Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS54681.roa
File:                     AS54681.roa (raw, json)
Hash identifier:          qmj8YSx5IAQs575gwXl8o8P65dW21J0FZfBwpYkLu8Q=
Subject key identifier:   FC:18:A6:26:43:49:DE:9C:05:7C:17:85:AE:33:B8:1E:AF:CA:C9:3F
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       14A528FD68FFF5EF147EBE6F83D99733D2FEA9C9
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS54681.roa
Signing time:             Tue 08 Aug 2023 21:19:01 +0000
ROA not before:           Tue 08 Aug 2023 21:14:01 +0000
ROA not after:            Tue 06 Aug 2024 21:19:01 +0000
asID:                     54681
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a07:54c4:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a5:28:fd:68:ff:f5:ef:14:7e:be:6f:83:d9:97:33:d2:fe:a9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Aug  8 21:14:01 2023 GMT
            Not After : Aug  6 21:19:01 2024 GMT
        Subject: CN=FC18A6264349DE9C057C1785AE33B81EAFCAC93F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:68:de:3f:ad:2d:d0:47:b3:33:05:c0:25:1a:
                    68:72:25:72:3f:14:f6:63:46:ea:fb:8c:35:87:d2:
                    f2:4c:19:f4:08:18:2f:67:d7:4a:3b:61:63:d0:8f:
                    51:c4:a8:4e:fe:85:06:c7:02:d9:d3:07:5b:db:ad:
                    7b:be:b2:bf:d5:dd:dd:52:b0:3e:c0:79:e2:6f:cc:
                    d7:0b:1e:45:1b:18:57:ea:a9:e2:d5:8c:f6:e0:dd:
                    9e:86:6f:d9:f0:b1:fd:fc:9f:a2:e8:20:9a:25:6b:
                    f8:80:fa:99:5d:bb:a2:50:9a:09:2b:84:0e:b1:e2:
                    72:f3:f5:85:1c:71:da:61:a2:27:0b:54:7a:b0:91:
                    f8:83:f2:d2:9b:cb:f2:20:b0:c9:d5:50:4d:e2:9f:
                    cb:6b:25:16:e2:07:07:62:e0:5b:e5:69:c0:17:4f:
                    28:3d:60:18:b5:53:cd:f7:a7:e2:95:00:cc:08:22:
                    7f:06:6c:16:4c:b9:18:5e:a4:2a:39:bc:a8:c8:ee:
                    f8:ad:43:0c:49:a7:6f:ad:a0:71:49:51:5b:81:65:
                    e8:48:95:93:a3:90:70:92:59:54:e7:cd:75:6b:61:
                    bf:33:9a:13:74:4d:61:ab:38:b4:61:c6:16:0c:6f:
                    e6:2f:8c:67:24:bf:92:cf:b1:5f:78:1b:1f:9b:19:
                    e8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:18:A6:26:43:49:DE:9C:05:7C:17:85:AE:33:B8:1E:AF:CA:C9:3F
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS54681.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48
                  2a07:54c4:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a8:8d:b3:fd:af:87:43:d8:4d:da:ef:95:1d:89:80:08:b3:c0:
         d0:09:cd:4e:0e:c4:78:f2:ab:4d:21:03:f3:90:c5:68:de:26:
         ee:7b:fc:5d:ea:5e:8d:1e:98:cb:f5:dd:e4:ee:d1:a3:e3:6b:
         8d:67:33:c8:ed:ca:3a:d9:1f:fb:a5:8e:a8:7f:cf:6b:e2:ee:
         fd:80:7f:c1:9e:38:a7:6a:ac:a1:e3:a1:77:4a:d2:30:aa:02:
         0b:bf:08:64:d5:79:22:79:42:e7:f2:cd:d6:4f:48:f4:d8:82:
         f1:73:d1:f5:45:cb:2e:de:cf:1e:76:e4:30:4d:a8:ee:59:a7:
         04:81:ad:fc:bc:6e:b0:7d:b3:39:60:53:a6:19:fc:c1:4c:a5:
         a2:61:25:33:2d:c1:2a:8b:c7:77:62:63:f9:96:8d:7c:8a:fa:
         8d:0e:5f:2d:64:95:f4:87:3e:a2:bd:bf:b5:54:3c:c9:5b:df:
         a8:52:57:d1:17:eb:c2:7b:d1:1a:8d:0b:6f:c7:e4:68:70:05:
         94:04:e2:7f:3d:90:23:a4:e4:cc:05:5c:9e:c2:83:b8:60:a5:
         25:0f:05:f4:22:4c:c0:d0:8e:a2:13:5f:f2:33:ce:52:ea:4d:
         f4:fa:31:97:12:e4:e3:0d:01:34:95:ea:4c:3e:d7:9e:67:e0:
         48:34:b3:ee
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUFKUo/Wj/9e8Ufr5vg9mXM9L+qckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2OEFFNkM4
NzNGREZGRTAeFw0yMzA4MDgyMTE0MDFaFw0yNDA4MDYyMTE5MDFaMDMxMTAvBgNV
BAMTKEZDMThBNjI2NDM0OURFOUMwNTdDMTc4NUFFMzNCODFFQUZDQUM5M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcaN4/rS3QR7MzBcAlGmhyJXI/
FPZjRur7jDWH0vJMGfQIGC9n10o7YWPQj1HEqE7+hQbHAtnTB1vbrXu+sr/V3d1S
sD7AeeJvzNcLHkUbGFfqqeLVjPbg3Z6Gb9nwsf38n6LoIJola/iA+pldu6JQmgkr
hA6x4nLz9YUccdphoicLVHqwkfiD8tKby/IgsMnVUE3in8trJRbiBwdi4FvlacAX
Tyg9YBi1U833p+KVAMwIIn8GbBZMuRhepCo5vKjI7vitQwxJp2+toHFJUVuBZehI
lZOjkHCSWVTnzXVrYb8zmhN0TWGrOLRhxhYMb+YvjGckv5LPsV94Gx+bGegJAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQU/BimJkNJ3pwFfBeFrjO4Hq/KyT8wHwYDVR0j
BBgwFoAU9sBpsUupesYUGDdJVmiubIc/3/4wDgYDVR0PAQH/BAQDAgeAMHUGA1Ud
HwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL05P
UlRITEFZRVJfVUlEXzEzODY0LzAvRjZDMDY5QjE0QkE5N0FDNjE0MTgzNzQ5NTY2
OEFFNkM4NzNGREZGRS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcw
AoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRm
ODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzIvRjZDMDY5QjE0QkE5N0FDNjE0MTgz
NzQ5NTY2OEFFNkM4NzNGREZGRS5jZXIwXwYIKwYBBQUHAQsEUzBRME8GCCsGAQUF
BzALhkNyc3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9OT1JUSExBWUVS
X1VJRF8xMzg2NC8wL0FTNTQ2ODEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwKgYIKwYBBQUHAQcBAf8EGzAZMBcEAgACMBEDBwAqB1TCsAsDBgQqB1TE8DAN
BgkqhkiG9w0BAQsFAAOCAQEAqI2z/a+HQ9hN2u+VHYmACLPA0AnNTg7EePKrTSED
85DFaN4m7nv8XepejR6Yy/Xd5O7Ro+NrjWczyO3KOtkf+6WOqH/Pa+Lu/YB/wZ44
p2qsoeOhd0rSMKoCC78IZNV5InlC5/LN1k9I9NiC8XPR9UXLLt7PHnbkME2o7lmn
BIGt/LxusH2zOWBTphn8wUylomElMy3BKovHd2Jj+ZaNfIr6jQ5fLWSV9Ic+or2/
tVQ8yVvfqFJX0RfrwnvRGo0Lb8fkaHAFlATifz2QI6TkzAVcnsKDuGClJQ8F9CJM
wNCOohNf8jPOUupN9PoxlxLk4w0BNJXqTD7XnmfgSDSz7g==
-----END CERTIFICATE-----
Generated at Tue Sep 19 02:34:33 2023 by rpki-client on console-fra.rpki-client.org