Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS210810.roa
File:                     AS210810.roa (raw, json)
Hash identifier:          EjMpm613jSU++tBhOk7LEa3M8BKyEaPYUDlIwBqt24c=
Subject key identifier:   74:ED:68:5C:1D:26:31:5A:CA:85:C2:A7:22:21:2B:91:F0:80:2A:1D
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       6317ED6405C70C4835303F57C33DB530A8DFDDC5
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS210810.roa
Signing time:             Sat 08 Apr 2023 03:25:48 +0000
ROA not before:           Sat 08 Apr 2023 03:20:48 +0000
ROA not after:            Sat 06 Apr 2024 03:25:48 +0000
asID:                     210810
IP address blocks:        2a12:dd47:9330::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:17:ed:64:05:c7:0c:48:35:30:3f:57:c3:3d:b5:30:a8:df:dd:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:20:48 2023 GMT
            Not After : Apr  6 03:25:48 2024 GMT
        Subject: CN=74ED685C1D26315ACA85C2A722212B91F0802A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:59:ed:76:37:0f:fb:c8:5f:e6:80:12:6d:
                    f9:59:d5:14:bc:7a:98:95:84:e6:f7:51:d1:bb:20:
                    f8:40:ec:69:fb:e0:7d:f0:68:cc:6d:8c:2f:88:9e:
                    3f:16:ae:3f:f7:98:0c:e2:30:c6:d2:ad:a7:1a:c9:
                    92:a8:dd:01:ae:3d:06:9e:e6:ba:74:22:7b:e0:2d:
                    f4:10:b4:ca:ae:27:af:82:9b:10:d1:63:4b:03:4b:
                    ca:14:78:d1:21:04:d2:d4:94:e1:e5:cf:f8:9e:df:
                    b6:de:86:4c:f2:6c:0e:17:d6:47:d7:7e:27:9f:13:
                    62:40:7a:a5:22:18:7b:c1:b0:0c:8e:4e:7c:d5:c5:
                    a7:25:87:36:4f:b3:29:8d:54:8d:57:3f:e0:1e:e3:
                    4f:96:57:74:b2:a4:9d:58:7c:b8:1d:9a:83:42:fb:
                    45:9d:fc:1a:4a:fc:c7:d1:ae:ec:2b:35:6f:fa:2a:
                    ed:c6:3a:54:10:9c:ee:35:f2:4c:82:9b:ae:0a:67:
                    48:b9:93:22:a7:8c:a6:2e:0f:6f:63:06:6c:49:8a:
                    4a:4b:8f:92:e1:28:39:95:5a:10:22:3e:ec:12:8d:
                    cb:e4:31:09:ae:ad:f3:f1:7a:61:6c:28:c9:15:70:
                    a9:f9:d2:d5:9f:43:5e:a7:8e:66:b5:0a:fd:24:5f:
                    f3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:ED:68:5C:1D:26:31:5A:CA:85:C2:A7:22:21:2B:91:F0:80:2A:1D
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS210810.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:9330::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:64:bc:ed:65:ac:a2:11:5d:d2:02:c2:03:62:17:50:fa:78:
         47:11:7f:59:74:96:38:a9:26:ca:f1:e9:ba:f4:47:a4:a3:b6:
         9a:90:13:02:a8:99:0c:48:30:7e:27:8f:44:42:2f:25:90:d6:
         d1:07:fe:5c:52:6c:48:de:a0:d7:c7:68:8c:5b:4d:47:fa:85:
         f3:9b:74:60:7f:31:c0:f4:eb:2d:38:e4:e2:12:d3:c1:3a:a1:
         4c:7d:ed:4e:8f:39:4c:bd:ae:37:f5:b7:45:91:ae:da:d2:05:
         c0:e9:c8:3a:57:05:d4:11:be:60:ec:d2:ec:17:db:9e:74:75:
         05:e5:5d:2e:97:4f:bd:b7:b1:96:8d:78:f2:37:53:0d:62:06:
         02:2b:59:15:46:6d:de:69:75:20:53:fd:25:58:60:5c:55:de:
         ed:f4:60:86:ba:b0:24:0e:ce:5f:77:ba:13:7c:ea:ef:60:17:
         17:ba:db:f0:89:71:87:0d:45:99:11:5a:31:9d:4c:11:1c:04:
         e3:63:bf:bc:e7:9e:ab:23:d3:46:31:a8:ed:d7:b6:70:64:b4:
         31:b3:c8:73:6c:91:44:f7:fa:0c:1e:69:c5:82:87:25:0b:f3:
         e9:06:91:af:71:41:81:9f:7e:97:f9:b5:5e:ae:b6:5e:40:ed:
         28:8b:76:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----