Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS206444.roa
File:                     AS206444.roa (raw, json)
Hash identifier:          WLr4xjBk1JUq/jvuA1CDDneDm4TOpvSG3T/qMtB28lI=
Subject key identifier:   EC:71:52:0F:C0:68:66:A7:EC:3E:DB:3C:AD:5F:12:97:A7:A6:81:E3
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       0A60E90EE13953D7B7E9235DD69FD04AD14F359A
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS206444.roa
Signing time:             Tue 25 Jul 2023 12:11:26 +0000
ROA not before:           Tue 25 Jul 2023 12:06:26 +0000
ROA not after:            Tue 23 Jul 2024 12:11:26 +0000
asID:                     206444
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a07:54c4:9800::/37 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:60:e9:0e:e1:39:53:d7:b7:e9:23:5d:d6:9f:d0:4a:d1:4f:35:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Jul 25 12:06:26 2023 GMT
            Not After : Jul 23 12:11:26 2024 GMT
        Subject: CN=EC71520FC06866A7EC3EDB3CAD5F1297A7A681E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3d:c3:30:24:b0:b3:60:8a:c0:ea:d2:a9:06:
                    92:a8:fb:53:b9:4e:47:5d:93:a5:04:76:dc:16:72:
                    1d:71:29:7d:94:05:d2:e2:c2:26:68:29:47:0c:74:
                    f5:c1:e9:41:f5:7e:76:60:cf:be:1c:95:a9:c5:9d:
                    99:76:6e:6c:57:2f:c5:1d:13:b2:87:31:4a:27:54:
                    b9:b0:98:3a:52:58:13:33:24:f1:7e:e7:d8:63:63:
                    4b:ef:fd:b1:43:b4:97:48:f3:0d:02:e3:d2:6c:b2:
                    20:41:b2:2d:2e:92:34:73:61:94:2f:3b:1e:92:74:
                    18:17:ae:1d:ca:6f:2a:fd:66:49:ef:98:a9:2b:ea:
                    a4:2c:f8:5b:cb:5e:47:79:54:59:15:43:71:79:c3:
                    0c:38:73:60:34:32:e6:f7:6d:69:10:f8:f2:1c:8a:
                    a7:53:f9:c9:1d:7f:78:b9:07:45:12:84:88:7b:3e:
                    59:4d:bc:c6:f1:1e:26:a1:0c:f8:11:0a:84:40:21:
                    6d:85:90:ba:b1:3b:a5:24:3b:65:de:2b:c1:c0:8c:
                    d8:92:0d:54:ea:f3:41:f8:a0:39:71:ca:30:04:94:
                    f9:99:82:e6:6c:13:09:da:ea:ca:16:18:a7:61:5c:
                    71:f6:4c:c9:85:dc:be:a3:23:68:90:f7:97:30:95:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:71:52:0F:C0:68:66:A7:EC:3E:DB:3C:AD:5F:12:97:A7:A6:81:E3
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS206444.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48
                  2a07:54c4:9800::/37

    Signature Algorithm: sha256WithRSAEncryption
         87:95:c2:5d:75:ed:00:bf:5d:b2:02:09:a8:e6:88:f3:0a:46:
         69:98:6f:45:2f:7a:49:68:f6:06:e2:01:6c:0c:fa:d1:5d:3a:
         b3:0b:d1:46:56:05:3d:66:8c:68:33:a7:81:18:9f:9c:e3:a9:
         91:7f:8c:f3:4d:12:c1:73:5c:a5:1d:00:d2:5e:b4:6f:0d:77:
         5b:aa:ee:f1:2b:d5:8c:9a:56:6f:06:a4:70:5c:2d:78:43:1b:
         82:f0:63:b7:22:f1:b7:d9:60:46:a1:20:2d:c1:ee:7c:4e:95:
         96:2c:34:cd:dc:ac:fa:a3:61:76:94:56:3e:21:80:63:c5:b6:
         82:84:33:3b:cf:93:1e:f9:23:f1:f5:d9:24:6d:d1:11:4f:df:
         87:70:3b:05:42:e3:da:01:b6:70:64:62:ea:36:61:4b:85:5a:
         ca:ac:47:3f:49:e1:bb:76:30:cc:de:40:62:52:11:7b:37:69:
         5d:31:15:89:36:e9:0b:8d:dd:e5:c2:dd:a3:fe:39:60:6f:9c:
         26:52:d3:c7:5e:77:6c:12:b0:8b:b8:31:87:e7:c7:a9:2b:15:
         ec:30:a2:59:6c:46:5a:4f:9f:bb:3c:ca:fa:13:d0:96:db:4b:
         2b:9e:54:b0:ef:af:aa:f9:85:1a:da:23:62:19:e7:00:74:8c:
         63:5d:bc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org