Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS210152.roa
File:                     AS210152.roa (raw, json)
Hash identifier:          RCWz1B6EKkJKqT0aZNkUOjCAoLu5B6jAcHcU2CIk06k=
Subject key identifier:   4F:4B:1D:B6:82:4F:27:D7:C9:86:2B:BE:A5:45:83:A2:3F:CE:0C:AF
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       2361C0A2B2ECF21FF4181A9A0368BDAD32C9A470
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS210152.roa
Signing time:             Sat 16 Sep 2023 16:06:43 +0000
ROA not before:           Sat 16 Sep 2023 16:01:43 +0000
ROA not after:            Sat 14 Sep 2024 16:06:43 +0000
asID:                     210152
IP address blocks:        2a07:54c1:3700::/40 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a07:54c7::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:61:c0:a2:b2:ec:f2:1f:f4:18:1a:9a:03:68:bd:ad:32:c9:a4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Sep 16 16:01:43 2023 GMT
            Not After : Sep 14 16:06:43 2024 GMT
        Subject: CN=4F4B1DB6824F27D7C9862BBEA54583A23FCE0CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:4a:81:de:8e:d7:84:3b:88:ef:83:6b:11:
                    d1:32:a5:6e:2a:92:a1:8c:f8:e8:08:8d:ba:c3:34:
                    3d:fa:cd:4e:33:4c:66:c0:5c:18:fe:63:8f:55:07:
                    55:e7:7e:fa:d1:02:ea:f9:2c:9c:00:d4:25:34:90:
                    25:79:fb:ef:f5:82:67:d3:b7:e8:cb:1a:ea:9c:0a:
                    7a:10:bf:07:fb:52:0e:34:f0:b5:9b:ba:a9:54:b2:
                    90:3c:da:7d:8d:39:25:33:7e:56:e8:0b:c9:d4:b7:
                    c0:6f:4e:be:1f:62:67:a1:e3:7e:50:13:fa:9e:87:
                    22:56:67:be:e7:9b:18:08:f6:28:3e:e2:c4:5d:3a:
                    88:50:ed:8f:a4:98:cf:ef:d6:de:5b:6b:2c:8c:65:
                    7b:ea:ae:96:41:fb:35:99:72:0b:08:e6:dc:54:b8:
                    22:0d:fa:e5:19:19:3a:52:2a:24:5b:e5:96:eb:0b:
                    c7:7e:33:35:4f:a9:2e:d1:48:2e:74:f9:4e:4d:96:
                    b6:08:e2:16:78:35:b5:c5:46:aa:ab:2b:3b:1a:6b:
                    2a:8b:af:9b:ad:e7:2c:56:f2:1f:fc:df:eb:3d:ad:
                    5a:8d:03:a3:52:67:da:5d:c8:58:5d:6c:1e:af:a9:
                    06:b6:0d:ac:5b:da:b4:4f:54:c5:e8:4b:f8:ca:70:
                    58:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4B:1D:B6:82:4F:27:D7:C9:86:2B:BE:A5:45:83:A2:3F:CE:0C:AF
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS210152.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3700::/40
                  2a07:54c2:b00b::/48
                  2a07:54c7::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:ae:e2:62:e3:03:47:2e:65:0a:90:d8:76:9e:37:a6:b0:23:
         ae:f2:50:41:9e:76:a3:ba:de:2b:17:53:a4:3b:0a:d9:5e:bd:
         76:e8:58:e8:e8:5c:75:5c:69:2d:04:8c:d1:c7:ea:6d:8c:95:
         57:22:77:e6:79:8d:a9:db:f3:56:23:60:00:f7:2f:55:c0:6d:
         85:fb:3a:98:cd:31:e1:df:d5:3c:6a:b8:32:f0:6f:54:73:81:
         77:ae:ba:fe:eb:d5:14:f0:e1:80:a3:a6:fb:25:8f:3e:76:a7:
         65:0a:a0:22:64:e9:55:ba:78:9e:e9:1a:9f:ce:eb:3c:ff:52:
         20:c2:62:b7:e4:70:b0:51:78:8e:48:84:0b:66:d6:41:d6:cb:
         84:cd:d9:47:fa:ae:19:9e:18:f6:3b:1e:80:eb:59:65:da:e0:
         d7:8d:5f:c5:61:45:9d:28:a2:6c:95:ab:78:e4:79:2f:34:d3:
         c5:b4:43:59:78:78:bc:86:3f:5a:0e:48:f2:98:1d:17:4d:1b:
         bd:61:3a:41:6d:ef:1c:2d:cf:db:79:c9:97:50:ad:d9:80:42:
         30:a0:d1:4f:25:15:c6:d8:20:bf:1a:2b:5a:65:d4:d8:ed:3d:
         cb:9b:50:cb:63:33:b5:43:d1:a0:b2:22:86:1f:e2:dc:a0:e3:
         d1:52:c1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org