Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS50842.roa
File:                     AS50842.roa (raw, json)
Hash identifier:          f2WPXRG+vsLcyJDyKgRJRqNG8IOVfeKue8WdeR8ZSlg=
Subject key identifier:   A1:8E:27:EC:02:83:B5:B7:8D:1D:AE:7B:F2:37:DC:68:82:ED:94:AB
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       6B1D405E6228F8B868C07E1040EB2731480129F7
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS50842.roa
Signing time:             Sat 08 Apr 2023 09:22:20 +0000
ROA not before:           Sat 08 Apr 2023 09:17:20 +0000
ROA not after:            Sat 06 Apr 2024 09:22:20 +0000
asID:                     50842
IP address blocks:        2a12:dd47:81a0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1d:40:5e:62:28:f8:b8:68:c0:7e:10:40:eb:27:31:48:01:29:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:20 2023 GMT
            Not After : Apr  6 09:22:20 2024 GMT
        Subject: CN=A18E27EC0283B5B78D1DAE7BF237DC6882ED94AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f3:28:93:92:a8:47:81:c9:03:43:4e:61:75:
                    96:c8:7d:4c:13:67:39:61:91:4a:00:f1:b8:ae:8a:
                    37:c4:b4:8b:8d:4b:e4:43:8f:1d:4f:77:53:a4:4e:
                    b0:a2:84:f8:19:23:5d:54:be:97:20:6c:98:4c:84:
                    2f:96:79:d9:1a:52:de:d4:06:6a:86:80:19:d8:b2:
                    9f:f4:6a:bb:72:e2:cd:40:35:db:2d:a9:13:0e:22:
                    d4:8a:28:f3:3c:13:5a:53:17:26:23:51:93:e9:01:
                    c5:fa:cd:01:f2:e5:61:dd:d4:2f:37:fc:0b:98:ae:
                    ba:7b:c3:30:46:ea:ae:fe:cc:1d:29:53:36:15:e3:
                    1d:8b:54:f2:ad:83:66:45:9a:84:f4:44:9c:10:12:
                    fb:7a:e5:c9:d5:07:2d:f8:e9:7a:57:7a:08:94:d5:
                    40:d4:4e:f8:95:6d:3e:d4:3a:1b:0d:30:03:cd:f3:
                    53:04:db:41:0b:42:a0:fa:0f:7b:12:34:a5:25:10:
                    31:52:75:b4:93:23:1f:54:84:23:5f:7b:a0:f8:1a:
                    e4:76:3f:35:bd:8e:3e:a5:10:61:5b:bb:0b:1b:1b:
                    ac:d9:d5:6d:b0:5c:0a:30:1f:b7:ad:b7:81:45:22:
                    25:3a:2a:b1:67:96:ec:c8:7d:f2:82:04:72:14:98:
                    01:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8E:27:EC:02:83:B5:B7:8D:1D:AE:7B:F2:37:DC:68:82:ED:94:AB
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS50842.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:1b:45:d1:ca:60:99:bb:38:49:ac:ae:49:21:9e:a4:77:fa:
         6b:98:4c:3d:e9:fc:c3:ff:26:ed:fc:fb:f5:52:cb:c1:88:b8:
         de:94:b3:4b:e9:df:83:5d:62:1b:d1:ac:da:09:37:3c:69:2a:
         f9:c0:cd:96:fc:f3:e4:c5:1b:ec:6c:63:81:f7:65:62:b2:ac:
         84:56:61:a2:25:8f:87:e7:45:53:9d:f4:14:2b:aa:1f:98:b9:
         7a:0d:e3:81:b9:84:ed:d3:21:78:e9:39:91:53:bb:f1:c5:9d:
         57:f8:68:e8:c8:ed:26:ef:ec:f4:5f:b3:d5:a7:ea:f7:c9:13:
         8d:84:01:74:f1:d7:4c:76:a3:6f:44:8b:b1:89:27:3c:ff:54:
         3b:d3:4e:57:3a:47:66:6f:db:2d:bf:89:4f:3b:0b:5c:51:cc:
         fb:d4:ea:e3:91:c2:af:75:aa:3d:39:91:19:ea:a2:61:8a:2b:
         ce:83:88:3b:fa:90:66:f2:7e:83:6b:30:fe:7d:2a:e3:15:4b:
         9e:fe:0a:19:70:f9:85:78:b2:86:14:e7:61:89:d9:de:51:36:
         dc:ef:1c:35:20:4f:95:61:37:0d:54:e8:b9:65:4b:4c:3f:36:
         d5:0b:22:e5:fe:e8:88:14:a0:4c:31:de:ba:8c:f8:9b:0d:34:
         33:4a:36:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----