Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS211151.roa
File:                     AS211151.roa (raw, json)
Hash identifier:          4V45o/eYFeYc/D4mAQo7SY9Zwan2VGpHtY7+koVaeQ4=
Subject key identifier:   2B:10:FF:53:7B:ED:47:5F:27:F0:75:23:CB:1C:30:A0:79:DE:E6:BE
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       372B4282102EDD8431263BA48250ACFFD43BCA3C
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS211151.roa
Signing time:             Sat 08 Apr 2023 09:22:13 +0000
ROA not before:           Sat 08 Apr 2023 09:17:13 +0000
ROA not after:            Sat 06 Apr 2024 09:22:13 +0000
asID:                     211151
IP address blocks:        2a12:dd47:3300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2b:42:82:10:2e:dd:84:31:26:3b:a4:82:50:ac:ff:d4:3b:ca:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:13 2023 GMT
            Not After : Apr  6 09:22:13 2024 GMT
        Subject: CN=2B10FF537BED475F27F07523CB1C30A079DEE6BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:ce:a9:6f:7e:22:43:9f:01:d0:f6:c5:67:
                    e6:e5:97:1d:df:59:9b:3a:38:50:60:0a:4e:ab:ab:
                    0b:70:91:85:ac:3e:f5:4b:39:e5:e8:34:d6:5a:4c:
                    f2:14:31:f0:01:3c:a9:e3:31:d4:52:0e:e8:f0:64:
                    17:28:ef:df:85:4b:30:df:87:46:75:fd:8d:49:51:
                    c7:96:84:74:49:7f:69:62:64:a6:f7:2a:1e:e6:ed:
                    a6:30:81:93:0c:33:bd:94:81:26:5a:b8:8c:b3:2d:
                    30:b8:4a:14:53:ca:08:03:4b:be:e5:13:8a:5a:c5:
                    a7:99:71:c7:2b:88:d0:e7:e2:0c:48:b8:a8:18:76:
                    97:c0:ed:4b:f4:98:aa:6b:19:3a:61:07:8f:ce:8c:
                    d0:cb:bf:f3:71:87:b5:53:48:a9:9c:9e:35:67:cc:
                    12:2d:1c:d9:c0:e8:81:dc:69:3c:50:8b:6b:ad:92:
                    3b:3a:28:1a:b3:1a:08:7b:dd:64:4f:32:aa:35:f9:
                    85:d0:eb:4a:4a:52:72:94:03:2d:0e:18:ad:a9:1a:
                    e9:2e:d4:ae:e3:fb:91:d5:09:4f:90:53:e8:f4:7b:
                    53:5c:51:02:8c:f2:ad:1a:16:ab:45:86:2a:d6:2b:
                    d9:96:f1:85:e2:78:be:b2:4a:e8:2d:10:9d:82:65:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:10:FF:53:7B:ED:47:5F:27:F0:75:23:CB:1C:30:A0:79:DE:E6:BE
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS211151.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:ed:4c:4f:e9:6f:7b:3b:fc:d6:ad:3a:27:c5:35:10:71:76:
         96:54:2e:d3:60:f5:3b:93:8b:78:4f:03:c7:dd:1a:df:ed:7e:
         d1:34:14:2c:ab:de:be:72:5b:f9:15:32:72:87:cc:37:7c:0f:
         8a:05:aa:e2:ed:30:a7:5c:57:da:da:bf:fd:3c:38:2b:92:2c:
         7e:78:ce:47:28:8d:61:01:64:97:fc:41:fd:5d:33:21:63:41:
         5f:fc:0c:80:2a:00:52:c7:4b:81:e4:e9:69:0a:aa:8e:1e:f4:
         2b:ed:4d:91:7e:7f:d3:65:4d:14:1c:bd:02:e1:ec:d0:1e:48:
         3d:47:ca:2c:7f:31:bd:81:bf:f3:14:ba:ee:09:bf:ef:9e:79:
         99:53:a1:f0:84:df:48:db:40:c4:15:ee:01:c7:a6:a3:d2:aa:
         90:ba:fe:61:23:b9:ac:d1:2d:d2:7e:9b:a8:7c:37:d6:77:01:
         66:8a:84:63:a8:fd:c4:cd:66:d7:77:1e:56:af:01:d4:c7:36:
         6f:93:fd:23:ff:ee:33:7d:70:13:7d:69:52:98:f9:c4:6f:b0:
         bd:01:80:29:f1:4c:e1:d0:a0:40:a0:08:39:08:41:dc:23:5c:
         24:e9:1d:e2:18:a4:a9:56:70:c4:98:11:e0:d4:5a:78:74:66:
         38:c9:78:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----