Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/AS50058.roa
File:                     AS50058.roa (raw, json)
Hash identifier:          WJtmz/hsE7z5RQ3EpLcTz1Jeadd49oVm8XVsyq9jV4U=
Subject key identifier:   D5:7E:4E:78:D6:0D:82:53:DF:04:64:79:3B:F3:D5:AE:41:72:92:BA
Certificate issuer:       /CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
Certificate serial:       2EFADE9E4C952BA78D030FE45560FBE268923A01
Authority key identifier: 95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2
Authority info access:    rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer
Subject info access:      rsync://rpki.co/repo/August/2/AS50058.roa
Signing time:             Sat 08 Apr 2023 09:22:14 +0000
ROA not before:           Sat 08 Apr 2023 09:17:14 +0000
ROA not after:            Sat 06 Apr 2024 09:22:14 +0000
asID:                     50058
IP address blocks:        2001:67c:a80::/48 maxlen: 48
                          2001:67c:a84::/48 maxlen: 48
                          2001:67c:a88::/48 maxlen: 48
                          2001:67c:a8c::/48 maxlen: 48
                          2001:67c:a90::/48 maxlen: 48
                          2001:67c:a94::/48 maxlen: 48
                          2001:67c:a98::/48 maxlen: 48
                          2001:67c:a9c::/48 maxlen: 48
                          2001:67c:aa0::/48 maxlen: 48
                          2a12:dd40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fa:de:9e:4c:95:2b:a7:8d:03:0f:e4:55:60:fb:e2:68:92:3a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9505B9F4CB411DD853C070AC476A01FEDA21C8D2
        Validity
            Not Before: Apr  8 09:17:14 2023 GMT
            Not After : Apr  6 09:22:14 2024 GMT
        Subject: CN=D57E4E78D60D8253DF0464793BF3D5AE417292BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:21:c3:85:87:65:33:e4:a2:ab:6c:18:27:ee:
                    6e:93:a0:1d:f7:e2:e0:bd:2a:b0:19:08:70:59:7f:
                    ca:51:10:8b:47:b7:b1:33:a2:01:0e:76:03:8e:f5:
                    08:5d:8b:cf:3f:86:83:e9:2d:6b:fe:60:30:1a:f0:
                    9f:4b:fb:2f:e6:f5:05:ec:ab:53:d2:c8:33:1a:64:
                    17:55:73:26:e6:86:67:c5:17:88:8b:26:0c:e5:b6:
                    34:54:d9:54:35:6d:74:38:fd:98:60:92:d4:71:ef:
                    46:6d:32:25:ba:77:d0:29:3e:bd:31:0f:75:cd:14:
                    a6:bc:2c:83:08:f0:ff:1d:ea:ae:9d:74:0e:c5:f8:
                    aa:6d:a5:14:df:09:52:03:a1:21:94:56:ec:d2:0c:
                    fc:3b:d3:b8:2f:52:ce:41:bb:95:a4:bf:db:12:4a:
                    12:4e:93:ce:2d:b5:8b:e2:59:f9:d3:99:c2:63:40:
                    43:70:a4:b8:8a:92:41:5b:2f:d7:e0:c2:83:87:db:
                    1b:94:11:0e:e2:e7:45:b0:eb:a4:b9:2a:bc:3d:e1:
                    5f:de:90:46:7b:d6:9b:21:20:97:cc:79:1d:60:88:
                    36:c7:90:b3:7f:24:0d:18:a5:39:a0:98:dd:14:a1:
                    eb:7d:7a:21:ce:29:e6:7b:04:2a:08:c4:17:96:5e:
                    6c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7E:4E:78:D6:0D:82:53:DF:04:64:79:3B:F3:D5:AE:41:72:92:BA
            X509v3 Authority Key Identifier:
                keyid:95:05:B9:F4:CB:41:1D:D8:53:C0:70:AC:47:6A:01:FE:DA:21:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/9505B9F4CB411DD853C070AC476A01FEDA21C8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/AS50058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a80::/48
                  2001:67c:a84::/48
                  2001:67c:a88::/48
                  2001:67c:a8c::/48
                  2001:67c:a90::/48
                  2001:67c:a94::/48
                  2001:67c:a98::/48
                  2001:67c:a9c::/48
                  2001:67c:aa0::/48
                  2a12:dd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         9e:75:6a:49:35:d5:44:25:e8:71:48:f6:99:47:45:b6:76:3b:
         c6:ef:13:14:65:a6:dc:01:45:ce:84:19:91:78:50:22:48:d2:
         3e:70:71:47:27:1c:08:62:63:30:a1:01:8a:c1:c9:a6:e7:90:
         35:a6:67:d2:23:80:fb:00:41:28:a5:10:0d:03:0b:7e:68:82:
         05:fd:a4:cd:47:82:42:fc:dd:6d:29:e0:a0:3d:c6:f1:f5:52:
         0c:97:82:50:17:61:a5:f0:ab:b1:da:3d:1a:f7:90:2b:80:0b:
         ed:c8:af:8b:2d:ab:ba:e9:dc:79:62:00:0d:ca:55:03:fc:46:
         3c:8f:03:f1:a5:69:8b:33:75:1b:23:92:93:eb:bb:2e:d6:5d:
         27:9f:55:52:98:70:f3:30:7c:c6:6b:84:da:54:d2:1b:4b:da:
         ce:9a:1e:1a:0a:9d:59:06:29:1c:71:29:49:ff:14:fc:c2:95:
         db:87:47:0f:6a:ed:68:c3:39:f8:f8:6e:29:87:48:0c:13:01:
         fb:9b:47:2d:73:44:a0:56:88:b7:1a:67:be:ce:07:e3:eb:94:
         02:a8:5e:db:0f:b2:57:24:c7:b0:e8:4d:cc:a9:d2:fc:9f:d1:
         d7:24:7c:ec:ff:f8:51:f2:22:5d:12:93:5f:f7:81:68:43:9b:
         87:e1:3c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----