Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS208548.roa
File:                     AS208548.roa (raw, json)
Hash identifier:          nD5y4PRkIWQ8PXxP/sL4zhiS6WjySmN1ysxDvPwsSRU=
Subject key identifier:   A1:03:20:E1:0C:EF:84:73:0B:FC:B6:5F:C6:61:A7:3E:F0:29:2B:7C
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       7FEAD26F90354329A6F051AC98C07E4528B00F69
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS208548.roa
Signing time:             Sun 20 Aug 2023 13:51:20 +0000
ROA not before:           Sun 20 Aug 2023 13:46:20 +0000
ROA not after:            Sun 18 Aug 2024 13:51:20 +0000
asID:                     208548
IP address blocks:        2a07:54c2:1000::/36 maxlen: 40
                          2a07:54c2:2000::/36 maxlen: 36
                          2a07:54c2:3000::/36 maxlen: 36
                          2a07:54c2:4000::/36 maxlen: 36
                          2a07:54c2:5000::/36 maxlen: 36
                          2a07:54c2:6000::/36 maxlen: 36
                          2a07:54c2:7000::/36 maxlen: 36
                          2a07:54c2:8000::/36 maxlen: 36
                          2a07:54c2:9000::/36 maxlen: 36
                          2a07:54c2:a000::/36 maxlen: 36
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a07:54c2:c000::/36 maxlen: 36
                          2a07:54c2:d000::/36 maxlen: 36
                          2a07:54c2:e000::/36 maxlen: 36
                          2a07:54c2:f000::/36 maxlen: 36
                          2a07:54c4:a60::/44 maxlen: 48
                          2a07:54c4:cc0::/44 maxlen: 44
                          2a07:54c4:13f0::/44 maxlen: 44
                          2a07:54c4:1890::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ea:d2:6f:90:35:43:29:a6:f0:51:ac:98:c0:7e:45:28:b0:0f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Aug 20 13:46:20 2023 GMT
            Not After : Aug 18 13:51:20 2024 GMT
        Subject: CN=A10320E10CEF84730BFCB65FC661A73EF0292B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:19:82:5a:af:dd:18:c5:73:13:a3:97:05:
                    e1:9b:fd:d0:20:5d:82:5b:5c:b0:3f:e3:cc:dd:97:
                    87:c4:ad:ab:1b:79:74:03:12:75:ea:14:97:eb:82:
                    f8:31:42:bf:9e:73:1b:75:88:24:bb:df:ee:1a:4b:
                    7a:45:10:19:ad:23:91:58:1b:71:cf:5b:1a:7a:d8:
                    e7:56:1b:6e:ea:e8:a9:79:9d:ce:05:9f:a4:d0:a1:
                    93:c6:d1:64:42:c4:78:db:f3:d4:44:5e:05:fc:75:
                    9e:07:42:9c:1d:87:a1:a5:10:e2:66:55:90:3b:53:
                    5b:2d:13:f8:61:e4:7d:dd:5e:3b:f3:21:84:2b:44:
                    77:6d:15:72:c0:e6:23:1a:3a:da:a6:73:3f:ac:b9:
                    cc:72:e4:9b:4b:06:06:67:d7:b8:a9:09:c9:1e:09:
                    8d:e7:34:e3:06:58:4c:cf:9c:7c:15:2e:55:b7:e8:
                    f3:c4:12:3f:c6:e0:d2:fa:35:d8:0e:3d:ad:c4:e2:
                    c0:e3:7e:cb:06:69:fe:7f:39:17:c2:e7:f4:c9:bd:
                    ad:39:15:4b:4a:e0:20:b1:c5:93:ba:13:9d:2c:b9:
                    99:08:f2:af:68:9f:fa:3a:74:21:8b:31:8b:6f:a2:
                    32:ef:87:df:59:88:2e:b7:42:07:ad:23:81:53:e5:
                    19:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:03:20:E1:0C:EF:84:73:0B:FC:B6:5F:C6:61:A7:3E:F0:29:2B:7C
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS208548.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:1000::-2a07:54c2:afff:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48
                  2a07:54c2:c000::/34
                  2a07:54c4:a60::/44
                  2a07:54c4:cc0::/44
                  2a07:54c4:13f0::/44
                  2a07:54c4:1890::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:02:a9:e8:83:15:57:c2:2c:9f:24:99:85:11:28:e4:b2:9f:
         e3:b8:dc:3d:80:ec:d6:76:6a:06:23:45:cd:0a:8c:21:63:95:
         6a:f2:b1:96:36:e3:25:9b:2d:84:1b:ba:42:c0:c3:a8:66:97:
         96:c1:66:7a:40:31:8c:10:f2:f5:58:38:2d:fa:7e:ad:e3:e5:
         4d:ea:87:a9:7a:c4:4a:da:6c:ce:26:b8:8a:7c:65:84:9c:be:
         78:72:d9:99:bc:97:a1:40:b9:24:22:b5:5b:8d:32:a2:84:c2:
         93:33:4b:62:df:41:88:82:2e:ac:f7:93:0d:f6:ef:a1:0b:43:
         76:aa:31:06:0d:c3:a5:5e:86:e1:4d:ee:a3:0f:ee:a9:84:14:
         13:93:8a:16:e0:ec:68:7a:62:a2:1e:bb:29:8c:86:08:b4:c5:
         80:6c:2b:f7:b4:9a:34:6b:72:85:16:20:b7:d2:c5:79:a9:11:
         e5:2a:6e:9c:1f:d6:55:8e:1c:00:c4:ca:aa:16:be:49:b9:33:
         3b:3e:90:56:71:52:3a:b1:23:8f:9b:81:40:60:5b:e1:6e:f0:
         a3:34:c4:8d:e7:20:8e:bf:e5:2c:6e:4c:48:e1:90:40:89:2c:
         19:11:93:09:87:31:9e:03:e6:36:e0:ef:fe:2c:66:39:17:8f:
         1d:c0:01:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org