Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS57406.roa
File:                     AS57406.roa (raw, json)
Hash identifier:          rt7/KistkIAT01TyFBX+dZTelGVlo1Hw9qfkvvnNnlM=
Subject key identifier:   98:C4:74:1D:FB:68:0B:64:E6:10:3B:37:94:95:A4:9E:B3:A8:64:00
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       75402B1EA8B34B1EADA9B5094A6BF3E20D608B35
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS57406.roa
Signing time:             Sat 08 Apr 2023 09:22:13 +0000
ROA not before:           Sat 08 Apr 2023 09:17:13 +0000
ROA not after:            Sat 06 Apr 2024 09:22:13 +0000
asID:                     57406
IP address blocks:        2a12:dd47:8260::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:40:2b:1e:a8:b3:4b:1e:ad:a9:b5:09:4a:6b:f3:e2:0d:60:8b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:13 2023 GMT
            Not After : Apr  6 09:22:13 2024 GMT
        Subject: CN=98C4741DFB680B64E6103B379495A49EB3A86400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:b8:ad:2a:f8:7d:88:c6:72:1b:70:0d:06:
                    6a:83:99:8a:a1:ed:21:93:ed:f4:ee:82:a2:12:53:
                    22:16:4d:38:0a:3c:73:3d:65:32:25:73:2d:18:b3:
                    65:68:cf:3b:04:1d:da:3d:65:6b:96:b3:5b:37:cd:
                    61:79:43:90:f6:fa:11:24:e3:ae:60:a0:5f:43:68:
                    16:07:c5:e1:55:33:7f:bc:d0:79:b1:58:9f:12:f8:
                    bc:0d:37:c9:ef:b3:13:70:8e:12:4c:7d:80:23:b5:
                    45:7c:2f:32:41:e7:d8:ee:de:ce:1f:71:0f:06:32:
                    ac:3d:12:44:34:fe:16:a9:58:36:37:06:69:78:bb:
                    cb:d3:6e:2c:5e:2d:f8:9b:03:4f:8d:28:96:c7:29:
                    fe:26:58:91:ba:d5:9b:e7:13:ed:1c:af:62:22:12:
                    d7:7e:95:d4:69:6c:a8:0f:0d:58:93:f8:9f:c7:22:
                    8e:02:2b:8e:0c:4c:6d:8f:72:fc:76:6d:03:d3:1c:
                    e3:40:c8:ea:26:52:39:63:87:f5:13:54:67:e5:a3:
                    42:f8:d1:4b:32:45:5d:ff:50:97:39:de:83:ed:0a:
                    c8:de:bb:a3:cc:f4:6f:45:00:c6:30:22:b8:7a:5b:
                    a2:ee:c8:9a:ef:ab:d9:bd:32:7b:ae:99:8f:67:90:
                    6a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C4:74:1D:FB:68:0B:64:E6:10:3B:37:94:95:A4:9E:B3:A8:64:00
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS57406.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8260::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:67:58:b1:9c:48:0c:04:58:98:18:09:eb:2c:89:d1:e9:53:
         56:46:d5:e3:57:d9:24:8d:af:ca:a0:fb:5c:2a:d1:38:a6:7b:
         9a:72:f7:df:2b:74:ae:83:68:b7:60:91:b7:5f:a4:6b:0d:b8:
         f9:ed:58:47:0b:b4:ef:ef:72:7f:d6:00:9c:77:93:e4:87:b5:
         2a:3c:79:da:c9:43:72:fc:45:51:ca:93:21:f1:ff:07:aa:e4:
         cb:c0:37:10:a6:c9:cc:49:75:4d:7d:c7:0e:ba:92:3c:9e:9c:
         9b:10:89:b7:88:86:b5:0a:7c:fc:a6:93:51:e4:c5:31:21:07:
         ea:15:97:82:75:ef:47:73:f9:46:d9:ee:c8:a6:55:cb:7c:87:
         49:cd:b2:fa:c0:42:36:b3:4a:af:53:fd:7e:39:5e:2c:2a:dc:
         be:72:d4:02:74:2f:f8:c8:0a:1c:23:7b:01:86:42:3d:e1:23:
         15:a5:8f:ab:df:d1:f1:26:8b:b9:ec:84:92:f8:7d:4d:12:75:
         00:71:ef:fe:e0:02:f4:36:28:a8:f2:8b:28:0c:77:45:0f:70:
         e6:4a:22:c6:71:03:5c:87:14:37:4c:5b:9c:b6:63:a1:5f:10:
         7f:f4:dc:8f:1e:6d:b1:ab:cd:fe:bc:ea:35:de:c2:10:e3:20:
         db:58:c4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----