Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS199299.roa
File:                     AS199299.roa (raw, json)
Hash identifier:          PLwjlkZ8wNhsXyfVEP5lwaOkQPLUHVYNJbbAd7oBzNM=
Subject key identifier:   0D:5B:BD:C8:56:80:20:5C:B0:48:67:DF:E0:AF:31:6E:D9:EC:38:7F
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       34CD2B7AC77D6D98ED7DC5E2517FE7663EDE9A04
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS199299.roa
Signing time:             Sat 08 Apr 2023 09:22:09 +0000
ROA not before:           Sat 08 Apr 2023 09:17:09 +0000
ROA not after:            Sat 06 Apr 2024 09:22:09 +0000
asID:                     199299
IP address blocks:        2a12:dd47:f500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cd:2b:7a:c7:7d:6d:98:ed:7d:c5:e2:51:7f:e7:66:3e:de:9a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:09 2023 GMT
            Not After : Apr  6 09:22:09 2024 GMT
        Subject: CN=0D5BBDC85680205CB04867DFE0AF316ED9EC387F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:6d:ee:81:8f:04:82:a9:35:d4:54:92:63:
                    1e:9b:6f:db:1a:8a:3a:b0:94:5f:b9:44:ce:b0:2d:
                    3c:ff:78:4a:ed:18:18:7e:99:25:1d:7b:e8:9a:a5:
                    dd:3b:02:8e:b9:f9:c4:1a:da:ad:d3:dc:7b:73:81:
                    5c:67:f9:e6:2c:bb:17:38:49:63:22:c2:93:8d:8a:
                    4d:63:6b:46:24:66:44:3e:0c:f0:6c:c1:10:dc:fa:
                    42:35:10:7b:cb:4d:3f:58:fe:02:93:75:04:43:ef:
                    ac:e2:69:de:20:8f:42:e1:e9:ad:50:0c:7d:12:dc:
                    6b:d6:fc:15:e0:16:80:d3:2e:26:cb:a0:48:bf:59:
                    93:aa:4e:08:d4:a6:d3:14:51:7b:75:fa:ed:e5:f6:
                    ef:f8:a7:9f:3d:62:35:83:59:d6:69:e8:93:f5:9a:
                    b3:44:58:60:15:04:b0:fe:03:96:cc:80:7a:25:a9:
                    33:c2:7d:0d:64:c2:cc:8f:ec:b3:76:92:33:8c:e2:
                    d4:23:b0:6b:06:90:52:97:e6:ab:8b:37:2f:59:ba:
                    54:43:78:b7:35:21:db:c1:7b:7f:08:f4:64:34:69:
                    ad:b5:e4:f5:9a:a5:20:1a:1e:9f:fc:de:53:eb:22:
                    ce:8c:0e:2a:14:b8:98:7a:7b:e0:9e:f9:23:80:4d:
                    33:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5B:BD:C8:56:80:20:5C:B0:48:67:DF:E0:AF:31:6E:D9:EC:38:7F
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS199299.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f500::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:ca:d3:5d:c4:e6:11:71:ca:ae:b8:91:37:ad:b5:20:ed:
         08:e5:88:71:99:53:2e:63:4a:83:81:d5:e2:7e:96:9b:f3:d8:
         19:87:56:44:94:83:85:07:b7:f4:d3:58:a6:fc:39:95:b8:3d:
         72:62:f1:4d:42:03:e8:0d:0d:c9:91:6c:82:86:d0:7e:93:2c:
         c5:08:69:bb:48:ad:c6:ed:dc:c7:12:75:9a:1e:0c:53:d3:62:
         82:6e:89:79:43:83:e1:91:26:fa:04:46:33:7c:59:da:7a:a2:
         01:ad:f9:19:90:c7:8b:d9:9c:8e:b9:92:55:dc:bc:33:14:c5:
         2e:67:90:c4:5d:7b:35:c9:2c:98:d1:e4:ed:f4:fd:f7:78:16:
         78:a5:7a:f8:ff:ae:87:82:2c:64:3c:a3:f1:9e:df:61:1e:9e:
         ac:80:dc:7a:c3:56:b8:81:bf:f8:32:a1:df:2d:0c:4d:89:d3:
         ff:c3:04:9e:7c:57:5e:65:51:6b:54:f3:92:0a:d3:d5:6d:8c:
         7b:05:b1:86:68:06:cb:fa:f6:86:6e:19:34:53:50:9e:11:18:
         d8:d8:a2:17:07:bd:14:99:e6:92:6f:3c:18:60:26:43:e0:b6:
         65:4d:02:b2:24:7d:82:ee:e7:af:69:27:74:a7:92:b6:85:58:
         d4:4f:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----