Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4Su1jf3EEw7ixJdpzHgWDyuV8BM.roa
File:                     4Su1jf3EEw7ixJdpzHgWDyuV8BM.roa (raw, json)
Hash identifier:          G+iOHQo2Tm28KlWUBNwn6w62s3tY1aXPDHJe4ERy+A0=
Subject key identifier:   E1:2B:B5:8D:FD:C4:13:0E:E2:C4:97:69:CC:78:16:0F:2B:95:F0:13
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183ADAE724074A108847DE8D739DEA46A6D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4Su1jf3EEw7ixJdpzHgWDyuV8BM.roa
Signing time:             Thu 06 Oct 2022 14:23:54 +0000
ROA not before:           Thu 06 Oct 2022 14:23:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203040
IP address blocks:        2a06:a005:ba1::/48 maxlen: 48
                          2a06:a005:ba2::/48 maxlen: 48
                          2a06:a005:ba0::/48 maxlen: 48
                          2a06:a005:5e0::/48 maxlen: 48
                          2a06:a005:5bb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ad:ae:72:40:74:a1:08:84:7d:e8:d7:39:de:a4:6a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct  6 14:23:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e12bb58dfdc4130ee2c49769cc78160f2b95f013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6a:31:33:ef:2f:3f:72:68:69:a9:de:5a:85:
                    88:fb:80:79:27:ad:b1:66:44:dc:73:16:f8:7d:e3:
                    a8:97:07:45:2b:89:b0:91:11:e0:36:87:ab:e8:0b:
                    ba:14:fa:b6:e0:4b:14:12:77:4b:1a:16:c6:1d:e3:
                    b1:7f:ea:9f:df:e8:9c:92:e4:aa:35:ca:6d:8c:91:
                    72:12:b7:a6:c3:79:5f:5e:bb:f8:6b:3b:5c:03:4f:
                    b3:40:1e:39:dc:0c:95:9b:fd:77:b6:8b:6d:e9:48:
                    21:5c:11:fa:6a:c0:6a:49:e2:44:44:3b:3b:b5:aa:
                    9a:98:4f:cd:ec:8f:29:76:7b:95:ed:dc:be:9c:7f:
                    11:f4:b8:71:c7:3b:62:74:77:96:e9:c6:22:81:de:
                    22:e1:e3:1b:62:db:aa:2f:35:24:fc:a3:65:1a:5c:
                    50:ea:ef:7f:07:91:d7:d6:7b:e8:07:b5:be:e8:4b:
                    d4:0c:7a:4c:b6:51:08:f5:f2:d3:70:f8:02:69:58:
                    89:d0:a4:b4:83:56:9e:c0:4f:83:b5:13:c8:f8:09:
                    b2:80:db:c7:c4:7e:fd:72:6e:cf:0b:0c:7f:bc:be:
                    da:0f:e2:9f:ae:8c:09:4a:f3:86:0a:fa:b2:3f:e8:
                    ae:5c:88:8b:25:3d:f0:e6:ec:38:d3:1a:bb:44:54:
                    3d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2B:B5:8D:FD:C4:13:0E:E2:C4:97:69:CC:78:16:0F:2B:95:F0:13
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4Su1jf3EEw7ixJdpzHgWDyuV8BM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5bb::/48
                  2a06:a005:5e0::/48
                  2a06:a005:ba0::-2a06:a005:ba2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4a:bd:c0:df:44:3c:db:05:2f:1f:d8:bb:70:40:e9:8b:17:31:
         d8:78:3c:3a:2a:32:82:e7:ef:18:83:75:6f:d9:41:51:88:b1:
         6d:ee:de:d2:2c:1e:67:84:42:cb:7a:6c:cb:90:b0:6b:36:fe:
         d8:59:ad:0e:09:29:78:a9:96:2c:03:a7:60:cb:04:3c:65:ce:
         e9:f5:d2:0f:de:72:35:5a:4b:23:ab:e7:b4:c6:e9:18:00:9e:
         45:79:7d:63:07:2b:2c:1f:04:5e:aa:8f:3b:db:85:4d:16:0c:
         9c:4c:df:12:4c:d1:20:43:bf:d5:07:77:f6:f9:51:08:76:b2:
         c3:b6:52:61:b2:88:70:7d:86:cd:b7:97:a5:e7:4d:17:a4:7a:
         8d:e6:38:16:e9:d9:75:dd:4c:d9:a7:59:e2:2c:3f:07:c3:79:
         8f:a0:3a:2e:c0:47:6a:8c:e0:2c:6f:e7:f3:85:cd:72:58:c4:
         67:f3:d4:62:dd:5d:02:11:e8:5f:9b:00:b3:7b:25:fe:db:d0:
         28:6b:c3:4e:db:9e:c0:62:61:9f:bb:44:77:11:ec:55:fb:a1:
         ff:e3:82:11:62:a7:82:6e:75:8a:f3:b5:fd:2d:06:55:0c:9e:
         ce:18:49:7b:5d:7b:ac:7a:f2:20:21:dd:21:51:52:8f:44:62:
         eb:17:20:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----