Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS206271.roa
File:                     AS206271.roa (raw, json)
Hash identifier:          xNIDpINwzqInH5VHAP0uhwsVsp4q15DVDOFO9LEGy9E=
Subject key identifier:   68:D2:6A:6A:24:41:87:5E:C7:9E:DE:54:DC:41:C4:27:3B:D7:8F:8E
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       3FE3194F4A1B3DAB87E0C82F99CA4F2C6D0DE15C
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS206271.roa
Signing time:             Fri 21 Apr 2023 12:41:59 +0000
ROA not before:           Fri 21 Apr 2023 12:36:59 +0000
ROA not after:            Fri 19 Apr 2024 12:41:59 +0000
asID:                     206271
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e3:19:4f:4a:1b:3d:ab:87:e0:c8:2f:99:ca:4f:2c:6d:0d:e1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Apr 21 12:36:59 2023 GMT
            Not After : Apr 19 12:41:59 2024 GMT
        Subject: CN=68D26A6A2441875EC79EDE54DC41C4273BD78F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:b3:0e:0b:16:4f:92:2c:b1:62:9c:fb:c2:
                    5f:7f:68:2d:6f:14:31:04:99:5c:ca:bf:23:28:f8:
                    f5:5a:c9:68:fe:3f:20:a4:02:45:bc:8a:ef:c2:36:
                    bf:55:c8:2c:30:ea:1b:85:37:6b:e6:c8:4b:53:16:
                    c7:47:d5:4e:cb:59:fe:40:fa:f1:7c:6e:2c:c4:57:
                    3e:a7:41:89:1e:5b:df:bb:d0:e6:65:ce:b1:a9:0a:
                    3a:49:51:89:3d:3c:50:5d:7d:b3:de:29:77:64:27:
                    6d:01:64:c8:7c:f7:48:fa:59:47:92:69:49:14:e2:
                    ee:9d:0c:d1:00:49:23:74:35:8a:56:52:81:07:ce:
                    67:54:17:ef:d3:10:d6:e5:b3:15:a4:ab:7e:be:79:
                    53:fa:9a:0c:f4:42:f7:a4:96:7e:dd:cb:67:fe:3e:
                    93:b1:d0:95:bf:64:55:b5:e4:e6:75:ca:b2:a2:01:
                    7e:ba:8e:80:55:c1:15:c9:01:72:2f:75:b8:bb:da:
                    9a:be:20:6f:99:f0:0b:5f:d9:ff:09:a2:9e:10:c5:
                    72:ed:2b:aa:57:8b:b1:00:7e:d9:9b:10:d9:f6:ee:
                    99:46:53:5d:dd:64:6b:c8:22:65:29:6a:71:6c:ba:
                    84:65:63:39:2b:fa:75:43:ed:59:90:1d:89:2a:df:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D2:6A:6A:24:41:87:5E:C7:9E:DE:54:DC:41:C4:27:3B:D7:8F:8E
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS206271.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:9b:c0:eb:e0:24:64:e5:20:b5:fa:85:41:51:53:d1:55:c2:
         b5:96:a1:cd:f6:bf:ca:7a:f6:fe:a2:72:6b:f6:bd:39:e5:16:
         f8:39:5d:9a:79:43:7d:af:5d:24:0a:da:c8:f1:c7:98:df:f6:
         44:2c:9c:5e:b7:11:ae:15:89:cf:7b:38:c9:6b:8d:e7:35:98:
         b9:07:70:3a:3f:f6:f8:b2:cb:c4:af:ed:ea:b2:fa:10:3e:b9:
         0d:a1:ca:e4:22:b5:e8:98:5c:89:33:92:4d:1e:1d:54:28:dd:
         d8:42:74:e7:a4:6e:0d:43:43:44:60:c7:1e:b4:ee:4e:a8:f7:
         0b:75:ab:44:75:f3:df:30:ab:98:4a:94:be:b7:60:d8:1b:a0:
         3a:45:15:71:98:ab:5b:a7:2e:65:dd:ff:bf:2f:4e:cc:76:6a:
         c8:f1:41:76:d4:0c:30:5c:80:31:18:fe:a6:27:07:47:30:00:
         18:a1:da:b2:b1:aa:08:0a:fd:e5:40:bd:99:5e:2f:71:99:0c:
         a0:ba:76:12:cc:da:15:a1:d8:be:b7:1e:13:9b:04:50:b1:c6:
         7a:39:45:69:4c:18:22:79:f2:d1:aa:8d:04:85:3f:df:c8:67:
         a1:ee:5b:ff:d8:81:48:30:77:1d:d5:ef:d0:22:19:0d:ee:bf:
         0a:93:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org