2023 13:31:11 +0000
ROA not before:           Tue 25 Jul 2023 13:26:11 +0000
ROA not after:            Tue 23 Jul 2024 13:31:11 +0000
asID:                     204857
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5f:dc:f3:a3:ef:58:4b:35:c6:f3:64:89:e1:e7:05:99:f2:03:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Jul 25 13:26:11 2023 GMT
            Not After : Jul 23 13:31:11 2024 GMT
        Subject: CN=0841E974413AD64ADBC82EDD8A2B8FAF83C2871E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:c2:4d:7a:f8:29:88:28:e3:46:55:80:79:
                    6d:df:de:a9:ba:67:e9:22:bc:95:ee:77:dc:62:c9:
                    8f:9c:02:2b:bd:04:f9:ab:71:36:be:50:a5:e1:47:
                    12:e9:0a:f2:96:6a:a3:a3:e7:10:01:73:88:c2:fb:
                    63:8b:6d:c4:25:69:c2:a9:3e:8a:86:29:36:7a:85:
                    92:28:ea:db:87:ce:e2:49:7f:cc:2a:10:72:54:cd:
                    5a:56:5e:b6:42:c0:07:1b:20:7c:b9:df:5b:3e:87:
                    4d:ab:30:99:b5:79:30:71:e6:16:cb:31:67:db:f5:
                    41:78:30:d8:a7:29:e8:39:30:07:9b:45:1b:98:d5:
                    2d:ec:0f:01:8a:6e:b4:e9:cd:06:3e:fc:49:56:77:
                    29:78:5a:e3:cc:43:72:04:a9:5a:37:44:ed:10:46:
                    25:e9:8b:ce:c0:c2:8e:db:ee:28:f1:50:25:f5:07:
                    7a:94:63:14:2f:96:49:0e:ac:2e:d4:fa:a9:48:64:
                    48:fd:f0:66:dd:53:f9:b3:0d:6b:34:f4:d3:13:3c:
                    e8:c7:8c:eb:fc:af:10:23:8f:15:1a:4b:13:44:a2:
                    bb:67:9c:45:ab:0a:4f:27:e7:8b:81:a2:69:76:24:
                    89:1b:43:dd:e7:72:55:ce:1d:77:b8:38:a9:1f:a8:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:41:E9:74:41:3A:D6:4A:DB:C8:2E:DD:8A:2B:8F:AF:83:C2:87:1E
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS204857.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:bb:c4:28:14:aa:63:0c:7a:af:46:c5:60:09:5b:0d:3a:c4:
         85:45:96:ef:a0:b4:88:44:80:4c:85:39:f0:3f:12:10:de:36:
         36:16:19:05:7f:fb:10:7e:0b:09:e8:a7:1d:b9:e8:d0:60:73:
         41:4a:24:d7:a9:05:cd:89:47:51:30:c7:61:0e:7c:86:b5:1b:
         e8:69:8b:04:78:e7:f9:d8:3e:07:a0:83:0a:17:30:6e:cb:f1:
         6c:45:58:1a:cb:7d:dc:cb:e0:c1:36:17:f9:03:8e:4d:d2:b4:
         19:18:d4:6b:e6:6d:d5:e6:a4:ee:31:9b:d3:a1:f3:60:ef:4d:
         d4:d0:1a:15:a0:54:b4:cf:77:97:8a:68:1e:7b:30:28:dc:c7:
         13:9b:e2:a2:8b:b3:40:bd:a8:8f:60:d3:e7:35:f7:ad:f3:e3:
         f0:4c:09:1a:5a:92:79:53:f7:ca:d1:d9:29:00:90:36:6a:b7:
         4b:9a:2e:8f:b1:14:81:6d:48:aa:c4:a3:a5:a7:7c:a4:12:69:
         be:aa:ee:b0:42:3b:4c:dd:23:92:11:7a:bc:39:79:28:b3:37:
         b0:9b:64:01:45:c3:d3:56:86:8d:b9:64:0c:e8:ac:56:cb:50:
         f7:69:94:cd:ba:00:f6:7a:78:a5:c2:64:9c:f1:2c:5f:7c:b9:
         4e:8c:67:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org