Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/John/1/326131323a646434373a336530303a3a2f34302d3438203d3e20323030383739.roa
File:                     326131323a646434373a336530303a3a2f34302d3438203d3e20323030383739.roa (raw, json)
Hash identifier:          51wmQTZN48X8QVofV/YfXyz647AWpZf7JmeSjSRWzUo=
Subject key identifier:   72:C3:48:EE:E1:93:B5:0A:B8:A1:EE:53:0B:AB:DC:C5:80:D9:BB:86
Certificate issuer:       /CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
Certificate serial:       1212B0B369235B0B4C8F77580572B4548BAED18B
Authority key identifier: 97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01
Authority info access:    rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer
Subject info access:      rsync://rpki.co/repo/John/1/326131323a646434373a336530303a3a2f34302d3438203d3e20323030383739.roa
Signing time:             Thu 04 Apr 2024 10:14:48 +0000
ROA not before:           Thu 04 Apr 2024 10:09:48 +0000
ROA not after:            Thu 03 Apr 2025 10:14:48 +0000
asID:                     200879
IP address blocks:        2a12:dd47:3e00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:12:b0:b3:69:23:5b:0b:4c:8f:77:58:05:72:b4:54:8b:ae:d1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9788ACA0CB104D300847BED012FAF8E3269E8A01
        Validity
            Not Before: Apr  4 10:09:48 2024 GMT
            Not After : Apr  3 10:14:48 2025 GMT
        Subject: CN=72C348EEE193B50AB8A1EE530BABDCC580D9BB86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5f:c9:e6:8e:97:11:72:bb:fe:8c:c8:2f:4a:
                    96:f1:af:ea:9d:93:e0:a1:f2:e3:13:f7:41:56:e5:
                    93:31:94:97:0b:4c:b4:21:5b:1a:7c:90:50:91:17:
                    af:73:ec:c6:3b:21:90:5d:e3:22:16:fe:e1:a1:66:
                    1c:3c:fc:b0:76:c6:4a:94:97:55:4d:a4:63:26:24:
                    48:e3:6c:cf:6d:b4:d8:e3:d2:98:49:7a:b3:19:0e:
                    67:bb:f4:12:4c:55:44:7e:0a:47:d0:19:34:94:61:
                    c7:8e:61:84:9f:cb:53:15:56:85:4b:07:b7:69:48:
                    45:3b:49:fe:b8:d0:a0:3d:c7:7f:b0:94:1b:c0:7e:
                    8c:a6:ac:d0:69:8f:5d:4a:f8:7d:16:d7:26:4b:2e:
                    2a:e2:1c:8a:1c:5e:f5:17:4e:3f:6e:4c:bf:3b:85:
                    a8:38:67:c2:8c:47:48:4e:4b:6b:5d:bd:05:7e:f1:
                    78:98:18:d5:b8:1a:ba:8e:59:c1:39:15:6d:c9:a5:
                    ce:1a:df:f5:a9:41:55:fa:ad:9f:5f:c8:ca:7a:7f:
                    da:53:93:e7:6d:6c:8e:17:2f:28:0a:f5:dd:a4:83:
                    a2:98:da:a6:68:78:3e:33:4d:cf:db:39:b2:a7:96:
                    79:8e:5d:c9:67:a5:cd:ed:26:a3:1b:23:33:de:c8:
                    74:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C3:48:EE:E1:93:B5:0A:B8:A1:EE:53:0B:AB:DC:C5:80:D9:BB:86
            X509v3 Authority Key Identifier:
                keyid:97:88:AC:A0:CB:10:4D:30:08:47:BE:D0:12:FA:F8:E3:26:9E:8A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/John/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/9788ACA0CB104D300847BED012FAF8E3269E8A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/John/1/326131323a646434373a336530303a3a2f34302d3438203d3e20323030383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:93:ff:eb:f8:93:e5:3c:91:51:59:e6:bd:62:b9:7f:b0:11:
         90:17:5e:bb:f6:6c:d6:5f:c2:c6:9e:37:3e:4e:fb:89:70:de:
         43:81:e3:bb:11:63:2b:30:7d:ef:aa:3c:e4:d7:04:b2:d4:79:
         0d:c7:c4:05:ca:03:8d:96:cc:3e:e9:48:9a:6e:cb:35:32:58:
         84:4a:ba:33:84:42:b9:0c:7c:b9:b5:d6:84:b7:cd:4c:4c:d9:
         39:e6:4c:88:99:a4:65:fc:01:0e:ca:32:3c:26:fe:61:e9:1b:
         4b:25:aa:89:eb:e2:4d:d2:28:d1:3e:9c:1c:0d:68:ca:88:ae:
         3f:84:5b:09:03:0e:ec:bf:81:4a:82:e4:63:a1:59:06:3f:80:
         84:55:98:94:28:34:b1:26:54:4a:a7:73:ac:d2:f4:be:34:c5:
         40:34:74:78:b3:63:e6:cc:36:98:0c:9e:d9:3d:4d:be:46:46:
         6d:b3:23:9a:67:11:f0:f3:00:8a:12:6e:17:d2:7d:82:e6:c0:
         34:22:38:72:e0:5b:fe:20:0f:69:5d:c5:e4:3e:fc:96:3d:24:
         7d:f0:1a:03:3b:ce:b5:20:c1:ab:41:f5:2a:a6:bb:14:34:ee:
         e4:af:b8:4e:88:0d:ee:4a:cb:03:20:8a:0b:64:72:08:14:22:
         9c:5d:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----