Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS203423.roa
File:                     AS203423.roa (raw, json)
Hash identifier:          OAxdXBQhzVSNkTzhhu8kiOIVN8ZaNwtGjF8SAY6Tt4U=
Subject key identifier:   25:E5:31:6E:15:4C:A8:AC:C3:46:CB:93:35:87:0A:52:46:84:DD:CB
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       12DCA958265B0EA39B18D8B9C414BCFD6A1D5B3A
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS203423.roa
Signing time:             Sat 08 Apr 2023 09:22:22 +0000
ROA not before:           Sat 08 Apr 2023 09:17:22 +0000
ROA not after:            Sat 06 Apr 2024 09:22:22 +0000
asID:                     203423
IP address blocks:        2a12:dd47:8310::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:dc:a9:58:26:5b:0e:a3:9b:18:d8:b9:c4:14:bc:fd:6a:1d:5b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:22 2023 GMT
            Not After : Apr  6 09:22:22 2024 GMT
        Subject: CN=25E5316E154CA8ACC346CB9335870A524684DDCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:59:f9:b4:f8:d7:a0:1f:29:6f:59:fd:d5:f7:
                    e8:d1:cb:3a:2f:07:f7:e9:94:c3:e5:0c:86:90:d6:
                    92:47:aa:d2:fc:47:46:f3:38:0e:7f:12:2d:8e:ec:
                    f2:89:85:08:74:de:40:f5:ef:e2:4e:b3:be:40:55:
                    35:19:a7:74:6f:d1:db:37:a6:ec:90:2a:89:9e:b1:
                    a6:da:60:29:45:e1:f1:15:0c:03:d6:10:3c:9f:3c:
                    eb:41:7c:16:d1:4d:a6:46:0d:85:08:06:1b:4b:82:
                    84:18:ca:3e:a8:3a:bb:07:07:91:55:0b:9a:cf:63:
                    23:21:65:fe:82:aa:54:2b:d4:e4:00:47:f0:ef:9d:
                    cf:f7:8a:ee:9a:83:73:06:36:a7:9b:e1:9b:cf:49:
                    98:80:82:bc:77:8a:6e:37:31:b4:32:6b:81:7b:22:
                    c3:a8:25:bc:04:b8:3a:14:48:4b:00:b5:4d:ea:65:
                    40:1b:68:b5:e8:4c:ea:b5:64:f0:5b:3a:78:8c:bf:
                    09:14:d0:46:78:5f:3a:61:da:80:39:ea:7c:b5:b7:
                    da:81:51:f3:d6:fc:3c:ef:c6:d5:d7:be:67:55:a1:
                    44:a7:5d:c6:26:68:2a:58:20:9f:22:c8:62:c1:e6:
                    34:a8:48:5d:cb:f6:0e:56:33:93:ef:3a:58:8a:26:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E5:31:6E:15:4C:A8:AC:C3:46:CB:93:35:87:0A:52:46:84:DD:CB
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS203423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8310::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:33:a7:c5:d8:cf:21:ae:a9:92:33:af:3b:98:36:30:4d:29:
         ae:bf:38:95:a0:a8:fd:ff:1b:fc:9b:02:fa:f9:22:4a:7d:07:
         58:30:62:e2:de:25:5a:c0:02:30:10:05:5c:4a:52:5b:7d:53:
         fb:72:1b:b5:d2:c9:ae:bd:4b:4d:e4:fd:34:da:2b:39:11:34:
         0e:ac:6c:6a:60:1e:58:c1:b7:fc:31:40:1c:5d:2c:73:cf:bc:
         ab:ff:9f:8e:5c:15:ff:94:39:94:c6:11:f6:df:dc:dd:11:a3:
         df:f9:b4:30:59:c5:62:c9:a6:3e:2c:55:0c:fb:fe:64:01:06:
         07:45:f1:22:d2:38:f6:3f:19:c5:19:fc:c5:9c:c1:0a:17:1a:
         5c:db:c1:b2:19:87:ce:7f:00:2e:c9:18:42:79:b7:3b:58:a3:
         8d:ec:7c:2e:2d:a7:aa:b9:a3:ff:5f:03:83:24:f1:56:94:1f:
         1b:85:2e:42:97:f4:ee:a7:a9:4c:15:ac:01:1a:eb:9e:cc:74:
         08:5e:62:02:b0:f1:55:f3:72:17:d0:36:f1:5a:5c:9d:59:3e:
         61:8b:d1:88:cf:60:ed:df:ea:48:43:72:58:66:0a:2e:9e:a2:
         5a:55:ca:af:26:f3:83:89:9e:ad:8f:4e:d0:7e:d8:3a:0e:90:
         b0:45:61:1b
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUEtypWCZbDqObGNi5xBS8/WodWzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjJaFw0yNDA0MDYwOTIyMjJaMDMxMTAvBgNV
BAMTKDI1RTUzMTZFMTU0Q0E4QUNDMzQ2Q0I5MzM1ODcwQTUyNDY4NEREQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgWfm0+NegHylvWf3V9+jRyzov
B/fplMPlDIaQ1pJHqtL8R0bzOA5/Ei2O7PKJhQh03kD17+JOs75AVTUZp3Rv0ds3
puyQKomesabaYClF4fEVDAPWEDyfPOtBfBbRTaZGDYUIBhtLgoQYyj6oOrsHB5FV
C5rPYyMhZf6CqlQr1OQAR/Dvnc/3iu6ag3MGNqeb4ZvPSZiAgrx3im43MbQya4F7
IsOoJbwEuDoUSEsAtU3qZUAbaLXoTOq1ZPBbOniMvwkU0EZ4Xzph2oA56ny1t9qB
UfPW/DzvxtXXvmdVoUSnXcYmaCpYIJ8iyGLB5jSoSF3L9g5WM5PvOliKJqrrAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUJeUxbhVMqKzDRsuTNYcKUkaE3cswHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMDM0MjMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HgxAwDQYJKoZIhvcNAQEL
BQADggEBABEzp8XYzyGuqZIzrzuYNjBNKa6/OJWgqP3/G/ybAvr5Ikp9B1gwYuLe
JVrAAjAQBVxKUlt9U/tyG7XSya69S03k/TTaKzkRNA6sbGpgHljBt/wxQBxdLHPP
vKv/n45cFf+UOZTGEfbf3N0Ro9/5tDBZxWLJpj4sVQz7/mQBBgdF8SLSOPY/GcUZ
/MWcwQoXGlzbwbIZh85/AC7JGEJ5tztYo43sfC4tp6q5o/9fA4Mk8VaUHxuFLkKX
9O6nqUwVrAEa657MdAheYgKw8VXzchfQNvFaXJ1ZPmGL0YjPYO3f6khDclhmCi6e
olpVyq8m84OJnq2PTtB+2DoOkLBFYRs=
-----END CERTIFICATE-----