Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/54Qc5PlRRiQE-T9b2sOdxqwVis0.roa
File:                     54Qc5PlRRiQE-T9b2sOdxqwVis0.roa (raw, json)
Hash identifier:          YtR1vO4vFj5Js9yP3581JArLKxvY6SE6vTnoPYkVhaY=
Subject key identifier:   E7:84:1C:E4:F9:51:46:24:04:F9:3F:5B:DA:C3:9D:C6:AC:15:8A:CD
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184D03EBB1C8D583597B3E79464E647207F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/54Qc5PlRRiQE-T9b2sOdxqwVis0.roa
Signing time:             Fri 02 Dec 2022 00:31:22 +0000
ROA not before:           Fri 02 Dec 2022 00:31:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203069
IP address blocks:        2a06:a005:1b20::/44 maxlen: 48
                          2a06:a005:1b70::/44 maxlen: 48
                          2a06:a005:1b10::/44 maxlen: 48
                          2a06:a005:1b00::/44 maxlen: 48
                          2a06:1287:8200::/39 maxlen: 48
                          2a06:a005:1af0::/44 maxlen: 48
                          2a06:a005:488::/46 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a05:dfc7:4800::/40 maxlen: 48
                          2a05:dfc7:6000::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d0:3e:bb:1c:8d:58:35:97:b3:e7:94:64:e6:47:20:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  2 00:31:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e7841ce4f951462404f93f5bdac39dc6ac158acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:68:86:ae:a9:59:09:2b:bc:0b:af:21:33:a0:
                    b6:ec:da:74:b4:14:48:37:fa:6b:6e:54:18:61:b9:
                    60:14:72:3b:43:3c:53:1e:00:8e:2b:1e:82:eb:29:
                    d7:43:c0:e9:00:c8:b8:23:db:73:b1:f9:b5:43:56:
                    0e:f9:46:36:ef:6e:e1:21:13:f9:8f:f9:c3:0c:30:
                    69:e7:d5:b8:ba:e7:7c:b9:9d:24:4d:0b:72:ff:e6:
                    d3:e7:b3:3e:23:e6:49:3c:64:62:62:a8:c6:f7:eb:
                    13:c9:37:bb:3a:fc:e4:0e:2d:db:88:76:44:f9:42:
                    fa:b8:d2:37:8d:0a:a5:85:22:ea:22:51:ef:20:d8:
                    93:86:82:55:a8:31:73:7b:c9:53:17:07:c1:0e:1e:
                    df:f3:81:85:f7:31:27:c8:94:3a:10:99:73:b9:87:
                    2d:5e:4f:f2:c3:a9:b8:f7:78:85:80:5f:54:fb:1e:
                    bb:66:a4:0f:a1:4e:d7:ef:3f:00:5d:01:02:1c:3e:
                    ea:46:77:c5:c1:f3:39:77:97:05:59:0b:7a:a4:a7:
                    a0:81:eb:53:66:6c:a6:9d:91:25:ea:4f:b6:b9:eb:
                    76:45:68:69:2f:fa:e0:a5:22:7c:34:94:e9:43:73:
                    6e:68:16:e5:af:9e:ba:02:d9:de:ac:bd:65:df:d8:
                    93:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:84:1C:E4:F9:51:46:24:04:F9:3F:5B:DA:C3:9D:C6:AC:15:8A:CD
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/54Qc5PlRRiQE-T9b2sOdxqwVis0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4800::/40
                  2a05:dfc7:6000::/39
                  2a06:1287:8200::/39
                  2a06:a005:488::/46
                  2a06:a005:1af0::-2a06:a005:1b2f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1b70::/44
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:c3:85:22:14:3a:2b:46:ac:cc:ff:7b:07:28:a6:97:96:bf:
         31:fe:18:2c:31:2f:48:e4:5f:f8:42:f9:18:f9:f9:3b:31:20:
         12:47:33:0c:5b:c6:45:c2:80:a2:28:2d:ea:27:c7:77:bd:a9:
         a9:2c:e3:65:68:41:07:2a:ec:1b:a0:89:c5:bf:6e:4d:0a:dd:
         80:09:40:b0:03:98:71:2e:72:e1:d3:92:28:6e:cf:b4:59:60:
         79:72:21:79:74:8a:4f:a4:02:a5:4c:3a:f6:da:9b:5c:74:01:
         69:a9:52:9f:95:92:02:9d:9f:f4:f9:58:f2:9e:b5:a7:d7:c9:
         ff:b8:b0:07:90:80:28:df:9a:2e:70:cf:08:4c:30:59:51:47:
         0a:23:fa:4e:68:27:a3:f2:1a:41:81:ab:12:c0:47:6c:9a:6e:
         69:15:fb:51:54:e4:6d:46:f4:c6:82:65:09:e6:c4:f5:9f:50:
         8d:b8:b2:7f:30:f4:fd:a5:83:6c:ba:45:d7:06:26:e0:86:7d:
         07:90:1c:de:94:fa:c4:3a:75:13:aa:76:d3:48:3f:69:aa:9c:
         76:91:cd:ea:75:60:f0:39:b3:85:d4:32:6e:c7:7d:30:99:f5:
         07:52:c3:cb:4b:bd:92:88:7b:54:a8:2e:b9:92:ff:7f:33:9a:
         c6:dd:06:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----