Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS210810.roa
File:                     AS210810.roa (raw, json)
Hash identifier:          Gv8467xz/nnpUxuao7/Ym4/mkeyBBJvfLVOwdQCVKD4=
Subject key identifier:   94:70:CC:60:B3:68:3E:F3:FE:B6:41:28:11:D1:0B:19:50:01:2D:76
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       0FF15F5D5AB1361C0B5334B27266D0D29D041FA7
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS210810.roa
Signing time:             Sat 08 Apr 2023 09:22:27 +0000
ROA not before:           Sat 08 Apr 2023 09:17:27 +0000
ROA not after:            Sat 06 Apr 2024 09:22:27 +0000
asID:                     210810
IP address blocks:        2a12:dd47:9330::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f1:5f:5d:5a:b1:36:1c:0b:53:34:b2:72:66:d0:d2:9d:04:1f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:27 2023 GMT
            Not After : Apr  6 09:22:27 2024 GMT
        Subject: CN=9470CC60B3683EF3FEB6412811D10B1950012D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:f9:8b:c4:1b:69:42:29:34:9c:b6:7a:1c:
                    9e:8e:b0:09:5a:8c:b5:26:ef:6b:ae:34:1e:e3:2c:
                    04:6b:b0:0e:f6:35:b6:ba:1e:fb:57:ff:d9:72:ae:
                    c6:52:79:24:b8:13:e5:21:46:08:94:40:06:40:b5:
                    09:a9:46:7c:95:40:94:46:c1:19:24:a5:33:ab:ac:
                    d4:ca:5f:d6:41:2d:b6:da:2a:ab:2b:23:f3:78:33:
                    fe:2a:f7:b1:63:37:7a:b1:bb:2c:c0:1c:bc:de:e6:
                    75:1d:1b:32:db:0d:5d:e2:6c:e8:2d:dc:88:e2:31:
                    9c:84:33:a8:b9:82:fd:26:da:4d:1f:0e:08:0f:9f:
                    bf:04:24:7d:a0:68:49:48:5f:7e:45:3b:28:96:90:
                    69:27:ce:ce:ee:17:0e:5d:ab:69:66:3c:d6:a6:91:
                    52:4d:04:4a:67:bd:23:f3:d3:73:86:7a:d2:d7:bf:
                    3e:25:c7:95:67:67:88:44:22:20:61:85:90:b8:47:
                    4e:c0:32:d0:9f:65:fe:9d:38:95:b0:cd:b3:52:52:
                    ce:02:5e:5e:f3:6d:ae:32:58:4f:e9:f7:66:35:04:
                    ed:a0:7d:98:f2:d5:78:ad:31:41:1c:31:38:c4:8e:
                    0c:5e:1d:97:db:f1:6a:bf:14:63:ab:15:65:64:40:
                    f9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:70:CC:60:B3:68:3E:F3:FE:B6:41:28:11:D1:0B:19:50:01:2D:76
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS210810.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:9330::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:90:8f:ff:c1:7c:72:99:51:2a:7a:96:d0:a8:d7:69:6a:d6:
         fa:30:33:8f:b8:b1:c0:ec:4c:fd:19:a8:3b:b0:3e:b9:9a:e5:
         80:4f:fb:6b:6f:d2:96:06:ec:a6:5d:fd:32:75:fc:47:4e:ce:
         6d:d6:5e:4a:0f:7c:a2:34:9f:00:de:41:a5:a9:52:7f:37:5a:
         d9:e1:4d:b5:ca:8a:92:4f:f2:60:b5:29:d3:48:e4:d6:fd:89:
         42:1a:1e:a3:59:a1:b1:90:3e:76:03:02:59:17:d9:3c:33:7f:
         09:59:3a:91:af:03:0f:01:4a:83:f9:5f:dd:40:3c:71:26:7b:
         f8:c9:f2:0a:8e:30:70:ac:28:8b:f6:64:75:f7:6a:76:85:69:
         fc:09:17:c8:89:52:a6:30:ef:30:d1:a4:5f:8c:d3:4a:de:6d:
         45:62:ca:37:fe:76:ff:57:81:83:80:4e:97:a7:c1:42:63:ac:
         fb:56:55:58:1e:ff:56:66:e4:18:13:df:c0:07:e4:71:65:01:
         dc:df:94:d5:72:07:d2:ff:35:0d:96:9b:88:33:3e:c9:5e:4e:
         03:1e:32:0d:7d:0e:45:84:5c:2d:91:7b:7d:92:f5:fe:12:83:
         3c:cf:4e:6a:8a:6a:13:56:c0:87:a7:79:be:26:15:53:2e:5c:
         a9:57:7d:d6
-----BEGIN CERTIFICATE-----
MIIEkzCCA3ugAwIBAgIUD/FfXVqxNhwLUzSycmbQ0p0EH6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUwNUI5RjRDQjQxMUREODUzQzA3MEFDNDc2QTAxRkVE
QTIxQzhEMjAeFw0yMzA0MDgwOTE3MjdaFw0yNDA0MDYwOTIyMjdaMDMxMTAvBgNV
BAMTKDk0NzBDQzYwQjM2ODNFRjNGRUI2NDEyODExRDEwQjE5NTAwMTJENzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8PmLxBtpQik0nLZ6HJ6OsAla
jLUm72uuNB7jLARrsA72Nba6HvtX/9lyrsZSeSS4E+UhRgiUQAZAtQmpRnyVQJRG
wRkkpTOrrNTKX9ZBLbbaKqsrI/N4M/4q97FjN3qxuyzAHLze5nUdGzLbDV3ibOgt
3IjiMZyEM6i5gv0m2k0fDggPn78EJH2gaElIX35FOyiWkGknzs7uFw5dq2lmPNam
kVJNBEpnvSPz03OGetLXvz4lx5VnZ4hEIiBhhZC4R07AMtCfZf6dOJWwzbNSUs4C
Xl7zba4yWE/p92Y1BO2gfZjy1XitMUEcMTjEjgxeHZfb8Wq/FGOrFWVkQPkNAgMB
AAGjggGdMIIBmTAdBgNVHQ4EFgQUlHDMYLNoPvP+tkEoEdELGVABLXYwHwYDVR0j
BBgwFoAUlQW59MtBHdhTwHCsR2oB/tohyNIwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzk1MDVC
OUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
Lzk1MDVCOUY0Q0I0MTFERDg1M0MwNzBBQzQ3NkEwMUZFREEyMUM4RDIuY2VyMEYG
CCsGAQUFBwELBDowODA2BggrBgEFBQcwC4YqcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvQVMyMTA4MTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HkzAwDQYJKoZIhvcNAQEL
BQADggEBAGKQj//BfHKZUSp6ltCo12lq1vowM4+4scDsTP0ZqDuwPrma5YBP+2tv
0pYG7KZd/TJ1/EdOzm3WXkoPfKI0nwDeQaWpUn83WtnhTbXKipJP8mC1KdNI5Nb9
iUIaHqNZobGQPnYDAlkX2TwzfwlZOpGvAw8BSoP5X91APHEme/jJ8gqOMHCsKIv2
ZHX3anaFafwJF8iJUqYw7zDRpF+M00rebUViyjf+dv9XgYOATpenwUJjrPtWVVge
/1Zm5BgT38AH5HFlAdzflNVyB9L/NQ2Wm4gzPsleTgMeMg19DkWEXC2Re32S9f4S
gzzPTmqKahNWwIeneb4mFVMuXKlXfdY=
-----END CERTIFICATE-----