Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/70aUyx11Vz3F-7fUOpyXhS-tn3E.roa
File:                     70aUyx11Vz3F-7fUOpyXhS-tn3E.roa (raw, json)
Hash identifier:          wYDOq2aVkNav2Iwca+BEVJafSC+JNwz7mm2PkZN0UKc=
Subject key identifier:   EF:46:94:CB:1D:75:57:3D:C5:FB:B7:D4:3A:9C:97:85:2F:AD:9F:71
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42F8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/70aUyx11Vz3F-7fUOpyXhS-tn3E.roa
Signing time:             Fri 11 Feb 2022 00:30:05 +0000
ROA not before:           Fri 11 Feb 2022 00:30:05 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17144 (0x42f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 11 00:30:05 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=EF4694CB1D75573DC5FBB7D43A9C97852FAD9F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:9e:4a:6d:04:5e:f3:71:50:cc:47:a5:37:
                    99:95:b2:24:05:0b:a5:76:29:d2:56:1e:19:f7:69:
                    08:e9:a2:ce:41:f8:97:e3:0c:fb:56:ae:de:92:37:
                    25:de:cc:a1:2d:f4:6d:d1:90:f8:ab:aa:d5:b3:52:
                    1a:96:10:49:a8:54:90:35:e3:3e:2b:39:c9:6c:34:
                    ce:08:83:a3:11:f6:ef:83:58:c5:ca:f6:ba:2f:f2:
                    fe:72:0f:4e:7e:81:db:32:d4:07:a6:02:28:47:de:
                    71:12:55:20:e1:10:e8:49:1c:11:d2:b5:d8:f7:af:
                    b1:33:7a:90:14:cb:50:09:85:ae:5f:f3:7d:45:4f:
                    90:30:e0:85:a4:07:65:4d:16:13:37:6e:cf:49:64:
                    66:f2:9b:d6:3e:1e:01:bf:7a:68:b4:e5:83:53:da:
                    2b:c1:4f:61:64:44:ce:ee:6d:87:30:25:27:2d:f4:
                    31:53:36:7b:0a:b5:fb:f0:d3:e4:48:96:86:42:76:
                    82:86:96:56:e6:f5:1b:25:a4:20:1b:0d:7f:e7:69:
                    f9:cc:16:3e:0f:97:49:a7:47:4c:0f:79:cf:0e:09:
                    57:1d:51:d7:1b:27:ee:e7:36:cd:ca:65:45:5c:83:
                    59:04:10:b5:db:80:cd:6d:f1:26:9e:85:a9:bc:13:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:46:94:CB:1D:75:57:3D:C5:FB:B7:D4:3A:9C:97:85:2F:AD:9F:71
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/70aUyx11Vz3F-7fUOpyXhS-tn3E.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:21:bd:18:da:79:4d:cc:37:bb:62:b9:95:9c:7b:e3:f0:05:
         41:cf:2e:8e:8c:4c:93:71:af:93:ac:2d:b0:ea:04:b1:a8:40:
         17:93:2a:57:10:bb:f3:9c:fd:fa:ea:f5:74:00:d8:12:9d:63:
         05:e2:b1:4a:e8:a3:0f:26:b4:ab:9d:30:d3:07:a2:c8:f6:d2:
         2d:1e:6f:21:9c:7e:05:03:99:1b:a8:14:12:9f:d6:09:2d:46:
         f2:7a:70:48:88:35:6a:74:75:48:df:a1:89:63:fd:81:03:09:
         d4:57:f3:8c:8e:c9:88:28:de:cc:2d:8e:93:b1:d5:96:c7:c2:
         1c:cf:27:fd:ad:aa:b3:07:bb:ed:71:ed:a9:b4:d8:c3:8e:6d:
         5e:99:9c:41:ed:01:91:f5:0e:80:9d:86:86:b4:fe:c7:a4:0f:
         e8:75:ef:43:26:f9:94:ba:85:4e:93:a4:4a:78:6b:65:52:54:
         c3:a7:a0:7b:77:37:bb:fa:2a:99:9f:4c:b6:72:06:0f:f2:79:
         fc:fc:c5:7e:5c:f1:39:65:64:e6:29:5c:9c:78:a9:52:f1:ea:
         bc:3e:8a:6c:88:c0:e3:0d:49:ca:0d:cd:ce:67:5a:e1:95:a9:
         6c:7d:01:8b:0e:ff:f6:2b:e0:bf:07:ee:af:86:73:c5:f0:b3:
         aa:8f:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----