Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS209718.roa
File:                     AS209718.roa (raw, json)
Hash identifier:          Bv7Hr1phSgipqmfJ/uH8WRVDFZR5nbdFWog6sGsbbJU=
Subject key identifier:   4B:55:E5:2D:F2:5A:0D:0A:48:9B:5B:EE:9E:50:F8:59:30:ED:3F:FF
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       4260FEFC8589D6F2F909D934D9FC0132C5D90ED8
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS209718.roa
Signing time:             Thu 23 Feb 2023 18:37:39 +0000
ROA not before:           Thu 23 Feb 2023 18:32:39 +0000
ROA not after:            Thu 22 Feb 2024 18:37:39 +0000
asID:                     209718
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:60:fe:fc:85:89:d6:f2:f9:09:d9:34:d9:fc:01:32:c5:d9:0e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:39 2023 GMT
            Not After : Feb 22 18:37:39 2024 GMT
        Subject: CN=4B55E52DF25A0D0A489B5BEE9E50F85930ED3FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:55:25:fd:d3:c5:cc:db:44:92:dd:b1:7d:9f:
                    e9:d4:79:57:ed:94:af:65:8b:eb:0e:29:4b:02:8f:
                    32:b8:96:53:17:42:30:eb:c2:47:d4:10:f1:7d:ce:
                    66:e5:c0:74:1e:1a:f9:d0:43:6e:fb:32:91:cb:a6:
                    db:74:4a:7a:2f:45:eb:65:26:b8:77:29:ea:04:1b:
                    45:cd:71:26:37:83:33:96:0a:f0:03:11:91:95:2e:
                    dd:37:0a:aa:e4:1a:93:41:03:3c:ad:c0:d5:31:27:
                    57:59:77:ec:b9:ab:10:6b:5a:38:f2:10:5c:98:6d:
                    51:42:73:56:99:c9:24:07:f7:73:2e:19:13:2d:25:
                    c8:66:d7:97:48:b7:d6:c3:eb:0b:8d:63:bd:87:8a:
                    7f:b1:8d:bd:64:c8:f8:1b:bd:9c:29:c1:ef:92:47:
                    21:14:15:68:7f:88:68:1f:59:24:f7:ee:61:a4:a5:
                    05:03:7a:96:94:87:38:80:61:bc:ef:de:69:d8:58:
                    de:a6:c0:33:1c:61:2e:cd:f0:3a:a1:76:d5:73:23:
                    d4:d3:25:1f:4d:e7:83:f7:2c:e0:e4:9e:84:2c:6b:
                    7f:7a:98:0a:e8:bb:54:90:bb:ff:e6:8b:f7:03:db:
                    b1:dd:d4:f9:aa:5e:66:2d:01:77:6a:19:03:1d:51:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:55:E5:2D:F2:5A:0D:0A:48:9B:5B:EE:9E:50:F8:59:30:ED:3F:FF
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS209718.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:65:7b:1f:b4:bc:b6:a5:82:d2:12:75:aa:57:b5:5d:31:fb:
         63:63:46:b8:ba:98:55:db:a0:06:77:97:66:62:95:d8:c2:af:
         d5:7e:f3:c4:e1:35:9b:6a:6a:69:66:1f:72:8e:54:b5:96:15:
         dc:99:b1:e9:4a:ca:06:bb:59:a8:c0:da:74:12:f1:52:01:5a:
         8c:2f:ff:0d:0c:f1:79:3c:6c:69:73:24:b9:41:6b:b5:ec:25:
         db:4c:1c:4e:b2:46:70:a0:65:04:b8:8c:2a:e8:b1:15:45:8f:
         89:e4:f7:7a:07:73:4e:d3:81:97:6f:37:f6:65:5b:a5:ad:16:
         d9:c9:a3:35:c7:8b:36:58:a9:d9:fe:75:a7:0a:7b:31:b6:ea:
         e6:ad:f5:c0:57:f9:60:9d:bf:7a:d6:0d:67:4b:13:d5:9c:65:
         db:4a:12:eb:4b:95:cf:f0:59:71:7f:16:bd:b3:a6:d0:77:86:
         15:84:0e:46:c1:0e:e8:8c:b9:40:b2:e5:1a:e9:16:d8:a1:55:
         fb:58:b5:6c:87:b9:8c:02:b1:da:ce:f4:6d:7a:b9:c7:d2:a4:
         98:94:f0:82:26:f5:72:1d:d4:a4:5a:5d:4a:0e:13:05:9a:bc:
         e3:91:f8:30:23:42:41:45:50:d6:d1:12:1f:cf:01:5f:6d:a0:
         32:74:c0:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org