Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS209870.roa
File:                     AS209870.roa (raw, json)
Hash identifier:          waPQKFRAeTL0lXJRx4Cn8tM5qR/HWHauojoLsszjFKw=
Subject key identifier:   47:23:B0:E5:BB:55:98:EA:3F:84:97:AD:5F:84:43:DA:E6:9C:B8:AC
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       50AD720C10C201A58CABF264C4D69D9881B91185
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS209870.roa
Signing time:             Thu 23 Feb 2023 18:37:29 +0000
ROA not before:           Thu 23 Feb 2023 18:32:29 +0000
ROA not after:            Thu 22 Feb 2024 18:37:29 +0000
asID:                     209870
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ad:72:0c:10:c2:01:a5:8c:ab:f2:64:c4:d6:9d:98:81:b9:11:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:29 2023 GMT
            Not After : Feb 22 18:37:29 2024 GMT
        Subject: CN=4723B0E5BB5598EA3F8497AD5F8443DAE69CB8AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:aa:d2:d1:cc:59:8a:f3:06:a4:b7:bf:f1:
                    a0:7c:1e:00:72:fe:91:c2:44:a0:3e:45:63:f9:97:
                    0d:47:08:8a:5b:2e:b0:a2:41:c3:75:54:52:3c:cc:
                    60:06:5c:15:8a:24:e0:ff:78:24:ff:51:b4:e5:83:
                    d8:fb:99:04:92:54:6b:df:29:d5:98:5d:0f:98:6e:
                    db:fd:ec:e2:88:8e:be:1b:08:cf:50:f7:50:cd:d1:
                    8e:cc:42:68:46:e0:d0:0f:67:e8:45:ad:d1:18:20:
                    15:b4:80:1f:16:40:9b:24:6d:d1:b1:c3:72:bb:f8:
                    ba:4f:1f:4d:7a:98:48:7b:b9:c4:61:8d:16:24:30:
                    70:3b:00:72:20:a4:be:9d:d8:10:32:9f:ad:b9:79:
                    87:d9:f9:24:16:bc:f2:31:4e:83:1b:a8:5e:c6:f7:
                    af:af:e1:bb:c9:89:0e:67:60:51:ce:db:cf:56:6a:
                    2e:76:8b:fb:fc:7b:95:db:69:68:68:0e:6d:27:a9:
                    13:58:06:28:d9:ff:1d:b8:49:1a:75:94:de:f2:a4:
                    9a:ea:3f:2e:a5:59:71:6c:7f:1c:34:72:4d:ca:70:
                    f7:6e:32:cf:d0:4d:57:dd:78:a8:99:91:2a:f1:f3:
                    17:d3:c8:b2:37:a0:5a:bc:e8:52:5d:64:d4:a4:71:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:23:B0:E5:BB:55:98:EA:3F:84:97:AD:5F:84:43:DA:E6:9C:B8:AC
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS209870.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:2b:54:10:2d:e2:11:45:2a:08:07:e8:4f:5b:54:70:89:2a:
         1d:dd:d6:72:de:90:a2:77:40:fa:93:88:15:fc:bd:4b:51:ec:
         70:7f:fc:02:b2:87:07:1a:c2:fd:dd:a7:5e:09:b5:77:5e:da:
         27:17:78:d7:06:23:66:18:e4:e6:9a:e6:22:37:e7:90:ab:a5:
         f5:02:2f:f6:0c:7c:10:17:7c:d0:c1:68:fc:7d:23:5d:08:ec:
         51:a1:e3:22:71:b0:67:85:4c:da:38:ff:6c:d3:50:b2:4b:ac:
         c8:31:91:ef:c1:90:ef:cf:c7:bf:0e:c6:9e:85:a4:25:72:6a:
         46:58:29:81:20:a7:82:00:d4:e8:91:c6:4d:25:8b:e1:d1:28:
         48:79:22:c2:42:05:0f:53:64:24:1f:ea:46:3f:6d:9a:86:c5:
         23:66:fa:b8:22:c7:35:c0:e5:7f:ba:95:7c:24:25:f9:38:47:
         ed:89:26:ab:26:ca:70:b2:d2:bf:5d:fd:15:0c:24:10:97:8e:
         c7:e1:62:ef:ca:20:4c:dc:6a:6a:f8:48:d3:bb:14:0f:1d:88:
         43:1a:38:81:8d:0b:3e:99:42:e6:92:51:a2:6e:0d:c6:c0:9d:
         c0:9d:c6:a0:d4:15:3d:91:14:15:27:c0:2e:d7:b2:09:a2:5e:
         a0:63:e4:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org