Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS924.roa
File:                     AS924.roa (raw, json)
Hash identifier:          1WqcpONNallENxIB/yux0ur5P3+hcqzdmHPuSXWKL40=
Subject key identifier:   71:E2:5F:37:B6:20:DF:BA:11:1B:23:31:2A:3C:94:B5:16:CA:83:C0
Certificate issuer:       /CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
Certificate serial:       7A51F5C292ED38631C35CAD67A90F2F32FAD8111
Authority key identifier: F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS924.roa
Signing time:             Thu 23 Feb 2023 18:37:34 +0000
ROA not before:           Thu 23 Feb 2023 18:32:34 +0000
ROA not after:            Thu 22 Feb 2024 18:37:34 +0000
asID:                     924
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:51:f5:c2:92:ed:38:63:1c:35:ca:d6:7a:90:f2:f3:2f:ad:81:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C069B14BA97AC6141837495668AE6C873FDFFE
        Validity
            Not Before: Feb 23 18:32:34 2023 GMT
            Not After : Feb 22 18:37:34 2024 GMT
        Subject: CN=71E25F37B620DFBA111B23312A3C94B516CA83C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:c7:92:64:24:a1:90:e4:58:83:08:2e:0d:
                    09:2f:8a:ea:dc:19:90:dd:48:03:90:32:5b:ae:72:
                    23:1c:8a:48:ed:c9:ff:b3:40:4e:b0:5f:ab:9d:14:
                    3d:59:70:a3:39:1e:43:06:f4:e4:31:cf:bd:6f:5b:
                    4d:77:7b:f4:44:cf:11:03:ee:0f:c9:a5:25:02:c4:
                    d7:c6:e7:9d:a6:5c:c3:2e:79:ff:e1:50:4e:a0:ac:
                    37:ca:6b:62:f8:7c:5c:65:ae:44:b9:da:11:ee:7d:
                    a1:7d:a7:5c:61:89:df:a2:0a:e6:6e:0e:39:44:a5:
                    a5:6e:1e:1e:9f:8c:41:27:f9:45:b2:4a:0e:69:ab:
                    ce:cf:cd:03:64:2d:09:fa:32:30:28:b3:44:04:15:
                    52:86:cd:f9:e7:15:d0:f0:db:43:42:5a:1a:68:ad:
                    43:21:c3:07:58:14:c7:7d:a2:e3:42:c1:77:5f:66:
                    3f:6a:d8:a0:1c:f2:3a:5e:9e:d5:60:13:0a:05:3c:
                    da:7e:b4:1a:67:03:cd:6b:ad:41:49:db:62:7b:7b:
                    9f:17:12:6f:c5:52:31:f4:cf:09:e1:ba:88:92:8a:
                    4b:f2:81:5c:7b:16:e2:61:5d:1c:da:19:00:86:91:
                    73:67:04:ea:90:b1:79:a8:ba:0b:73:af:a9:06:a8:
                    78:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E2:5F:37:B6:20:DF:BA:11:1B:23:31:2A:3C:94:B5:16:CA:83:C0
            X509v3 Authority Key Identifier:
                keyid:F6:C0:69:B1:4B:A9:7A:C6:14:18:37:49:56:68:AE:6C:87:3F:DF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F6C069B14BA97AC6141837495668AE6C873FDFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/F6C069B14BA97AC6141837495668AE6C873FDFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/AS924.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:0b:93:9c:dc:e1:4e:d8:0e:15:a7:a4:1d:23:c7:b7:31:1e:
         e6:0f:41:b3:06:5a:46:d5:07:a7:15:c6:26:7f:e2:85:0b:6c:
         eb:c6:ce:43:6e:e5:e1:c1:89:f2:0b:b9:4f:2b:0f:c4:4e:71:
         5a:b9:a5:49:ea:b3:b9:56:a5:91:59:97:54:9c:c4:f4:59:80:
         43:8f:57:35:5e:8c:d6:a6:b7:88:ac:53:88:42:92:97:fa:53:
         b1:bd:51:66:1a:cd:d9:bb:8e:76:6d:60:b3:16:7e:1c:82:37:
         ce:fe:8b:97:ce:0b:95:7e:58:af:90:40:80:01:0a:be:a2:a9:
         f5:94:c2:3a:d8:20:28:77:69:39:4b:4d:2d:29:6c:b5:1d:64:
         db:a5:fd:84:54:f2:9a:1a:af:06:81:bd:91:50:4d:53:a0:8d:
         e9:52:71:77:a2:d8:a0:f5:c2:cd:d5:b8:74:c2:a5:0d:ce:52:
         ef:f9:1f:c9:da:b8:fe:21:d9:73:1c:6a:74:d4:f9:96:e3:91:
         56:9f:91:dc:53:21:dd:88:0e:9d:ff:33:d4:a0:43:28:a3:fa:
         07:95:cc:2c:d9:43:5b:34:46:d9:78:23:b8:46:36:fb:5e:39:
         bf:43:6f:12:bc:d9:fe:6d:3b:a7:0c:5b:9c:db:29:09:04:9e:
         5e:c1:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org