Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS210475.roa
File:                     AS210475.roa (raw, json)
Hash identifier:          RnZz7/zYhwtIIFmRbXTzszy4Hx12jt/KCZix3ipX4Xg=
Subject key identifier:   B2:68:46:61:C1:79:0D:CE:DF:F6:C5:0C:39:05:73:57:B1:9E:7E:1D
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       64D8259C3B62C7D44B2C7AB4C408296B6D8748B5
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS210475.roa
Signing time:             Sat 16 Sep 2023 16:06:58 +0000
ROA not before:           Sat 16 Sep 2023 16:01:58 +0000
ROA not after:            Sat 14 Sep 2024 16:06:58 +0000
asID:                     210475
IP address blocks:        2a07:54c1:3700::/40 maxlen: 48
                          2a07:54c7::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d8:25:9c:3b:62:c7:d4:4b:2c:7a:b4:c4:08:29:6b:6d:87:48:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Sep 16 16:01:58 2023 GMT
            Not After : Sep 14 16:06:58 2024 GMT
        Subject: CN=B2684661C1790DCEDFF6C50C39057357B19E7E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3d:f0:15:77:60:c1:d0:89:c5:42:7a:0d:1f:
                    81:12:cb:cd:fa:84:08:77:82:fc:fd:cc:dc:69:7e:
                    c6:90:94:13:5d:83:cd:20:81:a7:c5:02:2a:8e:2a:
                    e9:fc:94:d9:da:c6:dc:5e:bd:39:51:95:bf:c0:f7:
                    33:cc:56:14:bc:32:88:bc:4b:36:fa:4c:77:2c:af:
                    57:28:55:3d:f8:ac:86:11:f6:b5:4d:ab:d1:28:06:
                    4e:39:81:19:93:f3:2b:30:d3:bf:38:04:76:b2:46:
                    96:0e:be:6f:df:f2:da:dc:ac:54:ef:4a:93:a7:6d:
                    8f:9d:28:98:c7:9d:a1:e0:22:26:fa:7c:1f:07:e9:
                    06:87:f0:6c:8b:1b:59:8b:14:92:63:fa:6a:a0:a2:
                    90:fe:1a:21:14:58:af:01:12:3c:d2:1e:36:ab:a9:
                    a7:7d:3a:80:a6:26:f5:71:1b:4b:8d:71:8b:d7:03:
                    1d:d7:4a:0a:e7:78:92:7c:90:93:bc:65:13:ef:0b:
                    11:74:ad:70:b6:7d:c9:5e:1e:1f:f9:92:03:04:65:
                    c2:c1:23:1a:ee:17:4b:b5:14:7f:6d:ef:3d:61:5b:
                    85:47:6b:46:e6:9f:c0:2d:1f:74:58:11:48:bd:3f:
                    b3:21:0a:91:8e:a5:2d:d4:65:94:a8:b6:7d:20:b4:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:68:46:61:C1:79:0D:CE:DF:F6:C5:0C:39:05:73:57:B1:9E:7E:1D
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS210475.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3700::/40
                  2a07:54c7::/36

    Signature Algorithm: sha256WithRSAEncryption
         3b:e2:ce:86:1a:0d:18:18:ca:19:13:92:64:e8:79:f7:8b:86:
         19:8e:ab:c8:12:8f:76:57:87:bb:d2:b2:44:52:6c:16:52:97:
         24:4d:d9:66:c8:23:a8:6b:9a:e0:1b:a8:11:9e:df:e1:87:2c:
         a2:65:99:f6:97:9d:18:9c:bc:c6:3b:1b:83:e7:e9:97:04:da:
         47:f4:c6:a2:fe:4d:44:a0:0e:27:5a:9c:e5:ae:e4:b1:6d:e0:
         8b:b1:87:11:0f:f3:e0:0c:08:3b:bb:4d:5f:43:96:c5:6d:3c:
         1a:61:61:59:74:ca:39:73:47:87:88:63:bc:d4:71:f7:b6:3a:
         b0:dc:40:5a:02:00:28:10:4c:5d:b5:10:fe:d4:86:43:5b:bc:
         ee:5f:65:d5:64:ae:2e:db:2a:33:50:27:40:77:fd:92:c3:a4:
         8f:a0:8f:7f:d0:e6:82:97:e5:ab:fb:6f:69:f9:c2:c2:a6:0d:
         5b:9f:05:b0:ba:53:aa:38:86:00:6d:47:90:37:30:f9:e0:3f:
         36:71:50:4a:26:87:13:ee:92:43:e5:fd:3f:4e:8d:ee:18:33:
         55:30:9a:3d:63:53:6d:9c:10:a7:fb:1e:3d:af:c5:63:95:99:
         1f:e9:f1:9a:bb:0e:9c:9b:a3:3b:de:cd:c4:d4:9b:cc:17:06:
         55:bc:d3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org