Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS50224.roa
File:                     AS50224.roa (raw, json)
Hash identifier:          Kk7WymdRRtwIx4pKHSQNzcN4nTKnK3qTYaB6jUGJfd8=
Subject key identifier:   94:F9:D0:36:9D:CA:18:F9:E6:A5:12:6A:5C:C5:FD:43:74:24:2C:64
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       343B3DE76A057E3F69675598D06EACE4FF118CD6
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS50224.roa
Signing time:             Tue 25 Jul 2023 13:30:51 +0000
ROA not before:           Tue 25 Jul 2023 13:25:51 +0000
ROA not after:            Tue 23 Jul 2024 13:30:51 +0000
asID:                     50224
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3b:3d:e7:6a:05:7e:3f:69:67:55:98:d0:6e:ac:e4:ff:11:8c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Jul 25 13:25:51 2023 GMT
            Not After : Jul 23 13:30:51 2024 GMT
        Subject: CN=94F9D0369DCA18F9E6A5126A5CC5FD4374242C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:e9:84:46:d7:4d:88:f7:d5:30:10:b0:c2:
                    25:d0:a1:88:8d:25:78:35:d1:25:4f:8f:1a:b3:cd:
                    f5:3c:b1:e6:a8:98:b9:d5:f8:46:2a:0b:21:8a:76:
                    b2:4b:78:42:c4:23:b6:13:7f:bd:d4:fe:e3:7f:83:
                    cd:90:81:ed:02:f1:10:59:98:69:c7:94:19:96:c1:
                    1d:70:43:5d:25:e2:43:ed:1d:0b:a2:0e:98:4b:f9:
                    50:ae:e3:b2:41:d3:a1:d4:ec:70:0b:8a:dd:d5:41:
                    4d:9e:1c:ac:45:60:5c:85:64:f0:3f:86:4e:99:ce:
                    b6:d4:0d:06:45:aa:1d:9f:d6:0f:37:f4:92:f2:fb:
                    8d:80:55:1e:20:f4:79:43:04:23:db:7d:b9:4f:93:
                    98:06:4a:9a:b0:ae:dd:af:43:61:c2:bb:8e:48:eb:
                    dc:98:72:28:57:23:04:33:52:06:b1:a2:b8:11:9a:
                    17:61:4b:e8:ec:5b:bd:46:b9:12:c9:55:c5:35:18:
                    fe:95:e0:aa:40:9f:b4:e2:d9:75:8a:e7:c8:50:df:
                    9e:cf:ac:d4:75:54:ef:02:86:f8:75:d8:4b:07:83:
                    76:48:57:1e:f5:c9:a9:07:de:37:87:5c:dd:1c:05:
                    17:55:3c:8e:f3:cc:20:8b:16:a5:63:da:41:94:91:
                    ca:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F9:D0:36:9D:CA:18:F9:E6:A5:12:6A:5C:C5:FD:43:74:24:2C:64
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS50224.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:15:2f:08:5b:de:72:b1:7c:85:18:18:a6:0d:4f:f8:4b:a6:
         cd:86:bc:bc:f7:24:02:bf:9c:bf:21:b7:8c:25:a0:15:5b:f5:
         d6:5e:69:82:3a:31:b8:0e:fd:54:be:b9:31:91:a9:02:fd:43:
         00:ea:37:2b:6c:e1:03:88:87:30:9e:3e:5a:25:f0:dc:aa:3f:
         f3:64:20:2d:c1:a8:4e:d2:2e:b5:4d:ea:38:3a:52:5d:72:1e:
         3c:ef:fa:89:3b:ed:ab:c2:2b:8c:38:98:f1:db:57:b7:6b:de:
         5d:49:8b:ab:02:0f:d7:2e:96:49:13:3b:98:27:f3:4d:b3:61:
         47:b2:9f:4d:61:d9:7b:c1:cd:30:59:97:fb:2b:9f:76:d5:9f:
         8e:9b:60:4f:cf:3c:cc:f2:a3:d8:8e:b9:ba:d8:4b:f5:61:72:
         dd:42:01:f7:02:aa:1c:9a:40:85:9a:09:43:45:30:8d:1f:fa:
         f0:7e:5d:6e:b2:67:58:b9:96:65:d8:d6:06:68:16:c0:27:45:
         a4:8f:04:34:12:a0:7a:e0:61:83:73:f6:91:fa:67:e1:7b:b6:
         32:13:f4:7f:d8:a8:9b:3b:fd:01:51:eb:4b:0e:1c:30:59:ab:
         ba:a7:2d:b8:ca:5c:09:cf:da:79:f8:89:d2:be:1a:8c:31:51:
         4c:ca:36:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 02:55:06 2023 by rpki-client on console-ams.rpki-client.org