Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F0rlF58n17dh5R9nNQ8_PFB7Zok.roa
File:                     F0rlF58n17dh5R9nNQ8_PFB7Zok.roa (raw, json)
Hash identifier:          hWez0lO+S0oeNzTr6VZK8aA0dZ8i9Sm5IkBjLJ9YoZ4=
Subject key identifier:   17:4A:E5:17:9F:27:D7:B7:61:E5:1F:67:35:0F:3F:3C:50:7B:66:89
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018203DBC48DFF520CEAD8BE05C1F10FBE6C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F0rlF58n17dh5R9nNQ8_PFB7Zok.roa
Signing time:             Fri 15 Jul 2022 21:55:10 +0000
ROA not before:           Fri 15 Jul 2022 21:55:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210387
IP address blocks:        2a06:a005:857::/48 maxlen: 48
                          2a06:a001:a0f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:03:db:c4:8d:ff:52:0c:ea:d8:be:05:c1:f1:0f:be:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 15 21:55:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=174ae5179f27d7b761e51f67350f3f3c507b6689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:44:49:59:bb:67:e1:5d:cd:52:f7:73:0b:a9:
                    2e:c9:1b:6d:40:98:91:fd:77:bd:e9:7b:68:33:09:
                    1a:61:91:ca:c1:e2:67:53:1a:9f:27:cf:79:b6:79:
                    2b:8e:0d:fd:99:71:13:6d:58:73:89:7a:a4:8c:cd:
                    2f:0e:2e:5b:7c:30:10:4f:6e:fb:d6:1c:9b:9a:a4:
                    41:d1:ca:64:ae:2c:30:ed:bd:c5:89:a9:05:9c:f2:
                    79:b8:a4:2f:91:60:e9:58:b0:e0:ea:6b:65:f6:e3:
                    f8:77:17:f6:b4:36:bf:6f:af:20:73:4e:e8:ff:a0:
                    dc:28:86:5a:60:68:57:a3:95:71:d8:61:d7:c6:81:
                    61:93:e3:1c:96:a7:79:0a:e7:8f:8c:0f:e6:4d:35:
                    eb:91:e5:03:99:ff:d0:39:27:d9:25:04:b4:06:88:
                    4e:c7:ec:11:93:06:18:3f:3b:bb:65:a0:dd:ba:55:
                    da:70:e5:32:d6:82:e0:52:03:b2:56:16:90:d7:b4:
                    b0:7f:66:62:4d:fe:3f:0d:a6:fd:5c:aa:20:eb:8f:
                    ab:e0:3d:2b:23:85:5a:49:f3:0d:1c:23:cc:5b:04:
                    fa:05:60:4b:b9:65:88:bd:52:21:80:7a:67:2e:d6:
                    5a:b9:fa:03:39:46:4a:8f:d0:fe:ac:c8:9f:19:24:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4A:E5:17:9F:27:D7:B7:61:E5:1F:67:35:0F:3F:3C:50:7B:66:89
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F0rlF58n17dh5R9nNQ8_PFB7Zok.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a0f0::/44
                  2a06:a005:857::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:0c:f2:57:d3:a8:35:ec:9e:87:04:d0:89:a4:f2:b2:dd:62:
         d7:bc:3b:3e:33:4c:82:48:ef:59:ab:6b:90:a3:8f:1f:44:b3:
         12:e9:73:3d:4f:a0:7e:22:df:7a:c1:a7:d1:74:f4:ae:90:f7:
         8e:a6:a9:d4:90:58:6b:9b:14:01:b9:d5:c9:5f:de:00:ab:3a:
         62:41:fe:22:ed:52:2d:3b:d6:4b:30:b2:18:63:ad:a8:22:0f:
         12:63:a2:5a:d3:08:fe:f0:ee:be:2b:5b:f2:1c:a3:f6:9d:8c:
         fe:a2:16:77:96:86:e1:64:d4:d0:d2:0d:35:e3:13:0e:d7:09:
         44:8c:7d:01:a4:02:d1:bb:8d:54:9c:ec:56:c5:95:13:2c:98:
         b5:f7:70:a1:40:eb:b3:d2:6f:b5:f7:42:9e:e2:54:9c:62:d6:
         18:e1:a1:7d:be:6a:33:e5:8e:c3:71:bb:70:6e:fb:6a:eb:90:
         0b:b6:d1:d4:51:0d:05:fb:47:73:ec:18:1e:0d:22:30:f7:8a:
         36:3a:23:40:da:d8:fc:9c:50:c2:9d:fb:d7:48:48:b1:ed:9b:
         4b:48:9f:ed:f0:82:a2:0e:8a:28:dd:07:f6:2b:0f:2f:17:48:
         20:27:91:4d:66:14:44:51:ba:2e:ee:58:be:65:2d:ca:13:86:
         8c:ad:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----