Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS210667.roa
File:                     AS210667.roa (raw, json)
Hash identifier:          KIYRikQvxEpbdsH/qgp8uWz4SSdpYTkaKn6xtvAxjYQ=
Subject key identifier:   F6:C3:00:D0:CB:4F:B0:47:AE:41:39:16:43:F5:43:4B:06:5C:C7:45
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       60BCF592720916E83B010D69BC882C43703E7736
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS210667.roa
Signing time:             Thu 23 Feb 2023 18:37:41 +0000
ROA not before:           Thu 23 Feb 2023 18:32:41 +0000
ROA not after:            Thu 22 Feb 2024 18:37:41 +0000
asID:                     210667
IP address blocks:        2a07:54c0:1000::/36 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bc:f5:92:72:09:16:e8:3b:01:0d:69:bc:88:2c:43:70:3e:77:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:41 2023 GMT
            Not After : Feb 22 18:37:41 2024 GMT
        Subject: CN=F6C300D0CB4FB047AE41391643F5434B065CC745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ba:6a:b2:95:d2:a5:1d:2f:87:09:7f:6d:2e:
                    42:60:5f:d3:56:fd:0b:7d:97:80:77:e8:4a:20:44:
                    45:c5:93:f7:38:4d:33:20:f8:c4:f2:19:a0:aa:47:
                    ae:28:27:3c:18:75:6f:83:cb:78:d0:27:f9:99:b8:
                    ce:78:f7:9f:fa:e3:8d:56:c0:48:39:da:f3:5a:00:
                    a2:45:78:ca:e4:11:09:a6:9c:9e:bc:77:a9:0f:3b:
                    dc:67:8f:0f:65:2e:59:d5:1c:84:e8:8c:fc:98:f5:
                    7d:f5:b4:db:d8:3c:73:ee:cf:f3:fc:a0:00:8a:91:
                    73:ff:5b:30:8b:e7:79:1b:f9:db:56:cc:52:63:47:
                    c8:44:0a:35:cb:a2:00:32:86:fe:9b:f0:c9:80:fc:
                    9e:d1:3d:e4:2c:b4:c3:87:f5:bd:fa:94:18:cc:5d:
                    06:ee:51:80:42:3a:ae:ee:5f:fd:cd:25:d5:93:a7:
                    e4:3b:d5:b6:31:ef:ed:57:43:f7:58:88:ae:31:4c:
                    b3:5e:d5:88:1d:b9:a5:a3:85:91:33:c2:c4:28:29:
                    89:14:85:6d:3e:26:6e:15:c9:0c:00:cc:6c:8e:f6:
                    64:66:37:99:64:49:e1:4a:e7:3b:72:61:c4:55:75:
                    c2:6e:a1:19:21:25:8a:1f:44:87:5f:c6:dd:c2:67:
                    ec:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C3:00:D0:CB:4F:B0:47:AE:41:39:16:43:F5:43:4B:06:5C:C7:45
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS210667.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c0:1000::/36
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         e2:65:90:2c:f1:d6:cb:5e:d5:fc:d9:bc:90:01:78:85:5f:f3:
         69:96:06:3d:34:06:14:9d:94:d5:0c:7a:f1:12:29:bb:64:26:
         3c:e1:cd:80:f0:3a:fe:e3:d6:ab:d3:89:95:4c:a0:96:32:cd:
         a1:b7:90:bc:f2:22:83:fc:db:8d:32:d9:04:02:c5:78:b3:ec:
         3b:f5:3b:ec:e2:40:f7:c0:4e:ed:da:35:e8:d9:56:71:44:b1:
         5c:c1:22:f0:5a:63:7c:81:89:63:02:44:23:eb:65:c6:3a:2e:
         2f:4a:d1:50:9f:03:0e:f6:90:c6:44:fa:61:fe:90:29:cf:b9:
         55:29:bb:eb:0c:97:eb:4b:75:23:58:31:ba:4a:3b:d1:16:fe:
         51:1d:ce:b6:19:10:db:46:4e:78:80:ce:74:55:f2:74:47:91:
         07:d1:30:f6:cb:ef:92:36:a6:a2:ae:2f:47:69:97:cb:84:da:
         21:4a:bc:df:59:5a:23:8e:6a:79:6c:b4:ab:2a:2e:2e:dc:a3:
         a6:bb:3d:2d:09:cd:7c:5d:c7:c8:9d:69:22:a6:bb:1b:bf:7f:
         4f:64:7b:c8:95:31:cb:a2:46:a4:1c:00:fe:72:f7:16:e8:cd:
         1a:a5:0e:59:54:79:78:38:17:56:b0:75:96:9d:ca:de:1a:fd:
         6a:89:17:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org