Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430343a3a2f34382d3438203d3e20323136343732.roa
File:                     326131323a646434373a336430343a3a2f34382d3438203d3e20323136343732.roa (raw, json)
Hash identifier:          Qc5XOFDcz2FvN5L9EUcTGzaWxRWa+GPyWloAzWBINdI=
Subject key identifier:   E1:19:56:DA:8A:A4:58:85:BD:83:6D:94:55:57:8D:09:9B:DF:83:1B
Certificate issuer:       /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial:       6C0D2DAF0A37E4F9D909078F5716C04E24DA054B
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access:      rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430343a3a2f34382d3438203d3e20323136343732.roa
Signing time:             Mon 05 Aug 2024 03:21:37 +0000
ROA not before:           Mon 05 Aug 2024 03:16:37 +0000
ROA not after:            Mon 04 Aug 2025 03:21:37 +0000
asID:                     216472
IP address blocks:        2a12:dd47:3d04::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0d:2d:af:0a:37:e4:f9:d9:09:07:8f:57:16:c0:4e:24:da:05:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Validity
            Not Before: Aug  5 03:16:37 2024 GMT
            Not After : Aug  4 03:21:37 2025 GMT
        Subject: CN=E11956DA8AA45885BD836D9455578D099BDF831B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cf:16:bc:3f:65:9a:48:b3:6b:91:eb:7b:a7:
                    57:f4:65:aa:34:27:7c:2a:65:f4:74:66:9d:ef:e3:
                    97:32:43:6e:52:a9:a9:05:39:17:e4:47:29:8a:98:
                    28:58:f5:b5:10:ec:2b:b8:96:a9:aa:cc:7e:a5:46:
                    52:15:6a:b0:36:ae:15:5c:a7:30:b2:a7:c9:5c:7a:
                    f3:9e:b0:b8:95:68:c9:da:61:16:e2:98:c2:83:9f:
                    0a:c3:54:ed:2e:ce:a0:32:c6:0e:82:ac:70:52:29:
                    d9:e6:93:1b:e7:d6:e6:ff:35:4f:7c:f9:3b:72:d1:
                    62:13:38:92:7d:92:cd:79:83:79:50:67:61:f0:28:
                    fb:ee:dd:56:41:08:77:36:b9:73:c4:e9:c1:33:f1:
                    9b:df:31:04:b6:88:68:32:64:54:01:e0:0f:d4:b7:
                    12:49:c4:5e:cb:ee:83:f4:03:e1:c0:59:59:bb:0d:
                    86:b0:96:d4:06:1c:82:3f:bb:7d:dd:ca:6c:e1:d7:
                    65:1c:3e:3a:0c:14:fa:e6:6a:d0:76:08:a5:4b:c3:
                    e3:ad:9b:46:4e:9c:e6:8d:1d:45:dc:f2:30:24:29:
                    0e:52:de:02:95:be:b1:49:b1:c2:37:28:0f:3b:2d:
                    99:7b:e0:06:80:48:0e:24:80:29:24:c4:e1:c2:c2:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:19:56:DA:8A:A4:58:85:BD:83:6D:94:55:57:8D:09:9B:DF:83:1B
            X509v3 Authority Key Identifier:
                keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430343a3a2f34382d3438203d3e20323136343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3d04::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:1e:09:58:71:0b:6d:4f:a8:89:62:55:69:37:8f:c6:61:b7:
         78:33:f2:f0:e9:b6:21:32:2d:0d:13:c5:3b:1b:34:62:7e:f9:
         ff:dc:fe:5b:0d:c2:f5:26:57:63:3e:2f:3e:e8:0a:7e:b8:55:
         ef:2e:dd:6d:ba:54:1b:a9:36:80:b1:ab:87:58:1b:77:94:33:
         3a:3e:61:de:06:ee:44:80:61:d6:97:bf:86:c2:09:dc:ce:d7:
         9e:12:48:7a:bb:b5:c6:12:29:d4:fc:79:b6:ab:38:82:c0:d9:
         c6:9f:c8:d5:c2:e7:e5:fc:88:2d:a5:1d:39:37:84:eb:2d:d0:
         0f:d0:cb:23:45:30:85:a7:22:0b:7b:b4:fd:f3:01:5a:5d:8b:
         82:38:2e:72:59:b4:5d:ed:4d:c5:dd:b6:54:6d:2c:79:a4:31:
         02:ab:85:28:c8:73:4a:14:53:1b:07:06:a5:58:6e:d6:02:23:
         c8:dc:45:b0:f9:0e:bb:0a:1b:04:83:05:87:e2:91:c5:26:22:
         f0:38:a0:02:67:b8:75:63:4a:07:7e:57:58:be:9f:97:00:0b:
         e9:52:d4:19:28:09:a5:b3:e9:a7:ff:34:85:9b:54:fe:73:ee:
         be:97:da:f7:c3:cc:17:66:51:e9:cc:cd:ac:73:02:d4:f5:f0:
         fd:73:87:8f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUbA0trwo35PnZCQePVxbATiTaBUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVBNzMwQ0E4MzUxMzY5RkMzODI4RDBEQzI5Nzg1NkFF
NzRFOEMxMTAeFw0yNDA4MDUwMzE2MzdaFw0yNTA4MDQwMzIxMzdaMDMxMTAvBgNV
BAMTKEUxMTk1NkRBOEFBNDU4ODVCRDgzNkQ5NDU1NTc4RDA5OUJERjgzMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWzxa8P2WaSLNrket7p1f0Zao0
J3wqZfR0Zp3v45cyQ25SqakFORfkRymKmChY9bUQ7Cu4lqmqzH6lRlIVarA2rhVc
pzCyp8lcevOesLiVaMnaYRbimMKDnwrDVO0uzqAyxg6CrHBSKdnmkxvn1ub/NU98
+Tty0WITOJJ9ks15g3lQZ2HwKPvu3VZBCHc2uXPE6cEz8ZvfMQS2iGgyZFQB4A/U
txJJxF7L7oP0A+HAWVm7DYawltQGHII/u33dymzh12UcPjoMFPrmatB2CKVLw+Ot
m0ZOnOaNHUXc8jAkKQ5S3gKVvrFJscI3KA87LZl74AaASA4kgCkkxOHCwvWVAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU4RlW2oqkWIW9g22UVVeNCZvfgxswHwYDVR0j
BBgwFoAUBacwyoNRNp/Dgo0NwpeFaudOjBEwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjExNjA0LzEvMDVB
NzMwQ0E4MzUxMzY5RkMzODI4RDBEQzI5Nzg1NkFFNzRFOEMxMS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMzNkYmRlY2M0ZmE0
LzEvMDVBNzMwQ0E4MzUxMzY5RkMzODI4RDBEQzI5Nzg1NkFFNzRFOEMxMS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMTE2MDQvMS8zMjYxMzEzMjNhNjQ2NDM0MzczYTMzNjQzMDM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzIzMTM2MzQzNzMyLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhLdRz0E
MA0GCSqGSIb3DQEBCwUAA4IBAQC/HglYcQttT6iJYlVpN4/GYbd4M/Lw6bYhMi0N
E8U7GzRifvn/3P5bDcL1JldjPi8+6Ap+uFXvLt1tulQbqTaAsauHWBt3lDM6PmHe
Bu5EgGHWl7+GwgnczteeEkh6u7XGEinU/Hm2qziCwNnGn8jVwufl/IgtpR05N4Tr
LdAP0MsjRTCFpyILe7T98wFaXYuCOC5yWbRd7U3F3bZUbSx5pDECq4UoyHNKFFMb
BwalWG7WAiPI3EWw+Q67ChsEgwWH4pHFJiLwOKACZ7h1Y0oHfldYvp+XAAvpUtQZ
KAmls+mn/zSFm1T+c+6+l9r3w8wXZlHpzM2scwLU9fD9c4eP
-----END CERTIFICATE-----