Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CoEUeYqgQ-jdVAltFLsCkx-s0xE.roa
File:                     CoEUeYqgQ-jdVAltFLsCkx-s0xE.roa (raw, json)
Hash identifier:          TV9u5C+uessek6aBeAc5TDaycr7Rsv8bHi8kEKSFN/M=
Subject key identifier:   0A:81:14:79:8A:A0:43:E8:DD:54:09:6D:14:BB:02:93:1F:AC:D3:11
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018259BF94FB11A5C54C79FF03E436008C09
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CoEUeYqgQ-jdVAltFLsCkx-s0xE.roa
Signing time:             Mon 01 Aug 2022 14:11:43 +0000
ROA not before:           Mon 01 Aug 2022 14:11:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203529
IP address blocks:        2a06:a005:15e0::/44 maxlen: 48
                          2a06:a005:15f0::/44 maxlen: 48
                          2a06:a005:45d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:59:bf:94:fb:11:a5:c5:4c:79:ff:03:e4:36:00:8c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  1 14:11:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a8114798aa043e8dd54096d14bb02931facd311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:8d:db:d9:d5:55:15:4c:9a:fd:12:4b:d2:
                    89:db:26:58:0a:04:47:3b:d7:a5:cf:e6:f2:5b:42:
                    90:0d:f4:15:a6:0e:fe:3e:46:ea:48:79:d8:fc:af:
                    ef:14:02:bd:ec:c2:ee:33:be:27:23:ef:79:2e:fb:
                    0d:89:59:d4:63:4c:16:1d:9f:22:b7:7e:d1:22:ea:
                    7e:ce:d6:c2:17:cf:70:35:dd:54:d3:ce:2d:67:60:
                    67:b1:29:7a:18:8d:dc:f6:f4:5e:d1:54:ab:59:aa:
                    88:2f:13:d2:13:37:2c:6f:97:71:14:7b:fa:3c:fb:
                    c6:a9:55:7d:7c:d4:95:27:94:68:e0:58:b8:10:7c:
                    bb:56:39:5d:71:85:50:33:77:3a:68:51:5b:06:e0:
                    41:6e:63:6f:ed:e0:20:fb:64:a7:b4:f5:b1:cf:eb:
                    8f:e9:dc:35:6f:11:61:4f:35:35:c6:14:c7:d2:4a:
                    53:d5:bd:d8:c5:92:e3:c9:0c:c8:f3:c4:6d:4a:9d:
                    a1:6b:2b:b4:6f:61:38:3e:1b:f1:34:08:22:41:8a:
                    f6:77:6c:4a:dc:25:9a:36:44:20:e2:ab:bd:8f:ce:
                    0b:5e:1b:ae:f5:62:98:bc:dc:fc:27:b1:97:ce:cd:
                    52:89:12:6e:1d:d9:1f:c7:c6:7a:41:6c:78:bb:b9:
                    6f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:81:14:79:8A:A0:43:E8:DD:54:09:6D:14:BB:02:93:1F:AC:D3:11
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/CoEUeYqgQ-jdVAltFLsCkx-s0xE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:45d::/48
                  2a06:a005:15e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         81:92:a5:83:41:41:bf:5f:e1:8c:7f:d7:9f:72:06:a2:a4:c1:
         14:89:67:8b:96:bf:7d:69:11:a9:a7:fa:1c:77:90:90:b3:e0:
         9e:54:d3:23:51:f0:41:68:77:dc:5a:c1:1f:45:a8:cd:bb:a4:
         7c:04:c1:04:e3:fd:23:a9:da:c3:c0:2b:ed:b6:ba:4b:1b:a3:
         5c:a7:c7:1e:77:91:a0:17:d0:86:33:32:36:6e:1a:d3:1f:54:
         e8:bb:7c:39:23:8c:a9:f4:8d:8d:20:e9:c4:56:5c:ea:a3:10:
         28:96:b4:9b:bc:d6:bc:a9:56:cf:0d:c2:9d:cc:f9:a1:77:58:
         2c:5a:7e:8b:b7:8f:9a:d4:64:73:20:d0:83:36:9f:1f:ab:4c:
         a0:2c:77:02:2b:bd:38:5b:12:8d:1c:6d:95:5f:3d:08:fc:e7:
         af:73:32:65:18:d2:6f:e4:30:98:c9:88:69:79:d0:2e:ad:8c:
         41:dd:8c:fe:f1:06:e3:76:69:75:9c:df:eb:15:63:f5:7c:fc:
         fc:36:ff:90:fd:05:c7:a5:15:4a:4b:e2:4d:9c:ec:b5:db:c1:
         85:be:09:79:66:4f:73:0f:ff:b2:34:ae:1d:17:8f:90:31:b7:
         7b:1d:b2:80:77:d6:28:a8:fc:8f:4f:33:2e:1b:72:11:89:d3:
         67:8e:e6:71
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYJZv5T7EaXFTHn/A+Q2AIwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODAxMTQxMTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTgxMTQ3OThhYTA0M2U4ZGQ1NDA5NmQxNGJiMDI5MzFmYWNkMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAKN29nVVRVMmv0SS9KJ2yZYCgRH
O9elz+byW0KQDfQVpg7+PkbqSHnY/K/vFAK97MLuM74nI+95LvsNiVnUY0wWHZ8i
t37RIup+ztbCF89wNd1U084tZ2BnsSl6GI3c9vRe0VSrWaqILxPSEzcsb5dxFHv6
PPvGqVV9fNSVJ5Ro4Fi4EHy7VjldcYVQM3c6aFFbBuBBbmNv7eAg+2SntPWxz+uP
6dw1bxFhTzU1xhTH0kpT1b3YxZLjyQzI88RtSp2hayu0b2E4PhvxNAgiQYr2d2xK
3CWaNkQg4qu9j84LXhuu9WKYvNz8J7GXzs1SiRJuHdkfx8Z6QWx4u7lvnQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAqBFHmKoEPo3VQJbRS7ApMfrNMRMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvQ29FVWVZcWdRLWpkVkFsdEZMc0NreC1zMHhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgagBQRd
AwcFKgagBRXgMA0GCSqGSIb3DQEBCwUAA4IBAQCBkqWDQUG/X+GMf9efcgaipMEU
iWeLlr99aRGpp/ocd5CQs+CeVNMjUfBBaHfcWsEfRajNu6R8BMEE4/0jqdrDwCvt
trpLG6Ncp8ced5GgF9CGMzI2bhrTH1Tou3w5I4yp9I2NIOnEVlzqoxAolrSbvNa8
qVbPDcKdzPmhd1gsWn6Lt4+a1GRzINCDNp8fq0ygLHcCK704WxKNHG2VXz0I/Oev
czJlGNJv5DCYyYhpedAurYxB3Yz+8Qbjdml1nN/rFWP1fPz8Nv+Q/QXHpRVKS+JN
nOy128GFvgl5Zk9zD/+yNK4dF4+QMbd7HbKAd9YoqPyPTzMuG3IRidNnjuZx
-----END CERTIFICATE-----