Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS60900.roa
File:                     AS60900.roa (raw, json)
Hash identifier:          EF5yyuIXamfWUkOCS7QSO3VfdjfQ2n9F3VwLOqG3vpo=
Subject key identifier:   3A:02:5C:06:EA:84:31:35:13:62:FA:1E:8A:7C:7A:6F:85:4A:A2:4E
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       29AC7ACE9AF452925640710DA141C7FD34F1A132
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS60900.roa
Signing time:             Sun 04 Jun 2023 00:03:52 +0000
ROA not before:           Sat 03 Jun 2023 23:58:52 +0000
ROA not after:            Sun 02 Jun 2024 00:03:52 +0000
asID:                     60900
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ac:7a:ce:9a:f4:52:92:56:40:71:0d:a1:41:c7:fd:34:f1:a1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Jun  3 23:58:52 2023 GMT
            Not After : Jun  2 00:03:52 2024 GMT
        Subject: CN=3A025C06EA8431351362FA1E8A7C7A6F854AA24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:02:4b:0c:7d:9e:9f:66:91:ec:59:d2:76:
                    65:42:8e:d3:ac:de:84:34:83:a0:67:33:cb:fc:4c:
                    96:d1:f6:a2:62:69:80:7d:86:02:b8:b3:91:fd:e5:
                    aa:ec:e1:bd:02:ac:a3:e7:53:1d:ff:e7:c2:61:3f:
                    b3:55:b7:14:fc:b4:4a:ab:23:f8:0d:8a:d3:cf:04:
                    c7:8d:c2:57:ed:29:1d:66:cf:df:0a:99:db:4c:3a:
                    58:78:24:f1:f4:2b:3a:05:78:04:3b:ed:0a:1e:15:
                    fd:f3:d5:15:fa:d4:0b:9d:87:29:e0:6d:d6:f3:b1:
                    47:0d:63:3d:cf:d0:ab:15:08:ca:8b:86:78:4f:d8:
                    28:0e:46:8e:37:69:86:04:ee:a3:d7:92:de:fb:6a:
                    b0:a6:68:2c:34:26:4a:2e:54:41:92:48:00:2f:1c:
                    b4:01:48:4e:c2:28:1a:1a:ac:eb:6e:32:73:cd:e2:
                    30:e6:d1:b7:78:1f:e6:4f:c0:b6:55:96:b7:ec:9d:
                    31:bd:60:9a:ee:d1:f7:40:65:67:89:99:f9:78:10:
                    67:49:79:c4:7e:b3:cb:b6:2a:fb:d8:68:28:22:14:
                    5d:f3:b2:70:0a:35:52:75:83:90:3d:db:5a:66:89:
                    79:1a:32:c5:4c:bb:1a:43:7f:c0:76:db:ad:0a:5f:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:02:5C:06:EA:84:31:35:13:62:FA:1E:8A:7C:7A:6F:85:4A:A2:4E
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS60900.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:ff:15:0b:df:72:a6:23:9c:15:a7:3f:68:a9:95:1c:1f:5e:
         11:26:e6:74:5f:28:99:70:6a:51:67:55:0c:31:0e:78:6b:44:
         0d:0f:77:43:65:4d:b3:db:b5:5b:2e:36:46:0b:36:1c:8a:6d:
         d8:e0:ed:14:c2:15:6b:dd:8d:71:40:90:c2:98:d7:04:9f:74:
         c2:e1:42:7e:66:ef:09:45:67:20:7b:3f:69:1a:d9:2f:94:15:
         3f:91:8a:92:d7:55:5b:d2:39:71:61:96:93:7f:fe:cc:c2:cf:
         0e:5c:aa:ab:c8:ff:41:80:1e:54:8e:6c:61:04:9f:e6:31:ca:
         4b:12:2a:ea:4f:8b:65:03:ea:e2:c2:63:b5:7d:0e:03:d0:79:
         cf:e8:1e:96:42:e4:69:7b:cd:4e:48:0f:4f:63:bf:a4:4e:99:
         9c:32:62:d7:fd:55:f4:68:47:3d:e8:90:0d:9b:0b:6c:d2:af:
         d1:df:62:bf:cf:b1:f0:34:9d:1e:4f:9d:e4:19:a3:5c:83:f9:
         ef:7d:19:11:0d:a0:6a:13:46:eb:65:00:6f:19:da:33:3a:de:
         52:2d:f3:70:c1:2a:e1:8b:7d:49:70:f2:a2:40:b8:1f:89:13:
         14:f5:34:21:1e:18:8f:99:73:ee:a5:14:ac:5f:d0:08:d1:64:
         23:04:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org