Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS216339.roa
File:                     AS216339.roa (raw, json)
Hash identifier:          9QSa7hPH09SQOJzMQJ0lwvl71Nu5KdaoClQoT82SaCY=
Subject key identifier:   53:42:F9:C7:C3:09:3D:03:9C:F6:BD:4B:E4:61:03:DD:6E:0B:4A:47
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       0CF2D1C8AEB9B3C8E41AFA631E63362D035F876D
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS216339.roa
Signing time:             Sun 17 Sep 2023 19:31:27 +0000
ROA not before:           Sun 17 Sep 2023 19:26:27 +0000
ROA not after:            Sun 15 Sep 2024 19:31:27 +0000
asID:                     216339
IP address blocks:        2a07:54c1:3900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f2:d1:c8:ae:b9:b3:c8:e4:1a:fa:63:1e:63:36:2d:03:5f:87:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Sep 17 19:26:27 2023 GMT
            Not After : Sep 15 19:31:27 2024 GMT
        Subject: CN=5342F9C7C3093D039CF6BD4BE46103DD6E0B4A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:15:c1:76:d2:4b:12:8d:aa:79:d5:2e:25:02:
                    46:72:d2:20:e2:f1:53:d6:71:97:35:9d:9f:b9:ae:
                    c0:2e:f5:31:ed:af:0a:c5:1d:e0:9a:d2:c9:f6:73:
                    05:c2:bd:0d:a2:a2:99:ec:2b:76:e6:3f:54:4c:41:
                    39:8a:f0:51:2b:89:99:32:96:c6:c6:57:3f:bf:d8:
                    b1:db:da:05:3d:fc:38:cc:64:81:16:85:18:4c:70:
                    6d:ed:42:f5:6f:8e:4d:62:b5:f4:c3:9d:e3:6f:18:
                    29:8b:0b:4d:48:b9:1e:d5:45:70:6a:e4:64:dc:7b:
                    0f:3f:a0:e1:ec:8c:e8:94:73:bd:06:b3:19:74:6f:
                    c8:ed:1e:45:ba:71:62:d4:d5:12:ca:c1:e7:46:8a:
                    3d:36:23:76:df:09:f0:c5:0f:02:9c:9b:38:21:7d:
                    a4:c7:df:3e:19:be:0e:66:12:ca:ff:7e:dd:68:34:
                    a0:ad:c7:45:de:ba:5d:f1:ca:b8:25:b7:23:78:f3:
                    da:c2:72:10:7f:d4:49:32:7d:cb:7c:17:16:35:b4:
                    68:6f:1b:6b:1f:a8:53:b2:9b:e6:4f:01:21:15:e7:
                    37:9b:31:32:7e:ed:ff:90:75:77:78:fc:12:e8:44:
                    4d:a1:9b:a0:31:33:90:71:30:ff:e1:74:62:a8:3e:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:42:F9:C7:C3:09:3D:03:9C:F6:BD:4B:E4:61:03:DD:6E:0B:4A:47
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS216339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:3900::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:22:36:4e:18:05:8e:e6:3b:9b:71:72:25:cd:e5:4a:b3:c6:
         99:6f:26:93:3e:08:df:1f:15:35:ee:d2:cf:8a:40:14:e8:a1:
         bf:2c:21:f5:5e:a7:bd:c8:0e:d9:15:97:e8:96:ae:ae:27:e0:
         b7:bd:c6:6a:b3:aa:28:f5:f1:5b:e6:23:99:91:12:ef:4e:dd:
         52:78:4b:99:60:11:66:27:a7:51:74:68:0c:41:86:f0:53:97:
         1f:be:a1:e8:13:32:d1:e4:1b:d0:f7:14:bd:fb:02:8b:1c:8f:
         a3:b8:e4:a8:83:9a:b2:ed:ea:ee:e9:9b:8b:dc:22:af:50:09:
         dc:68:ec:a9:31:ad:d4:1a:9d:9e:3a:ad:b9:30:14:79:52:db:
         3d:3a:85:fb:5b:65:ca:be:17:86:57:6e:07:0e:b0:5f:02:64:
         09:7f:0e:e6:7c:96:9c:00:2c:08:2b:0e:73:ba:2f:b7:7c:fc:
         2d:2a:90:44:c3:1b:65:bb:4b:66:94:ad:d1:f5:37:76:ef:44:
         d4:33:5a:e6:1d:3e:eb:57:20:33:be:6b:52:91:21:78:fa:58:
         1e:5f:c8:f3:1b:49:07:14:d0:4f:09:b2:64:38:9d:91:4f:49:
         2f:e6:5a:eb:81:6c:58:4a:f5:2f:a4:07:b8:d3:af:11:04:70:
         b8:67:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org