Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS201242.roa
File:                     AS201242.roa (raw, json)
Hash identifier:          wik7ljnOropgVIsXyPRGr/y/7JAymE6fZHdQwoud9WQ=
Subject key identifier:   8C:01:F6:0D:90:39:97:4D:87:9A:5A:0A:58:BF:E4:A6:6C:6A:BB:DA
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       0C553EFF4872096F4A7452658724E38A182B6A78
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS201242.roa
Signing time:             Sat 08 Apr 2023 09:22:11 +0000
ROA not before:           Sat 08 Apr 2023 09:17:11 +0000
ROA not after:            Sat 06 Apr 2024 09:22:11 +0000
asID:                     201242
IP address blocks:        2a12:dd47:80e1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:55:3e:ff:48:72:09:6f:4a:74:52:65:87:24:e3:8a:18:2b:6a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:11 2023 GMT
            Not After : Apr  6 09:22:11 2024 GMT
        Subject: CN=8C01F60D9039974D879A5A0A58BFE4A66C6ABBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:7e:70:24:d2:b9:ac:21:91:bc:e5:16:be:
                    e6:4a:cd:4d:57:aa:d9:ad:56:38:0a:f6:a8:52:09:
                    f9:2b:06:6c:b8:ee:e6:a3:36:58:f4:17:ac:1e:6f:
                    94:c4:bf:dd:a9:a3:fb:0f:ca:84:e9:70:c5:be:26:
                    3b:ae:49:59:ea:0b:4d:dc:3c:36:35:15:4d:2b:95:
                    ad:e0:71:60:8d:d6:1f:de:e4:e8:d0:50:ca:b0:26:
                    43:11:25:68:97:54:eb:e2:3f:99:32:02:1c:1f:9c:
                    d8:11:34:4c:3a:46:5d:e3:65:77:08:0f:24:fe:7c:
                    62:e3:89:b7:00:d8:59:f9:0e:9c:83:e1:67:96:94:
                    79:21:e4:91:a0:ec:2d:a6:19:5e:88:72:91:67:da:
                    10:ac:b3:c1:6f:d8:b7:ae:03:2b:3a:49:4d:65:0a:
                    37:77:a2:8f:2b:25:18:65:80:52:48:b3:a9:a2:ec:
                    f1:9d:67:ad:24:40:03:d4:99:7e:85:a8:02:6d:d6:
                    f6:7a:62:93:e7:5d:bb:22:62:80:6f:93:30:1e:18:
                    0c:ab:31:95:a0:8c:76:5a:a3:e5:3c:fa:04:44:f3:
                    d0:4c:33:6f:af:c2:98:d5:1b:71:c4:13:f0:8c:7c:
                    a4:25:48:e6:42:dc:68:8e:4c:ec:39:c8:e0:b3:fb:
                    ab:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:01:F6:0D:90:39:97:4D:87:9A:5A:0A:58:BF:E4:A6:6C:6A:BB:DA
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS201242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:80e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:51:96:9e:7d:67:53:f3:80:bb:1a:10:48:90:cc:34:83:3c:
         e5:22:1b:ce:99:9b:44:8e:52:c6:c6:b5:b7:d9:01:0d:37:a4:
         a7:be:8c:5a:6c:6b:d2:48:7b:31:42:47:d4:02:ea:6d:ec:82:
         38:f1:a5:47:d4:b8:46:bc:6d:0e:9c:3c:ac:9d:9c:8e:06:14:
         fb:e1:9a:b9:f8:b7:9c:1a:c4:57:83:58:f6:dd:3f:a7:24:ef:
         17:3c:e5:ba:2e:28:32:43:6a:5d:3c:98:aa:91:15:77:9b:97:
         3b:d5:2f:23:e7:6f:5f:7e:42:40:e8:53:9c:67:4c:ed:4d:b7:
         a0:cb:3a:43:8d:73:a5:7b:89:6e:c1:80:ec:63:28:8c:78:6e:
         11:e0:27:67:e9:77:48:be:37:67:2e:ac:b0:e9:db:f9:16:fe:
         c1:11:69:c9:c3:f8:82:6d:5e:7a:e8:84:27:ca:90:a9:39:89:
         a2:ad:e9:1b:68:ab:e1:e0:68:34:a4:84:81:0a:a3:55:d4:65:
         9b:c9:f0:cd:c2:6b:be:82:21:4a:d9:45:08:9b:69:82:2d:9b:
         1a:b0:12:bb:a7:0b:e8:b8:b6:73:86:93:d0:69:38:09:6a:50:
         0e:10:5e:33:4c:66:c9:7c:92:91:8b:25:08:35:f4:cb:ff:df:
         72:a9:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----