Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS210810.roa
File:                     AS210810.roa (raw, json)
Hash identifier:          VCgIseKK3DbsVP8ugYe7ZqKxmYxYXI8bGczswRo4d3k=
Subject key identifier:   88:F5:0A:01:70:74:30:CB:1E:1B:B6:8D:F0:6C:F1:1B:D5:E5:86:E5
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       7EF4753C2E4F97088E7934935E059F965768FA90
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS210810.roa
Signing time:             Mon 10 Apr 2023 03:31:39 +0000
ROA not before:           Mon 10 Apr 2023 03:26:39 +0000
ROA not after:            Mon 08 Apr 2024 03:31:39 +0000
asID:                     210810
IP address blocks:        2a12:dd47:9330::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f4:75:3c:2e:4f:97:08:8e:79:34:93:5e:05:9f:96:57:68:fa:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Apr 10 03:26:39 2023 GMT
            Not After : Apr  8 03:31:39 2024 GMT
        Subject: CN=88F50A01707430CB1E1BB68DF06CF11BD5E586E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1a:53:38:6e:d4:fc:58:de:fe:35:06:2c:55:
                    b7:1b:a2:7b:b5:a9:05:6e:1c:c3:35:ac:d0:38:99:
                    86:1b:d5:5d:cf:59:27:94:79:be:cf:fa:cf:f8:c2:
                    49:89:0a:4c:5b:e9:6d:98:2f:db:cb:64:b8:e3:67:
                    b3:d6:ff:60:48:be:e4:6e:22:bb:71:21:88:7b:d5:
                    22:0b:a5:30:29:9c:8a:f2:a7:2c:4c:38:15:3c:1c:
                    d1:bc:f1:c7:ec:f0:d5:b2:8f:cf:b0:45:0f:54:87:
                    49:69:44:58:d1:18:40:44:aa:aa:fa:cd:bf:e5:83:
                    71:cf:26:3a:90:84:e4:ac:fd:4c:14:02:89:fd:09:
                    40:30:52:22:18:54:0d:30:0f:d8:8c:31:53:17:22:
                    ef:90:ff:97:ae:c8:75:f4:6f:e8:e8:ae:9c:a0:5a:
                    e8:2f:9d:0c:1b:20:14:41:44:59:8f:71:9e:c0:78:
                    26:05:de:55:f9:72:43:2e:44:20:aa:9e:32:41:b6:
                    3c:9c:c2:6c:07:b5:4a:ff:4f:60:dc:92:ff:8a:a6:
                    94:2c:a1:01:28:5d:06:7a:ca:c9:37:ec:bf:f2:65:
                    c2:5f:e2:bd:71:3f:64:74:9a:e5:0b:a8:e4:4e:08:
                    74:cd:92:5f:3d:f6:44:cf:25:30:dd:ce:a4:76:1a:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F5:0A:01:70:74:30:CB:1E:1B:B6:8D:F0:6C:F1:1B:D5:E5:86:E5
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS210810.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:9330::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:20:dc:15:39:14:d3:a4:c6:99:40:e6:fa:93:a9:bc:73:ed:
         43:15:bd:a6:6c:48:de:f7:21:13:e6:be:3c:93:11:22:5b:f4:
         aa:cd:15:98:7c:69:a7:9e:10:6e:1d:08:39:16:50:98:73:62:
         51:8d:b5:f5:0a:f9:90:5c:ce:df:22:1c:40:08:61:21:f3:fd:
         b3:0c:a4:00:ad:cb:60:6e:86:a6:ef:c1:7d:67:b8:82:9c:57:
         1c:97:08:b7:b8:ca:bd:5f:db:ea:ff:4b:de:cc:8e:50:21:19:
         22:90:1f:5a:f1:68:a9:cf:8c:52:ab:98:0f:8b:a3:b1:3e:25:
         87:e7:7a:e9:0a:b1:42:32:0b:94:10:29:f5:45:6a:98:f0:5c:
         76:64:17:0a:95:26:17:9d:aa:4b:ce:84:73:dc:ad:79:a8:82:
         ed:ee:79:38:c7:c8:7e:90:ca:c5:5a:48:15:4d:65:a7:c9:22:
         88:1e:7e:48:a9:84:66:5a:2a:e0:65:e0:36:b5:83:34:25:9d:
         39:b8:6a:06:47:65:ff:88:45:7e:fb:65:59:68:fa:47:ae:7b:
         7a:e0:35:b6:fe:d1:9c:8c:f7:43:6b:c7:1d:be:32:cc:f2:72:
         44:d9:c4:5a:2a:b7:de:9e:dd:5b:1d:c9:ae:44:fa:1d:34:28:
         9c:5f:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----