Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS201421.roa
File:                     AS201421.roa (raw, json)
Hash identifier:          4LAiwxTgSH89Wwkmeoy1VUUQ+nx7NsJrDbETbsvLZaU=
Subject key identifier:   D5:F5:7C:AB:5E:19:FE:D8:8F:3E:02:A3:59:C0:10:D8:B4:A3:1F:38
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       23DDFF954C5D25C55293787F2F90B8FC75438A85
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS201421.roa
Signing time:             Sat 08 Apr 2023 09:22:18 +0000
ROA not before:           Sat 08 Apr 2023 09:17:18 +0000
ROA not after:            Sat 06 Apr 2024 09:22:18 +0000
asID:                     201421
IP address blocks:        2a12:dd47:8331::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:dd:ff:95:4c:5d:25:c5:52:93:78:7f:2f:90:b8:fc:75:43:8a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:18 2023 GMT
            Not After : Apr  6 09:22:18 2024 GMT
        Subject: CN=D5F57CAB5E19FED88F3E02A359C010D8B4A31F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3a:d2:b8:47:01:59:97:49:c5:a6:e0:b9:d0:
                    eb:21:0b:b4:8d:2a:a2:a2:48:69:e7:53:13:e3:3a:
                    11:82:a7:a9:bb:e5:8c:66:ff:78:7f:22:80:5f:db:
                    6c:36:fb:1c:5e:6f:6b:7d:a2:5a:9f:de:94:f0:82:
                    a6:54:78:52:3e:76:68:46:f5:1f:1f:67:33:bf:b0:
                    45:93:14:f1:b0:73:46:6d:92:66:c6:e0:b6:fb:e1:
                    d6:f2:a9:e5:c6:68:23:15:c6:35:39:b6:5f:ce:97:
                    b1:c5:76:f7:7f:d2:d5:73:55:22:17:6c:98:84:81:
                    f6:ed:51:ab:ff:40:e7:a1:79:d1:e9:9e:8d:85:4b:
                    ae:d5:20:e6:e0:10:b3:d4:b1:0d:f1:ce:d3:81:28:
                    a6:37:75:ed:d7:4f:f2:39:4a:3a:f0:81:8a:c5:e9:
                    3c:11:7e:02:3b:d5:2d:ab:6e:73:5c:0e:4a:42:07:
                    ea:2f:e9:ca:f7:f1:54:79:a8:66:0d:87:83:96:5e:
                    e1:c6:ad:c4:98:b1:1d:66:8f:90:80:eb:c3:22:01:
                    56:db:89:13:5c:5c:34:d0:b0:7e:cf:51:61:db:10:
                    1f:c6:cc:cb:40:4a:7f:79:57:2b:ff:07:92:d6:aa:
                    69:5c:9c:34:83:32:02:48:73:36:af:46:13:ca:54:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F5:7C:AB:5E:19:FE:D8:8F:3E:02:A3:59:C0:10:D8:B4:A3:1F:38
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS201421.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8331::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:e4:88:11:21:7e:32:dd:4f:5a:69:18:65:14:c1:97:b8:40:
         f1:d7:01:df:c4:c4:fb:79:d6:17:49:93:04:92:32:4b:7b:f7:
         5a:a5:8b:93:31:05:29:8f:7e:45:84:00:5b:c4:65:48:20:a7:
         e7:3c:51:df:cc:37:4a:c5:4c:a4:57:1a:8a:5d:4c:22:cd:94:
         4e:e3:93:c9:10:38:19:08:72:63:63:f8:06:31:03:9a:31:6a:
         4d:54:49:52:05:fa:f4:a9:4a:72:33:eb:a5:3e:49:da:45:70:
         f8:cf:d7:9c:88:d8:af:bc:9b:46:b5:5e:4e:d1:dc:99:02:3b:
         b7:10:66:6c:05:a4:4d:fd:f8:cb:58:ef:b7:79:c3:94:65:39:
         da:1a:ff:1f:2f:ef:45:21:f4:80:4b:78:91:cd:47:fa:85:7f:
         4f:2d:d8:3e:30:36:65:33:b9:2f:05:a1:46:77:08:84:c2:d8:
         e2:96:67:83:28:0c:b6:81:13:ae:00:79:fe:62:7b:61:53:52:
         5a:27:44:dc:43:53:39:72:93:0a:33:92:74:b2:45:7f:50:c5:
         18:4e:f1:8a:79:09:12:ff:b0:7a:41:68:cb:f0:5a:c0:ea:34:
         65:70:b3:c4:f8:5f:82:7f:43:46:b5:9c:26:8f:e3:06:bb:57:
         40:19:88:08
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUI93/lUxdJcVSk3h/L5C4/HVDioUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MThaFw0yNDA0MDYwOTIyMThaMDMxMTAvBgNV
BAMTKEQ1RjU3Q0FCNUUxOUZFRDg4RjNFMDJBMzU5QzAxMEQ4QjRBMzFGMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWOtK4RwFZl0nFpuC50OshC7SN
KqKiSGnnUxPjOhGCp6m75Yxm/3h/IoBf22w2+xxeb2t9olqf3pTwgqZUeFI+dmhG
9R8fZzO/sEWTFPGwc0ZtkmbG4Lb74dbyqeXGaCMVxjU5tl/Ol7HFdvd/0tVzVSIX
bJiEgfbtUav/QOehedHpno2FS67VIObgELPUsQ3xztOBKKY3de3XT/I5SjrwgYrF
6TwRfgI71S2rbnNcDkpCB+ov6cr38VR5qGYNh4OWXuHGrcSYsR1mj5CA68MiAVbb
iRNcXDTQsH7PUWHbEB/GzMtASn95Vyv/B5LWqmlcnDSDMgJIczavRhPKVKgNAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQU1fV8q14Z/tiPPgKjWcAQ2LSjHzgwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDE0MjEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqEt1HgzEwDQYJKoZIhvcNAQEL
BQADggEBADfkiBEhfjLdT1ppGGUUwZe4QPHXAd/ExPt51hdJkwSSMkt791qli5Mx
BSmPfkWEAFvEZUggp+c8Ud/MN0rFTKRXGopdTCLNlE7jk8kQOBkIcmNj+AYxA5ox
ak1USVIF+vSpSnIz66U+SdpFcPjP15yI2K+8m0a1Xk7R3JkCO7cQZmwFpE39+MtY
77d5w5RlOdoa/x8v70Uh9IBLeJHNR/qFf08t2D4wNmUzuS8FoUZ3CITC2OKWZ4Mo
DLaBE64Aef5ie2FTUlonRNxDUzlykwozknSyRX9QxRhO8Yp5CRL/sHpBaMvwWsDq
NGVws8T4X4J/Q0a1nCaP4wa7V0AZiAg=
-----END CERTIFICATE-----