Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS216304.roa
File:                     AS216304.roa (raw, json)
Hash identifier:          Vcv7zWTLA4k2+47ZnKBmeXV8vD6r6e+8sLcsFh3C0pE=
Subject key identifier:   BF:2B:35:53:BE:33:4C:65:37:20:33:06:69:77:77:34:A6:59:C6:25
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       76E9EFE033DD1DA3A7B2B5B7BCCAE2A40121D122
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS216304.roa
Signing time:             Sun 17 Sep 2023 21:29:57 +0000
ROA not before:           Sun 17 Sep 2023 21:24:57 +0000
ROA not after:            Sun 15 Sep 2024 21:29:57 +0000
asID:                     216304
IP address blocks:        2a07:54c1:3800::/40 maxlen: 48
                          2a07:54c4:175f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e9:ef:e0:33:dd:1d:a3:a7:b2:b5:b7:bc:ca:e2:a4:01:21:d1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Sep 17 21:24:57 2023 GMT
            Not After : Sep 15 21:29:57 2024 GMT
        Subject: CN=BF2B3553BE334C653720330669777734A659C625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:97:37:4c:8d:d7:be:22:dc:3d:2c:45:a5:
                    1b:66:9e:0c:03:27:64:f2:4b:7c:03:e2:78:b0:ee:
                    e6:78:7c:21:e2:11:2a:6f:9b:2e:38:90:ca:cc:54:
                    3a:bd:ae:b5:25:c0:cb:26:88:8f:8d:80:75:47:b1:
                    69:f1:ca:08:4a:31:41:ef:70:d3:6a:bf:8d:a9:12:
                    a1:ea:07:4f:9f:85:5b:7c:b9:53:9d:9f:55:04:5e:
                    fc:b1:95:d0:7f:28:19:4b:a6:d9:f6:f2:d8:94:b5:
                    83:ec:5b:89:dd:fa:db:8e:f3:6b:52:6b:90:b8:6e:
                    31:d9:73:e3:61:cf:0c:d4:e4:bd:29:f1:89:c8:a9:
                    5c:b5:19:07:89:d3:1a:6d:14:ad:da:07:d0:8f:07:
                    28:4e:ad:2a:d4:a8:8c:e4:f1:0f:e6:c4:d2:ef:45:
                    7b:74:31:82:e3:88:75:0a:fd:f0:90:cc:02:84:b8:
                    e4:b8:6a:7c:51:ce:de:2f:cf:fe:57:0f:83:27:f1:
                    24:d1:9b:c8:e9:85:ca:f8:90:7f:f5:16:7f:e2:f3:
                    0d:e8:34:ba:f2:c1:04:8d:37:35:fa:3d:63:6c:40:
                    9f:f8:3c:f5:6f:81:de:1f:b0:ea:79:be:6f:43:58:
                    28:a3:e7:1c:94:07:34:a8:4f:97:14:df:44:8e:d5:
                    08:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2B:35:53:BE:33:4C:65:37:20:33:06:69:77:77:34:A6:59:C6:25
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS216304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3800::/40
                  2a07:54c4:175f::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:de:b6:61:2d:e4:ed:18:af:16:cf:46:9d:10:62:b9:d7:c4:
         65:66:31:0a:4a:5b:ca:f9:8d:fd:22:25:07:d2:07:fb:1a:2b:
         4a:35:92:c8:b0:e9:c8:7c:11:35:50:80:b0:b7:78:7b:78:d3:
         bb:1e:6b:6f:8e:f2:e7:93:d9:27:4f:ab:d0:0a:27:dc:7c:53:
         10:9c:fe:4e:af:8a:43:c7:ee:a2:8d:13:e5:39:40:c3:52:9e:
         c4:f5:1d:c7:d5:3d:ae:72:3f:3a:b4:4f:d5:19:90:cb:f2:db:
         3c:3c:b4:97:f7:31:93:b9:f5:cc:63:83:8b:b0:92:10:8b:6f:
         34:c5:9e:bb:6e:d9:64:1f:b9:39:ff:30:52:9c:2f:ad:dd:d2:
         d6:5f:70:27:59:1a:1b:7a:8b:ee:84:61:e9:83:67:70:03:8c:
         31:d3:fe:2b:91:ed:97:be:19:23:4f:c6:14:90:9b:b4:12:07:
         06:ed:06:c4:e3:d0:00:33:95:51:46:e0:a2:8b:a0:2d:98:3d:
         49:db:9a:98:ab:c0:c9:d2:7d:49:b9:18:4b:e5:62:50:26:c1:
         7c:95:33:d5:c0:6e:4f:ca:22:88:7a:71:4f:cd:0d:19:23:36:
         b1:3b:38:62:98:c4:9c:2e:ba:e5:59:e5:6b:ac:73:d0:fc:3e:
         3b:43:b9:68
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUdunv4DPdHaOnsrW3vMripAEh0SIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2OEFFNkM4
NzNGREZGRTAeFw0yMzA5MTcyMTI0NTdaFw0yNDA5MTUyMTI5NTdaMDMxMTAvBgNV
BAMTKEJGMkIzNTUzQkUzMzRDNjUzNzIwMzMwNjY5Nzc3NzM0QTY1OUM2MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6s5c3TI3XviLcPSxFpRtmngwD
J2TyS3wD4niw7uZ4fCHiESpvmy44kMrMVDq9rrUlwMsmiI+NgHVHsWnxyghKMUHv
cNNqv42pEqHqB0+fhVt8uVOdn1UEXvyxldB/KBlLptn28tiUtYPsW4nd+tuO82tS
a5C4bjHZc+NhzwzU5L0p8YnIqVy1GQeJ0xptFK3aB9CPByhOrSrUqIzk8Q/mxNLv
RXt0MYLjiHUK/fCQzAKEuOS4anxRzt4vz/5XD4Mn8STRm8jphcr4kH/1Fn/i8w3o
NLrywQSNNzX6PWNsQJ/4PPVvgd4fsOp5vm9DWCij5xyUBzSoT5cU30SO1QjRAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUvys1U74zTGU3IDMGaXd3NKZZxiUwHwYDVR0j
BBgwFoAU9sBpsUupesYUGDdJVmiubIc/3/4wDgYDVR0PAQH/BAQDAgeAMHUGA1Ud
HwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL05P
UlRITEFZRVJfVUlEXzEzODY0LzAvRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2
OEFFNkM4NzNGREZGRS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw
AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm
ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzIvRjZDMDY5QjE0QkE5N0FDNjE0MTgz
NzQ5NTY2OEFFNkM4NzNGREZGRS5jZXIwYAYIKwYBBQUHAQsEVDBSMFAGCCsGAQUF
BzALhkRyc3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9OT1JUSExBWUVS
X1VJRF8xMzg2NC8wL0FTMjE2MzA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKgdUwTgDBwAqB1TEF18w
DQYJKoZIhvcNAQELBQADggEBAAvetmEt5O0YrxbPRp0QYrnXxGVmMQpKW8r5jf0i
JQfSB/saK0o1ksiw6ch8ETVQgLC3eHt407sea2+O8ueT2SdPq9AKJ9x8UxCc/k6v
ikPH7qKNE+U5QMNSnsT1HcfVPa5yPzq0T9UZkMvy2zw8tJf3MZO59cxjg4uwkhCL
bzTFnrtu2WQfuTn/MFKcL63d0tZfcCdZGht6i+6EYemDZ3ADjDHT/iuR7Ze+GSNP
xhSQm7QSBwbtBsTj0AAzlVFG4KKLoC2YPUnbmpirwMnSfUm5GEvlYlAmwXyVM9XA
bk/KIoh6cU/NDRkjNrE7OGKYxJwuuuVZ5Wusc9D8PjtDuWg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org