Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/6/AS50058.roa
File:                     AS50058.roa (raw, json)
Hash identifier:          z1ChyyTdlzRZOh0jrv+779HodYGXKxlsoa+FahZ0W1E=
Subject key identifier:   DE:5A:47:B1:80:15:B3:2D:49:AB:78:46:4B:C3:4F:92:D1:84:8B:04
Certificate issuer:       /CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
Certificate serial:       1F9764B20BF564E939EF9563A2DF8EC7E162EAB4
Authority key identifier: B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer
Subject info access:      rsync://rpki.co/repo/HYSP/6/AS50058.roa
Signing time:             Sat 08 Apr 2023 03:40:17 +0000
ROA not before:           Sat 08 Apr 2023 03:35:17 +0000
ROA not after:            Sat 06 Apr 2024 03:40:17 +0000
asID:                     50058
IP address blocks:        2a12:dd40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:97:64:b2:0b:f5:64:e9:39:ef:95:63:a2:df:8e:c7:e1:62:ea:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b57dcba9fc7b0ef1f3cc80a1aee22c00198e767a
        Validity
            Not Before: Apr  8 03:35:17 2023 GMT
            Not After : Apr  6 03:40:17 2024 GMT
        Subject: CN=DE5A47B18015B32D49AB78464BC34F92D1848B04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:09:f7:70:6c:ed:97:bf:54:4f:dc:df:aa:
                    df:d2:cc:fc:57:37:6c:6c:07:c0:ec:db:a2:b2:ba:
                    1d:55:66:83:ea:62:c2:d3:4a:51:9e:3d:24:80:bc:
                    e4:8c:ed:b6:fe:20:18:57:96:61:18:c6:2c:78:f1:
                    5d:2f:07:16:de:eb:0a:36:91:d1:d2:5d:c6:29:3e:
                    a0:08:13:b7:12:44:ad:2b:37:d1:6d:98:87:87:a2:
                    a8:78:77:39:0c:8e:ea:68:33:9c:3b:d9:e7:13:75:
                    36:50:78:9e:3e:f4:47:d0:7b:a3:36:91:e6:15:7e:
                    c2:d2:79:75:b9:5a:19:a6:c0:10:3f:b4:34:91:f9:
                    d7:8c:b0:2b:67:8f:84:78:1e:14:51:88:f6:7c:2a:
                    8c:d3:7f:50:97:30:a4:70:7a:dc:4d:c5:7f:d1:b0:
                    09:bb:a1:e6:cc:9c:23:97:9b:f5:a7:b9:69:13:9b:
                    f9:bb:9a:e6:8b:77:c4:8a:f0:9e:f3:c4:02:5d:93:
                    aa:09:ea:57:b4:4a:43:09:02:47:d6:7c:73:51:bb:
                    56:43:05:b5:5b:ed:56:2a:c9:44:b5:c6:2d:96:d7:
                    2f:7c:81:98:93:16:f6:05:27:d9:bd:40:6d:5f:b5:
                    46:60:cc:d9:12:0c:b0:4f:a3:a7:34:1f:ab:5f:73:
                    69:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5A:47:B1:80:15:B3:2D:49:AB:78:46:4B:C3:4F:92:D1:84:8B:04
            X509v3 Authority Key Identifier:
                keyid:B5:7D:CB:A9:FC:7B:0E:F1:F3:CC:80:A1:AE:E2:2C:00:19:8E:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/6/B57DCBA9FC7B0EF1F3CC80A1AEE22C00198E767A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tX3Lqfx7DvHzzIChruIsABmOdno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/6/AS50058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         2e:f0:24:96:49:74:d9:83:d7:a5:1b:d6:e7:db:2a:18:63:7a:
         e1:77:a2:29:48:15:2b:ea:67:3a:9a:12:d6:29:d8:e5:7d:85:
         c0:e4:7f:a3:2c:91:ab:58:fb:74:91:05:96:63:15:60:b8:22:
         1c:58:b3:e7:a1:d6:91:2a:d8:3c:73:78:6a:4c:2f:f3:84:5f:
         91:19:10:8c:9d:6f:30:dd:09:97:72:c2:fa:2a:34:9d:4a:ae:
         e1:67:61:e7:21:d1:a9:b2:dd:8e:d6:5a:80:a0:88:5c:59:27:
         fe:16:48:57:cc:b8:b6:76:ad:df:03:f5:b2:12:e2:f3:22:b9:
         bc:70:99:6b:0d:8f:61:85:73:fa:c2:3f:63:3b:6e:b7:20:90:
         b7:00:e2:66:6c:1f:81:91:12:fb:d4:4f:fc:59:97:c9:74:1b:
         de:fa:ef:67:bb:a1:22:19:5a:ec:6e:5a:c7:d1:4b:c8:a9:77:
         d9:4b:9b:58:c6:27:46:b3:f4:dc:66:d2:04:41:49:b7:0a:65:
         e5:61:0b:e3:c7:91:54:35:90:b4:35:21:18:1b:aa:d4:f5:6b:
         03:13:f9:f6:9f:66:ad:e8:1a:d3:62:ae:85:01:01:0b:61:20:
         3d:a5:3f:ce:8f:96:32:21:77:8c:63:fc:15:eb:70:67:6f:7d:
         0c:4e:1c:51
-----BEGIN CERTIFICATE-----
MIIEjDCCA3SgAwIBAgIUH5dksgv1ZOk575Vjot+Ox+Fi6rQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjU3ZGNiYTlmYzdiMGVmMWYzY2M4MGExYWVlMjJjMDAx
OThlNzY3YTAeFw0yMzA0MDgwMzM1MTdaFw0yNDA0MDYwMzQwMTdaMDMxMTAvBgNV
BAMTKERFNUE0N0IxODAxNUIzMkQ0OUFCNzg0NjRCQzM0RjkyRDE4NDhCMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQAn3cGztl79UT9zfqt/SzPxX
N2xsB8Ds26Kyuh1VZoPqYsLTSlGePSSAvOSM7bb+IBhXlmEYxix48V0vBxbe6wo2
kdHSXcYpPqAIE7cSRK0rN9FtmIeHoqh4dzkMjupoM5w72ecTdTZQeJ4+9EfQe6M2
keYVfsLSeXW5WhmmwBA/tDSR+deMsCtnj4R4HhRRiPZ8KozTf1CXMKRwetxNxX/R
sAm7oebMnCOXm/WnuWkTm/m7muaLd8SK8J7zxAJdk6oJ6le0SkMJAkfWfHNRu1ZD
BbVb7VYqyUS1xi2W1y98gZiTFvYFJ9m9QG1ftUZgzNkSDLBPo6c0H6tfc2nTAgMB
AAGjggGWMIIBkjAdBgNVHQ4EFgQU3lpHsYAVsy1Jq3hGS8NPktGEiwQwHwYDVR0j
BBgwFoAUtX3Lqfx7DvHzzIChruIsABmOdnowDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvNi9CNTdEQ0JB
OUZDN0IwRUYxRjNDQzgwQTFBRUUyMkMwMDE5OEU3NjdBLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvdFgzTHFmeDdEdkh6eklDaHJ1SXNBQm1PZG5vLmNlcjBDBggr
BgEFBQcBCwQ3MDUwMwYIKwYBBQUHMAuGJ3JzeW5jOi8vcnBraS5jby9yZXBvL0hZ
U1AvNi9BUzUwMDU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsG
AQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLdQDANBgkqhkiG9w0BAQsFAAOCAQEA
LvAklkl02YPXpRvW59sqGGN64XeiKUgVK+pnOpoS1inY5X2FwOR/oyyRq1j7dJEF
lmMVYLgiHFiz56HWkSrYPHN4akwv84RfkRkQjJ1vMN0Jl3LC+io0nUqu4Wdh5yHR
qbLdjtZagKCIXFkn/hZIV8y4tnat3wP1shLi8yK5vHCZaw2PYYVz+sI/YztutyCQ
twDiZmwfgZES+9RP/FmXyXQb3vrvZ7uhIhla7G5ax9FLyKl32UubWMYnRrP03GbS
BEFJtwpl5WEL48eRVDWQtDUhGBuq1PVrAxP59p9mrega02KuhQEBC2EgPaU/zo+W
MiF3jGP8FetwZ299DE4cUQ==
-----END CERTIFICATE-----