Suppose I have a system, where the server requires the clients to attach their ROA certificate to prove that they have the right to that IP Prefix.
Now if the client attaches the ROA certificate ( which has an extension of .roa ) , I am able to pretty print it using rcynic.
When I print it , there are different fields for validity, IP prefix , public key, etc. N
I have come across the RPKI protocol where the ROA's are cached in the router's database and is constantly updated. But I want to know weather I can assume that If a client posseses a ROA certificate, it is valid(after confirming the fields of validity)? Or is there a way to verify that the certificate is valid.