Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/2/323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa
File:                     323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (raw, json)
Hash identifier:          IdY8ZyY6PAB2mTtaiTNP/KpEFDNWTWhvUesDPUSzCIE=
Subject key identifier:   C3:E8:9C:2A:A2:29:A6:2D:C2:B4:BC:F0:18:10:D0:07:98:8A:8C:70
Certificate issuer:       /CN=ad34388886af12fecf7700cb60bd08609ce35d5a
Certificate serial:       1A30D06476FAD42B1EBB57FCF31426C5C4F9FE6F
Authority key identifier: AD:34:38:88:86:AF:12:FE:CF:77:00:CB:60:BD:08:60:9C:E3:5D:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTQ4iIavEv7PdwDLYL0IYJzjXVo.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/2/323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa
Signing time:             Fri 24 Feb 2023 18:19:03 +0000
ROA not before:           Fri 24 Feb 2023 18:14:03 +0000
ROA not after:            Fri 23 Feb 2024 18:19:03 +0000
asID:                     51019
IP address blocks:        2001:67c:bdc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:30:d0:64:76:fa:d4:2b:1e:bb:57:fc:f3:14:26:c5:c4:f9:fe:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad34388886af12fecf7700cb60bd08609ce35d5a
        Validity
            Not Before: Feb 24 18:14:03 2023 GMT
            Not After : Feb 23 18:19:03 2024 GMT
        Subject: CN=C3E89C2AA229A62DC2B4BCF01810D007988A8C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:4a:6e:8a:ea:0f:e9:26:d3:29:30:ec:84:
                    69:76:1c:9d:10:fa:7c:c3:b9:8c:4c:d3:5c:86:88:
                    f2:1f:67:7d:69:dc:f9:5a:66:5d:8e:1d:e2:57:cb:
                    70:94:55:11:c6:38:12:2d:97:54:2c:2d:85:d4:fb:
                    3a:7f:da:00:a0:9b:51:4e:7a:6d:f9:6c:d0:a7:08:
                    f6:55:1f:fe:78:53:d9:ba:4d:07:bc:c4:fd:e4:3d:
                    0e:86:8e:1d:13:32:4f:68:0e:13:d1:25:69:f7:61:
                    ef:39:84:e5:68:8b:e9:7e:05:35:64:0d:c4:fd:0c:
                    75:ed:27:7b:fe:d8:51:f0:14:b9:a4:a2:65:6a:e1:
                    37:72:7f:89:a9:fe:4d:85:1e:f3:4b:5e:82:4c:ac:
                    8d:8a:8b:a5:3b:6c:31:48:c3:0f:22:ab:dd:3e:bd:
                    31:ed:fd:a4:3e:d9:5e:d3:f9:bb:27:81:48:33:38:
                    d4:98:c5:c5:8e:89:01:05:3a:8d:70:8e:ab:65:3b:
                    45:4a:09:2d:c1:a2:0c:c1:16:0f:d5:06:c7:22:d2:
                    3d:fd:f8:9c:35:8c:15:f2:ce:72:4e:29:a9:d7:48:
                    7d:e9:ae:63:81:f9:b6:bb:95:e8:70:09:89:11:0f:
                    21:47:34:54:99:8b:dd:55:85:8c:c3:3b:9c:ad:aa:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E8:9C:2A:A2:29:A6:2D:C2:B4:BC:F0:18:10:D0:07:98:8A:8C:70
            X509v3 Authority Key Identifier:
                keyid:AD:34:38:88:86:AF:12:FE:CF:77:00:CB:60:BD:08:60:9C:E3:5D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/2/AD34388886AF12FECF7700CB60BD08609CE35D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTQ4iIavEv7PdwDLYL0IYJzjXVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/2/323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:bdc::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:09:b5:3d:46:df:66:56:f0:d2:12:b3:f3:66:2e:59:d7:26:
         c8:f9:d6:92:25:2b:50:68:f4:2c:15:1b:3c:f5:76:cb:6a:96:
         9c:cf:83:94:c7:e2:bd:5c:27:e4:4a:e1:bd:05:bd:47:4e:8d:
         af:74:f3:b8:8d:dd:bc:2d:33:b4:51:41:16:a6:5c:d5:2d:b5:
         2a:82:44:aa:64:d9:f0:e3:b0:d7:0a:4c:df:95:d2:81:72:eb:
         03:4f:dc:f5:f4:c0:2f:2d:0f:e4:b6:10:fd:ed:cb:3c:db:05:
         37:55:95:03:75:1c:e0:91:86:e8:3c:3b:ff:e7:0b:c2:64:8c:
         7d:2a:45:14:f8:cd:1d:48:be:a3:76:e5:55:f6:56:39:29:cd:
         83:d1:f9:00:11:f9:f3:75:b9:ae:88:6e:96:7c:0c:19:94:b9:
         ee:90:5e:a6:28:06:1f:8a:f9:39:5a:20:b6:cc:bf:14:16:00:
         5c:86:b7:94:55:58:6a:fc:60:34:f6:82:11:34:2c:45:28:15:
         25:b9:7c:06:90:b3:24:c9:62:ab:f5:ae:65:da:07:14:db:0f:
         da:a1:60:14:ac:99:4e:86:77:4a:ae:8f:ab:c9:db:fb:37:88:
         d1:f6:4a:89:fa:1a:38:18:72:ef:5d:5b:6d:b3:f1:b4:46:0c:
         e4:d7:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:52 2024 by rpki-client on console-ams.rpki-client.org