Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS48581.roa
File:                     AS48581.roa (raw, json)
Hash identifier:          c9W4FhB3acNnd5F3yH8a3SNQP1BJo6BlSzHqaZ0EqOg=
Subject key identifier:   87:F2:95:90:79:1D:FD:EE:9B:32:78:03:CB:B4:04:0A:B3:04:3C:4A
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       440F1BD456185DC06D9FD0B401515E8F8E7ECE97
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS48581.roa
Signing time:             Thu 15 Jun 2023 00:44:23 +0000
ROA not before:           Thu 15 Jun 2023 00:39:23 +0000
ROA not after:            Thu 13 Jun 2024 00:44:23 +0000
asID:                     48581
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0f:1b:d4:56:18:5d:c0:6d:9f:d0:b4:01:51:5e:8f:8e:7e:ce:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Jun 15 00:39:23 2023 GMT
            Not After : Jun 13 00:44:23 2024 GMT
        Subject: CN=87F29590791DFDEE9B327803CBB4040AB3043C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:1a:03:9d:43:89:d8:ac:5a:d8:95:28:8a:
                    11:a6:78:b7:75:c2:e6:5d:c4:a5:67:70:85:08:50:
                    58:4b:2e:94:8f:6b:11:69:4f:e2:6a:db:77:8b:aa:
                    5c:80:66:70:ea:00:b9:35:58:d4:32:f0:5b:0d:64:
                    fd:17:8d:a3:c1:75:f5:62:6b:74:cc:aa:c0:64:e0:
                    d3:2b:c3:b3:cc:67:6c:5c:8a:6f:84:07:e2:d4:74:
                    fd:5c:46:99:0b:4f:23:78:36:64:a4:bb:04:85:25:
                    de:23:2b:2e:33:a6:74:68:e2:fc:fd:3e:24:26:1c:
                    c7:b6:be:94:2f:b4:68:1a:88:85:1c:95:91:bd:03:
                    97:ac:44:1a:49:bf:a9:62:d3:f3:d4:11:27:c5:10:
                    4a:be:07:91:0b:03:f4:fa:79:b0:f2:17:be:e3:55:
                    80:06:0c:80:7a:ec:23:aa:fd:63:80:08:b5:93:12:
                    29:70:1c:df:05:78:3e:98:b9:05:df:cd:2a:f8:ca:
                    78:d6:91:27:ec:3d:08:5b:b7:58:fd:97:ca:d6:1d:
                    39:36:25:9a:9f:11:cc:2f:83:9b:5f:0d:57:f8:60:
                    44:2d:63:30:70:74:93:68:eb:a0:10:4d:ce:60:a9:
                    4a:a6:07:c2:87:20:ef:64:b9:e1:0a:82:d9:fa:7e:
                    aa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F2:95:90:79:1D:FD:EE:9B:32:78:03:CB:B4:04:0A:B3:04:3C:4A
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS48581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:d9:38:c0:0d:40:85:e3:1f:20:87:8f:40:58:1f:9c:7c:6a:
         68:3b:4d:40:eb:8b:3a:7e:f6:61:0e:65:53:df:e3:a5:34:68:
         dc:23:6d:16:83:d9:7e:cc:57:7d:92:cb:d4:49:7b:64:c6:d7:
         18:14:e1:9c:4a:c8:b5:bf:c1:54:37:dc:7a:45:9a:7d:4a:d4:
         b8:bd:df:74:b4:34:30:79:ba:73:64:72:f1:42:9b:57:14:70:
         4f:3e:b2:bd:6c:f2:f2:b9:08:db:f2:68:10:07:ac:b7:c6:99:
         64:5e:72:3c:25:00:66:87:4d:2b:24:e7:df:65:70:00:b2:f5:
         f1:8a:9c:7c:99:bf:4e:55:0e:f4:29:6c:e0:58:47:39:d6:1f:
         c6:11:27:e2:fe:e8:65:f2:fe:bb:bd:a5:d0:ef:9a:49:0c:b6:
         a7:77:64:d1:56:9d:9c:fd:d3:04:f5:ba:01:96:7b:b8:15:35:
         93:30:75:9d:c7:a0:9f:9f:c1:7f:83:62:13:c4:a7:98:6d:83:
         ff:c7:a7:40:1b:a8:7b:c1:08:a7:86:ae:d5:96:7a:57:3f:19:
         b6:8b:a4:6d:9f:26:c2:63:4f:50:9d:d2:23:8b:3f:8f:15:9d:
         ea:5a:d0:94:67:5f:05:cc:fd:06:d1:cd:78:7c:e9:9c:05:17:
         b5:5b:55:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----