DNSSEC error resolving gpo.gov ?

[Alexandra Yang]

Hi Group,


I wonder if anyone can shed some light on this, our nameserver(BIND 9.16.37
 )keeps giving error on resolving gpo.gov and ns3.gpo.gov, here are the
errors:


Mar 14 10:23:32 ipam-dns-in-1 named[3713]:   validating gpo.gov/SOA: got
insecure response; parent indicates it should be secure

Mar 14 10:23:32 ipam-dns-in-1 named[3713]: no valid RRSIG resolving '
ns3.gpo.gov/DS/IN': 162.140.254.200#53

Mar 14 10:23:32 ipam-dns-in-1 named[3713]: broken trust chain resolving '
ns3.gpo.gov/A/IN': 162.140.15.100#53


While I checked the DNSSEC of this domain I can't seem to find any problem
could cause above error, anyone else see issue with resolving gpo.gov ?


Thanks!!


Sandra
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230314/5354819a/attachment.htm>