Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS199681.roa
File:                     AS199681.roa (raw, json)
Hash identifier:          Vp7q1rYEFBCj7akDVWP67OE4IaHzzRbnSkoRN3PtEv4=
Subject key identifier:   B7:85:B1:A9:6D:9A:3D:46:0C:B2:9B:08:68:3E:2C:20:AF:76:60:5B
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       7CB0E645BD4450B56B89A0D2FBD061E39C89AA87
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS199681.roa
Signing time:             Sat 08 Apr 2023 09:22:19 +0000
ROA not before:           Sat 08 Apr 2023 09:17:19 +0000
ROA not after:            Sat 06 Apr 2024 09:22:19 +0000
asID:                     199681
IP address blocks:        2a12:dd47:f300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b0:e6:45:bd:44:50:b5:6b:89:a0:d2:fb:d0:61:e3:9c:89:aa:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:19 2023 GMT
            Not After : Apr  6 09:22:19 2024 GMT
        Subject: CN=B785B1A96D9A3D460CB29B08683E2C20AF76605B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:24:64:d6:65:24:0b:c6:f0:6b:2a:86:0c:
                    ed:5c:76:93:50:dd:11:87:6a:94:b1:16:9a:9b:03:
                    4b:a4:f7:df:76:3e:74:a1:36:45:5b:36:10:84:01:
                    cf:26:ad:59:6e:18:32:f9:4c:55:1c:5d:b4:5b:31:
                    99:45:21:1a:d5:a3:a2:54:33:a1:85:97:8d:b3:53:
                    53:1b:29:c8:29:b0:8c:00:2a:64:ae:40:1c:74:04:
                    ca:f6:f7:a0:cc:8f:4b:e2:9f:5d:ed:7d:1c:bb:0b:
                    7f:dd:b1:c2:11:46:6d:6e:60:5c:c3:bc:ed:a5:bc:
                    8c:b5:6c:2f:a4:b1:f8:00:90:20:e8:04:0e:07:f3:
                    a3:f4:6c:23:22:b9:2f:97:24:ea:19:51:ff:67:28:
                    27:71:af:bd:f9:9d:c5:d4:ce:6c:94:e1:6c:5a:ff:
                    2f:94:38:8b:9c:28:ac:2e:9d:20:39:2a:5f:7a:b1:
                    5a:0e:d8:ae:97:38:36:a0:c2:99:9e:d6:4d:1c:5b:
                    c9:20:e2:2a:c1:14:74:6f:e7:f8:95:32:5f:df:97:
                    c0:82:6a:a4:61:cd:c4:4c:25:1d:f9:f3:bb:c5:94:
                    6e:2d:6b:5c:a7:ac:68:a8:db:ba:4e:57:78:61:73:
                    14:db:33:e5:a7:d1:9f:4d:13:6c:da:b2:f6:80:bc:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:85:B1:A9:6D:9A:3D:46:0C:B2:9B:08:68:3E:2C:20:AF:76:60:5B
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS199681.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f300::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:f5:77:95:d9:8a:48:76:84:e8:8f:56:9a:db:93:20:26:75:
         45:ac:82:12:cf:14:b5:ff:6f:16:73:05:f5:31:c8:1a:6f:30:
         8b:35:5e:41:73:a1:ff:1b:71:0e:91:14:4f:1f:b7:48:00:84:
         1b:7a:aa:70:7d:b9:c1:d0:02:9a:52:de:fc:64:27:3a:99:7b:
         eb:d2:e4:77:2a:a3:66:d9:1f:2b:f1:d3:97:3a:b6:e3:4e:4f:
         01:59:ad:7a:ff:94:ff:38:ff:78:af:9e:91:5e:a5:d8:c2:ee:
         aa:3c:68:d0:20:4e:e8:52:5d:d5:78:dc:88:dd:cc:7f:df:c9:
         3d:11:5f:0f:4b:05:4b:4a:ab:70:3d:ef:23:c1:b0:6f:23:40:
         36:f2:27:b0:45:7f:3a:1f:1e:b2:20:a5:d3:0f:27:d6:c7:97:
         82:cb:67:e1:15:2d:82:ac:33:eb:0a:1c:73:c2:b8:21:b2:de:
         34:40:74:60:62:cb:7b:1a:f4:99:69:40:01:5f:18:f9:66:b0:
         c1:dc:43:22:dd:b9:fa:29:f3:2b:aa:24:51:21:10:c7:eb:a3:
         cb:63:49:5d:df:8c:62:f7:f7:9d:fb:6c:bd:54:22:27:0c:1f:
         b3:26:d8:8f:2a:d7:7f:21:98:98:47:a6:12:99:61:9a:9c:77:
         e6:76:05:dd
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUfLDmRb1EULVriaDS+9Bh45yJqocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MTlaFw0yNDA0MDYwOTIyMTlaMDMxMTAvBgNV
BAMTKEI3ODVCMUE5NkQ5QTNENDYwQ0IyOUIwODY4M0UyQzIwQUY3NjYwNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTyRk1mUkC8bwayqGDO1cdpNQ
3RGHapSxFpqbA0uk9992PnShNkVbNhCEAc8mrVluGDL5TFUcXbRbMZlFIRrVo6JU
M6GFl42zU1MbKcgpsIwAKmSuQBx0BMr296DMj0vin13tfRy7C3/dscIRRm1uYFzD
vO2lvIy1bC+ksfgAkCDoBA4H86P0bCMiuS+XJOoZUf9nKCdxr735ncXUzmyU4Wxa
/y+UOIucKKwunSA5Kl96sVoO2K6XODagwpme1k0cW8kg4irBFHRv5/iVMl/fl8CC
aqRhzcRMJR3587vFlG4ta1ynrGio27pOV3hhcxTbM+Wn0Z9NE2zasvaAvPoBAgMB
AAGjggGcMIIBmDAdBgNVHQ4EFgQUt4WxqW2aPUYMspsIaD4sIK92YFswHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMxOTk2ODEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1H8zANBgkqhkiG9w0BAQsF
AAOCAQEAIPV3ldmKSHaE6I9WmtuTICZ1RayCEs8Utf9vFnMF9THIGm8wizVeQXOh
/xtxDpEUTx+3SACEG3qqcH25wdACmlLe/GQnOpl769LkdyqjZtkfK/HTlzq2405P
AVmtev+U/zj/eK+ekV6l2MLuqjxo0CBO6FJd1XjciN3Mf9/JPRFfD0sFS0qrcD3v
I8GwbyNANvInsEV/Oh8esiCl0w8n1seXgstn4RUtgqwz6wocc8K4IbLeNEB0YGLL
exr0mWlAAV8Y+WawwdxDIt25+inzK6okUSEQx+ujy2NJXd+MYvf3nftsvVQiJwwf
sybYjyrXfyGYmEemEplhmpx35nYF3Q==
-----END CERTIFICATE-----