Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6SA9YlG_VM5g3h_0ejQFQLqLdtY.roa
File:                     6SA9YlG_VM5g3h_0ejQFQLqLdtY.roa (raw, json)
Hash identifier:          clYKbvuI2rFxfQGUuyuzHvXb1V9E3gkKyyPn/UFW22M=
Subject key identifier:   E9:20:3D:62:51:BF:54:CE:60:DE:1F:F4:7A:34:05:40:BA:8B:76:D6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182B9BCD4D333E075B519B3AD48FC37D1DB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6SA9YlG_VM5g3h_0ejQFQLqLdtY.roa
Signing time:             Sat 20 Aug 2022 05:32:16 +0000
ROA not before:           Sat 20 Aug 2022 05:32:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60379
IP address blocks:        2a06:a005:18a0::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b9:bc:d4:d3:33:e0:75:b5:19:b3:ad:48:fc:37:d1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 20 05:32:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9203d6251bf54ce60de1ff47a340540ba8b76d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:b4:1a:f4:d9:b0:f2:70:a8:ae:97:3d:f4:
                    0f:bc:e4:40:69:b1:d0:d7:f4:be:ee:f0:0a:a1:e6:
                    75:d2:5d:fb:ea:e4:cf:81:64:df:cb:25:5e:b9:ce:
                    d4:ec:b6:7f:32:44:c5:c8:69:be:96:2f:b6:76:51:
                    48:f3:0d:d8:d2:09:72:a2:1d:01:be:e5:ba:b5:d8:
                    ad:c1:3c:03:fb:d9:5e:c6:5b:05:76:92:24:97:d7:
                    80:9a:29:35:82:7d:7c:2b:e7:e6:3c:b6:52:3f:3f:
                    1f:37:c2:f4:27:30:4b:64:75:db:fe:b8:1d:8e:94:
                    04:1a:c5:81:38:8e:cc:0d:d0:82:a2:7a:e4:c9:6f:
                    96:ae:27:2a:86:9e:aa:e1:6b:91:d8:07:bf:d8:08:
                    22:c5:4a:98:69:59:91:58:f4:87:9d:54:7a:74:8b:
                    b0:c2:b6:70:47:1e:53:f7:f4:8c:66:15:2b:a1:3c:
                    4e:79:92:ec:22:e3:09:17:8b:ad:51:e9:79:cb:f9:
                    ed:c5:d4:e7:75:cb:1c:2a:ca:a3:76:a3:35:b7:a9:
                    83:c9:58:f7:7a:76:45:51:ef:87:6f:5d:c0:ee:ac:
                    5f:0f:52:8d:a7:a1:75:38:d4:b1:73:ae:6f:00:1a:
                    be:09:ee:44:ca:91:56:65:6d:18:eb:27:96:c0:a1:
                    b5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:20:3D:62:51:BF:54:CE:60:DE:1F:F4:7A:34:05:40:BA:8B:76:D6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6SA9YlG_VM5g3h_0ejQFQLqLdtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18a0::/44
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:69:4f:b1:83:19:07:3f:96:19:fc:98:98:4c:68:3f:29:67:
         5f:92:29:c5:5c:1a:88:21:16:97:db:89:7f:fb:ee:9f:52:11:
         be:d7:ff:73:f6:12:81:ec:06:69:10:2d:7d:16:f5:15:c2:a1:
         b6:21:2d:66:8f:37:fe:5c:49:b7:b0:24:00:1b:a1:ee:c5:a7:
         22:2e:41:0c:77:0e:98:c7:0a:46:9e:e4:21:d6:d0:69:9c:88:
         c5:46:c1:dd:e9:52:2c:25:79:de:08:f1:a6:95:ed:15:a9:19:
         bd:6e:a2:2b:b4:70:d6:55:95:ee:89:4e:d6:cc:26:85:7b:2b:
         14:2c:1d:6f:8a:bb:8b:cc:34:e0:c5:c8:55:a2:6c:6b:0d:b2:
         01:0f:e7:f2:2f:aa:a0:da:fc:81:12:cb:48:ee:f1:99:c1:bc:
         42:f7:a4:76:d2:7f:9a:f3:30:e2:c4:71:32:68:3f:37:64:23:
         ed:68:f4:54:52:be:a0:c9:f6:25:93:dc:70:8e:67:70:38:fb:
         dc:34:14:54:d3:9c:3d:a1:e9:e2:98:d8:3c:a0:17:c7:d0:b1:
         47:20:02:c0:ac:1b:16:e5:8f:3c:b1:25:a1:40:9d:d1:ca:aa:
         fd:43:44:29:2b:71:40:4c:b0:f2:26:7d:b3:3c:f8:2c:eb:63:
         de:93:b2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----