Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS199683.roa
File:                     AS199683.roa (raw, json)
Hash identifier:          32B5G7Y5EuAeC7Sm2prhf/ccGkAQp8ybAkEP9ltKFKw=
Subject key identifier:   9D:06:04:34:CF:0A:33:F0:45:1E:5E:1C:37:2B:C7:B2:DF:10:F1:68
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       38A518C700E89DCC7CD0A536F3A78AB53702EC1B
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS199683.roa
Signing time:             Sat 08 Apr 2023 09:22:22 +0000
ROA not before:           Sat 08 Apr 2023 09:17:22 +0000
ROA not after:            Sat 06 Apr 2024 09:22:22 +0000
asID:                     199683
IP address blocks:        2a12:dd47:8ef0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a5:18:c7:00:e8:9d:cc:7c:d0:a5:36:f3:a7:8a:b5:37:02:ec:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:22 2023 GMT
            Not After : Apr  6 09:22:22 2024 GMT
        Subject: CN=9D060434CF0A33F0451E5E1C372BC7B2DF10F168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b3:21:f6:d2:fd:53:b6:9e:10:64:28:c3:a6:
                    98:61:92:7e:50:e0:e2:d6:df:b2:11:6b:ac:72:f1:
                    21:d3:d9:91:4b:e7:e1:48:b8:20:23:b8:85:43:2f:
                    90:47:09:09:1e:61:15:6e:45:de:64:29:a2:6e:aa:
                    8a:82:fe:c3:c2:20:1b:d8:9a:c6:67:51:ec:dd:f9:
                    28:18:b9:f8:e5:1b:63:69:57:2e:fb:68:9b:a3:61:
                    cf:04:41:03:32:fc:24:a9:7c:31:f7:5d:15:85:b6:
                    84:4b:7d:c5:50:1e:fe:8b:92:98:23:81:4a:f8:7c:
                    35:22:4b:40:db:4c:30:b7:c0:69:2e:79:a1:ad:77:
                    79:ca:70:0a:d2:a0:32:6b:a6:e9:32:1c:9d:cb:3b:
                    1e:73:ba:96:05:61:f7:c3:4c:7d:b4:95:2c:0a:16:
                    53:3f:26:62:c0:78:a8:0d:ef:75:ea:35:63:cb:1d:
                    0e:b9:8b:70:83:5b:e9:72:0f:fc:b8:87:3b:49:c1:
                    8d:cd:dc:77:91:51:9f:d3:64:e6:14:38:2e:2b:34:
                    5c:af:ac:70:d3:48:90:c3:82:0a:02:11:b5:7b:b0:
                    b1:e2:3d:6b:44:8f:66:c9:28:aa:e9:94:05:0c:b1:
                    f9:5f:cf:13:d9:ff:19:52:6a:30:5a:84:c5:3a:16:
                    ef:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:06:04:34:CF:0A:33:F0:45:1E:5E:1C:37:2B:C7:B2:DF:10:F1:68
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS199683.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8ef0::/44

    Signature Algorithm: sha256WithRSAEncryption
         06:94:70:71:96:0d:12:cf:fd:61:79:0a:9d:90:f6:f0:52:8b:
         74:4d:1e:8c:6d:2d:e4:87:3a:12:d9:0a:21:c3:de:2d:b7:3f:
         25:45:10:2a:cd:be:31:c7:c9:f6:af:5e:d9:33:3c:63:16:7c:
         a7:37:ae:e5:2f:6a:78:e1:5d:bc:c5:88:22:a6:9c:bb:63:da:
         44:b8:95:99:8e:17:3b:63:87:67:47:23:bc:b5:f5:7d:86:1c:
         e7:44:f3:63:e4:e7:40:4f:d9:aa:5a:c3:b3:c9:ca:c6:25:85:
         40:a4:40:af:40:e0:05:8e:4f:3a:2c:1d:20:bd:4f:84:1b:38:
         48:05:67:6a:ee:01:ae:60:2d:19:d2:fc:79:57:99:b6:bb:e3:
         8f:97:e1:64:66:85:31:61:1a:08:49:67:90:7d:05:f4:ad:86:
         b0:d5:bd:89:90:eb:16:4e:80:ce:2f:2d:a6:75:4c:29:75:31:
         33:37:a2:21:73:8b:ea:c9:40:86:47:1c:57:78:33:ca:76:8c:
         2c:a4:2e:99:63:4b:52:68:60:24:e3:78:18:5f:84:f0:64:a5:
         ac:1c:17:a1:0e:c8:0f:7a:4f:21:86:63:3d:8e:de:0d:74:a8:
         14:e3:30:49:20:17:8c:38:14:09:b9:0e:4b:8e:a5:fe:ee:80:
         36:ae:f1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----