Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS200506.roa
File:                     AS200506.roa (raw, json)
Hash identifier:          vMdpWXy9t02E30xajEuT1cemDDZV1CPsLE/pIGAxj14=
Subject key identifier:   2F:0E:88:C7:0E:2F:34:32:3F:9B:63:FE:4A:4F:DE:ED:64:33:48:2F
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       4CE372D091AD8CA95562BDBF4593FBBFC486B1A7
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS200506.roa
Signing time:             Sat 08 Apr 2023 09:22:10 +0000
ROA not before:           Sat 08 Apr 2023 09:17:10 +0000
ROA not after:            Sat 06 Apr 2024 09:22:10 +0000
asID:                     200506
IP address blocks:        2a12:dd47:d400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e3:72:d0:91:ad:8c:a9:55:62:bd:bf:45:93:fb:bf:c4:86:b1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:10 2023 GMT
            Not After : Apr  6 09:22:10 2024 GMT
        Subject: CN=2F0E88C70E2F34323F9B63FE4A4FDEED6433482F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:46:88:47:51:f0:93:6a:72:34:a5:4a:09:
                    ec:a8:68:79:c4:f1:52:cc:ec:ae:54:e7:21:91:4b:
                    f7:12:fa:1d:b1:0e:8c:cb:fe:24:86:5b:cd:4c:4b:
                    4e:aa:a8:06:66:d5:af:05:6d:b4:a3:23:c6:8a:b3:
                    48:0f:13:06:95:41:55:ce:29:ad:56:ea:b5:95:2f:
                    82:95:77:cf:c0:6d:d3:10:4a:c5:11:5e:ea:91:17:
                    e4:84:48:d1:7a:d4:9c:20:0b:6c:59:47:88:4d:cb:
                    03:b1:59:89:6b:ff:0f:cf:a1:1c:8d:46:04:9f:66:
                    9d:3e:fc:26:50:cd:a6:90:bb:37:17:81:e4:1f:96:
                    1b:0a:d3:ee:4b:2d:2e:d5:36:a4:1e:98:e5:e1:d2:
                    52:6c:08:0e:11:1a:b0:a6:34:37:3d:6d:e0:6c:61:
                    9a:69:0d:d6:d7:d3:69:bd:88:de:49:1e:88:ab:92:
                    a3:62:a4:79:39:49:00:35:94:51:c3:93:ce:b8:e6:
                    91:bc:15:89:31:91:a2:07:1b:b8:6b:6d:61:7d:98:
                    09:f2:14:b9:67:c0:e2:d2:08:31:ca:1f:5a:52:eb:
                    50:82:e8:83:ed:0b:f3:d8:ae:1f:1c:77:f5:96:e4:
                    f3:54:96:9b:34:d0:0b:1e:6a:d0:0e:89:a6:fb:9a:
                    14:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0E:88:C7:0E:2F:34:32:3F:9B:63:FE:4A:4F:DE:ED:64:33:48:2F
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS200506.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:d400::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:f2:20:11:3c:c6:9d:60:9a:06:63:d1:8f:ff:c5:73:dc:ce:
         01:1c:02:a1:b6:d8:e7:23:e4:6f:21:56:20:1e:e9:a1:d0:01:
         c7:9d:76:3d:cc:4e:20:d7:57:a5:14:01:0a:04:fe:2f:58:83:
         df:b5:4a:8e:d8:7c:11:8f:a4:c1:c6:07:8b:b4:4e:9e:40:42:
         0f:f7:4c:55:47:15:5a:9d:74:be:f2:40:3a:e3:24:75:94:f1:
         9a:64:fa:27:4d:bd:a4:be:5c:26:91:d5:92:76:2a:3a:36:25:
         75:7f:65:d3:cb:e0:d4:00:fb:60:4b:a9:40:d7:ae:93:8f:89:
         1e:60:85:e3:b6:9f:ad:80:ac:e6:85:77:8a:a5:95:db:c1:61:
         7e:b7:08:6c:8c:af:27:9f:64:c2:b3:23:3d:75:95:7a:6b:fc:
         3a:8f:69:30:65:ff:04:9b:06:d1:28:45:35:55:dd:09:96:7a:
         e6:99:f3:f0:e9:23:9d:ad:df:9c:91:da:97:7a:78:b0:20:ce:
         5c:74:ac:82:d4:83:a7:fc:9b:24:99:15:78:e0:c9:1f:e8:99:
         74:cf:7c:86:3f:69:1f:2d:cc:a1:32:3a:62:3f:6d:89:64:21:
         ee:5a:0b:dc:25:be:1f:db:f9:21:f7:24:a2:b5:b3:49:7f:38:
         69:47:14:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:29 2023 by rpki-client on console-fra.rpki-client.org