Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS198954.roa
File:                     AS198954.roa (raw, json)
Hash identifier:          fTYfASHTCafs8qSPXpVhy6gbl4HLN18ZyP+3pygrvSk=
Subject key identifier:   E6:A1:15:CC:B1:EE:3B:71:C4:63:B7:FF:5A:02:BA:0C:70:25:2B:33
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       606BCC828CD8E762C8B60AC1071547BABA29A0CC
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS198954.roa
Signing time:             Sat 29 Jul 2023 06:11:18 +0000
ROA not before:           Sat 29 Jul 2023 06:06:18 +0000
ROA not after:            Sat 27 Jul 2024 06:11:18 +0000
asID:                     198954
IP address blocks:        2a12:dd47:700::/40 maxlen: 48
                          2a12:dd47:5e20::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6b:cc:82:8c:d8:e7:62:c8:b6:0a:c1:07:15:47:ba:ba:29:a0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Jul 29 06:06:18 2023 GMT
            Not After : Jul 27 06:11:18 2024 GMT
        Subject: CN=E6A115CCB1EE3B71C463B7FF5A02BA0C70252B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3a:3d:6c:2e:0a:7e:c3:63:6a:43:b5:7c:97:
                    8e:3e:4c:87:c6:8a:f8:c2:cd:40:a6:d7:c7:12:fb:
                    be:f0:ea:84:64:ac:cd:25:4f:22:77:fc:5c:05:9d:
                    db:44:a6:fe:8b:e6:e1:34:8d:32:8f:d5:79:66:6e:
                    7c:1a:92:1c:e1:3e:5a:38:bf:89:1b:a0:73:f3:89:
                    c0:d8:c4:41:96:e5:c3:9e:85:51:a1:19:76:8c:fa:
                    70:39:c1:f9:af:ea:ca:8d:d1:4f:0c:a7:bc:26:76:
                    62:4b:ea:51:9d:b5:6d:07:91:4f:75:bc:02:57:4b:
                    f3:6e:f4:76:11:a7:f1:c2:a4:16:64:48:a0:dd:be:
                    17:55:be:b6:50:6e:63:de:e2:9f:09:49:34:c3:3a:
                    15:aa:f8:e5:ca:02:90:bd:1f:8a:f9:26:1a:57:92:
                    a5:1e:49:d9:4e:cd:6c:5f:ec:44:17:0d:de:51:f4:
                    5e:0a:8d:10:0f:a9:51:a0:0b:58:00:61:a1:aa:91:
                    64:8f:b8:c5:b4:78:87:1b:89:cd:a3:7c:82:c6:94:
                    92:07:18:58:a3:e7:44:1c:c6:15:79:6c:a1:8a:43:
                    41:4e:a7:39:ec:0e:85:11:b3:09:d0:e9:6d:17:d7:
                    64:6a:9f:0c:3b:7c:48:13:a1:5b:98:7c:14:08:36:
                    84:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A1:15:CC:B1:EE:3B:71:C4:63:B7:FF:5A:02:BA:0C:70:25:2B:33
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS198954.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:700::/40
                  2a12:dd47:5e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         9b:50:1f:73:11:c0:d5:58:d9:b5:56:76:a1:48:87:86:70:87:
         fd:9d:02:84:ef:c2:2e:71:c1:1d:d0:d6:4a:af:66:80:b1:dc:
         d3:83:3a:6c:6a:0d:18:04:d8:18:38:f1:f3:7e:8e:6a:35:4f:
         0b:9f:7f:f0:62:b6:7a:1c:b4:2a:76:22:90:e0:36:e5:72:25:
         c5:39:78:71:46:fb:24:37:af:3a:e5:3e:07:14:e5:b3:0a:97:
         f0:99:c6:05:11:03:77:66:23:14:e9:11:b8:f2:26:16:98:f7:
         ee:fc:ce:ac:c8:17:9b:a9:1e:6f:20:f3:85:0d:e2:d6:5e:62:
         0b:dc:31:d5:32:f6:91:a2:ee:da:2a:67:7e:8a:ac:43:76:a4:
         37:0c:7a:af:b4:e9:82:3e:d1:19:f2:14:57:81:61:bd:0c:85:
         81:70:28:ee:ec:11:df:c7:ff:0b:fe:84:f3:72:0d:0d:e6:26:
         80:5c:d4:41:e5:49:1f:53:46:15:25:80:21:7e:0e:b9:a1:cb:
         5d:2a:34:b2:c9:a5:74:73:d0:f6:f6:1c:8e:ae:cd:e3:95:97:
         09:e7:20:d4:5f:38:b7:19:c1:24:04:f6:3c:a1:f6:d9:58:4a:
         8e:7e:03:93:2b:80:5a:8b:cc:be:9e:d5:85:57:3e:c1:e0:2c:
         46:41:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----