Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Cube/1/326131323a646434373a666130303a3a2f34302d3438203d3e2030.roa
File:                     326131323a646434373a666130303a3a2f34302d3438203d3e2030.roa (raw, json)
Hash identifier:          bvMA5l3jmoaVa52UPUkLaD+npWbb6fpFoqy8dwmYV2U=
Subject key identifier:   B1:43:84:27:F0:E4:DF:CE:39:4D:CF:20:1E:A7:A9:ED:13:8E:82:9C
Certificate issuer:       /CN=0B9793DB5D4383D5EB9329D4AFB5656B34D22D92
Certificate serial:       13D762D65B819932B2714DE71AC4637705C9C849
Authority key identifier: 0B:97:93:DB:5D:43:83:D5:EB:93:29:D4:AF:B5:65:6B:34:D2:2D:92
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.cer
Subject info access:      rsync://rpki.co/repo/Cube/1/326131323a646434373a666130303a3a2f34302d3438203d3e2030.roa
Signing time:             Thu 11 Jul 2024 20:20:49 +0000
ROA not before:           Thu 11 Jul 2024 20:15:49 +0000
ROA not after:            Thu 10 Jul 2025 20:20:49 +0000
asID:                     0
IP address blocks:        2a12:dd47:fa00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d7:62:d6:5b:81:99:32:b2:71:4d:e7:1a:c4:63:77:05:c9:c8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B9793DB5D4383D5EB9329D4AFB5656B34D22D92
        Validity
            Not Before: Jul 11 20:15:49 2024 GMT
            Not After : Jul 10 20:20:49 2025 GMT
        Subject: CN=B1438427F0E4DFCE394DCF201EA7A9ED138E829C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:af:87:b2:65:8d:66:7f:83:4a:f6:a4:89:ec:
                    c6:d9:a8:23:5b:9b:1e:13:02:dc:b5:b1:b8:a3:49:
                    4f:53:18:15:4a:2d:f0:20:2d:e1:e1:e6:23:3e:dc:
                    ab:8c:2d:66:6f:15:26:02:2c:78:00:f2:8e:20:c7:
                    e7:bf:30:bb:57:21:4b:97:6e:f4:72:2c:6e:ce:e9:
                    fd:7a:61:0e:85:87:5e:72:6d:2a:15:44:a0:86:07:
                    11:a2:c8:93:5f:86:af:0e:f7:9c:b1:6d:7d:fc:52:
                    df:e9:3a:33:e9:21:43:23:a7:b3:79:c7:f7:46:f4:
                    96:12:48:86:bf:e0:a8:7b:f3:19:5a:fb:c7:b1:90:
                    56:eb:75:2f:0d:0d:75:18:94:e3:a4:7f:78:17:ab:
                    76:b6:5f:54:4d:2b:19:15:f2:f5:be:61:02:34:ac:
                    e7:af:a7:02:a6:9f:8c:1f:2d:5f:30:d8:e3:b9:85:
                    84:75:75:c8:0d:eb:51:de:29:4d:67:0f:61:83:b6:
                    6e:a7:9e:bd:ef:53:1c:aa:85:b4:4d:a7:e7:ac:a1:
                    c1:7e:97:65:e5:68:4a:1d:16:fc:a5:52:c1:98:ff:
                    73:8c:7f:fb:ab:ce:51:bf:15:83:db:87:5b:df:e6:
                    e2:7e:1b:9d:06:d7:60:26:5a:18:07:84:45:a0:4b:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:43:84:27:F0:E4:DF:CE:39:4D:CF:20:1E:A7:A9:ED:13:8E:82:9C
            X509v3 Authority Key Identifier:
                keyid:0B:97:93:DB:5D:43:83:D5:EB:93:29:D4:AF:B5:65:6B:34:D2:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/0B9793DB5D4383D5EB9329D4AFB5656B34D22D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/1/326131323a646434373a666130303a3a2f34302d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:90:00:3f:95:b2:a6:48:64:ea:9f:4c:4f:2c:56:ee:1d:97:
         f8:1e:54:a2:4f:ca:ad:35:42:9c:b7:44:df:4e:48:ba:cc:e6:
         f6:55:2a:05:4b:dc:f0:1b:f7:14:9a:b5:8d:49:ba:7e:57:ad:
         66:4d:fd:7c:20:ba:4c:73:50:05:88:f2:7f:1f:6e:f3:4b:a3:
         fd:df:ee:fb:6f:c6:34:42:ee:2c:e2:9f:71:53:13:a2:de:8b:
         d3:16:0f:bc:19:4f:4b:0f:9a:ec:da:b8:dc:71:fa:43:ea:82:
         7f:14:b0:54:77:5c:db:ae:ae:b1:11:c4:2e:74:5e:9b:58:a8:
         b2:5a:22:55:d9:de:3a:1d:ad:ff:5c:be:bb:11:c2:00:2c:91:
         ac:73:86:61:ae:e9:da:17:c6:d0:10:72:77:71:47:1c:b9:7f:
         64:19:f6:60:1a:60:03:84:28:e2:c8:08:33:61:93:ac:a6:bb:
         a8:28:84:a7:a0:42:b8:a5:0c:fa:5c:6e:92:67:10:59:0f:10:
         89:cc:1e:12:5d:c4:f2:12:dd:1e:59:22:ea:88:26:bf:49:16:
         b8:62:52:4b:71:00:57:76:8c:78:53:e9:ad:0c:bd:2c:df:3f:
         57:f6:de:09:8b:de:9a:04:14:1b:67:94:ca:f2:63:71:45:20:
         73:29:97:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----