Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/1/AS50058.roa
File:                     AS50058.roa (raw, json)
Hash identifier:          7Gt/gB1CN2g+vv5mjrDf7EBvWmwFFPlsEzKz6s3Kcn8=
Subject key identifier:   8B:F3:83:79:04:0E:5A:50:04:5D:CF:64:C4:B7:0C:25:7E:0F:98:93
Certificate issuer:       /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial:       0E127A3852492DF99C692EBC4190CA3C4D590D0C
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access:    rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access:      rsync://rpki.co/repo/AS945/1/AS50058.roa
Signing time:             Sun 15 Oct 2023 04:14:14 +0000
ROA not before:           Sun 15 Oct 2023 04:09:14 +0000
ROA not after:            Sun 13 Oct 2024 04:14:14 +0000
asID:                     50058
IP address blocks:        194.116.227.0/24 maxlen: 24
                          2001:67c:a84::/48 maxlen: 48
                          2001:67c:a88::/48 maxlen: 48
                          2001:67c:a8c::/48 maxlen: 48
                          2001:67c:a90::/48 maxlen: 48
                          2001:67c:a94::/48 maxlen: 48
                          2001:67c:a98::/48 maxlen: 48
                          2001:67c:a9c::/48 maxlen: 48
                          2001:67c:aa0::/48 maxlen: 48
                          2a12:dd40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:12:7a:38:52:49:2d:f9:9c:69:2e:bc:41:90:ca:3c:4d:59:0d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
        Validity
            Not Before: Oct 15 04:09:14 2023 GMT
            Not After : Oct 13 04:14:14 2024 GMT
        Subject: CN=8BF38379040E5A50045DCF64C4B70C257E0F9893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:2e:53:2f:c8:8d:e2:56:e8:2b:aa:fc:e7:
                    c4:59:be:c1:ac:c1:4c:12:a5:61:42:6f:a6:d8:34:
                    12:48:63:13:3d:a2:2a:f3:7c:c2:ab:8f:17:4b:23:
                    db:7a:6e:02:cc:1c:e7:bb:6a:3c:ef:67:d6:46:db:
                    62:2a:0a:80:d5:43:ff:0d:1a:53:d7:7e:2f:99:2a:
                    ef:f9:d7:d4:84:2e:e7:b8:2a:3f:b8:10:85:ca:7f:
                    56:8e:eb:61:aa:50:9f:d1:b4:18:19:0e:2c:4f:3e:
                    ab:d7:aa:d8:63:ab:32:0f:56:52:7d:2e:73:18:e4:
                    d4:97:4b:e4:5d:41:c2:58:cf:3b:b1:ea:58:7b:c2:
                    b5:89:0c:18:b0:f4:49:a8:e6:5c:21:3a:50:bb:f6:
                    47:1d:5c:2d:c9:2b:9f:0d:73:83:e2:ea:3f:d1:3c:
                    20:e2:d4:20:dc:d1:6b:88:9f:ad:06:2f:57:97:ed:
                    2a:cb:b2:a6:87:4d:c3:46:d2:c7:9b:1f:71:61:ba:
                    d9:4b:bf:e6:6e:7a:a1:e4:04:77:aa:d8:4e:64:b1:
                    bc:44:15:cb:0a:91:cf:99:96:43:08:9e:c0:e8:7c:
                    c7:d6:7d:cb:4f:83:b6:61:0e:65:19:b0:fa:b8:8c:
                    d7:85:c8:47:77:e6:2d:d1:7e:2c:f2:68:6b:0b:16:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F3:83:79:04:0E:5A:50:04:5D:CF:64:C4:B7:0C:25:7E:0F:98:93
            X509v3 Authority Key Identifier:
                keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS50058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.227.0/24
                IPv6:
                  2001:67c:a84::/48
                  2001:67c:a88::/48
                  2001:67c:a8c::/48
                  2001:67c:a90::/48
                  2001:67c:a94::/48
                  2001:67c:a98::/48
                  2001:67c:a9c::/48
                  2001:67c:aa0::/48
                  2a12:dd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         08:63:d9:45:e3:ce:8c:35:9c:01:a3:65:b2:07:de:4a:a3:2d:
         bb:2c:65:81:f0:53:b2:ef:04:7f:a1:c4:8d:28:91:01:4c:d9:
         a3:66:8a:b5:47:16:0b:df:61:4a:9b:fd:bb:c2:de:26:eb:bd:
         34:97:20:a2:e2:8a:0e:98:a9:a1:96:9e:79:7a:a0:62:93:f2:
         06:d4:94:e5:a0:17:ff:e5:fd:52:34:3e:82:b6:e4:36:8e:8f:
         15:c8:c3:65:15:eb:6e:89:70:fc:66:bc:d8:18:96:b7:76:c7:
         83:e1:89:fc:4a:c2:d6:be:17:a5:b3:4d:88:70:33:75:78:fe:
         8c:3d:a3:96:2a:55:93:69:09:71:e4:f8:9a:67:51:8c:51:e4:
         ac:a4:7a:35:cf:65:48:c5:79:32:10:76:8c:e1:4b:ab:c5:28:
         72:7e:a4:43:4f:d1:b0:b4:b1:8a:8b:46:d5:b2:6e:03:2e:5a:
         db:0c:e3:df:be:9a:da:37:8f:d8:d0:1d:46:dc:9e:fb:b0:97:
         55:63:7f:f2:77:f0:66:91:e1:25:b8:46:78:b4:90:d7:ef:6c:
         a3:60:53:b4:1e:7b:1c:39:67:41:41:0a:34:d9:fb:15:90:47:
         12:5a:a1:f1:b1:03:8a:32:f4:f5:99:ec:91:39:f9:5e:2a:01:
         35:7e:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----