Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HPGDnUA-3UOyuAIWxL3G_HkH-Y4.roa
File:                     HPGDnUA-3UOyuAIWxL3G_HkH-Y4.roa (raw, json)
Hash identifier:          mbJI7zrxiNNdr7FtHGbW/Bf1mlQ520CqjYZLPSoaaeg=
Subject key identifier:   1C:F1:83:9D:40:3E:DD:43:B2:B8:02:16:C4:BD:C6:FC:79:07:F9:8E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181F7FFE0B1C0CAFF05991B57DA02C2C73B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HPGDnUA-3UOyuAIWxL3G_HkH-Y4.roa
Signing time:             Wed 13 Jul 2022 14:39:10 +0000
ROA not before:           Wed 13 Jul 2022 14:39:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203899
IP address blocks:        2a06:a005:1230::/44 maxlen: 48
                          2a06:a005:1210::/44 maxlen: 48
                          2a06:a005:1240::/44 maxlen: 48
                          2a06:a005:1220::/44 maxlen: 48
                          2a06:a005:1200::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f7:ff:e0:b1:c0:ca:ff:05:99:1b:57:da:02:c2:c7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 13 14:39:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1cf1839d403edd43b2b80216c4bdc6fc7907f98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:bb:d8:e7:06:d8:84:d2:ea:e5:ba:01:75:
                    b5:50:84:7b:dc:d4:89:0d:36:54:7d:95:6d:59:69:
                    5b:44:0c:b6:79:02:81:df:72:ed:46:3b:55:98:de:
                    05:1e:8b:20:f1:de:ce:42:e9:aa:e7:0a:d3:b0:6f:
                    99:ac:99:79:9e:e7:68:b1:45:d2:fd:e5:c5:3b:a0:
                    38:fa:54:cd:9c:78:75:2d:8b:c3:41:e4:10:d8:cc:
                    91:86:7d:c1:aa:9f:31:c3:20:f5:3a:7c:49:1e:30:
                    6d:4e:45:d3:5c:49:ad:91:51:bc:46:3e:ea:19:f7:
                    7c:f2:26:a5:10:b4:32:7f:cf:e8:29:b3:df:26:4d:
                    e0:32:38:2f:3e:77:48:9b:e3:f9:56:dd:7b:41:db:
                    4e:94:25:fd:74:3f:5a:11:89:3b:14:5e:6b:de:80:
                    ab:b8:46:f5:c9:1f:5c:ca:88:57:3f:df:b5:9e:37:
                    df:4c:62:d4:d5:24:4e:33:12:d6:38:df:f3:17:29:
                    db:85:ea:41:a0:b6:1e:c6:48:ae:02:11:08:d7:9e:
                    d2:f6:fd:fa:76:95:7b:31:d4:a9:f1:5b:4e:a3:9b:
                    1f:c1:f3:ad:43:ef:4b:68:1e:70:ff:26:48:78:e2:
                    3f:ed:de:12:c5:47:f6:83:02:3a:76:6c:ee:1a:51:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F1:83:9D:40:3E:DD:43:B2:B8:02:16:C4:BD:C6:FC:79:07:F9:8E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/HPGDnUA-3UOyuAIWxL3G_HkH-Y4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1200::-2a06:a005:124f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         13:d1:c8:a9:bc:a1:57:d8:a8:53:11:94:b6:31:74:6f:24:8b:
         f1:e2:df:e7:53:07:83:93:50:e0:18:c0:c3:7c:36:ac:86:0f:
         6c:7b:70:61:68:3b:31:15:d3:c7:d7:4c:d2:72:ce:ad:23:68:
         fc:01:c4:f8:9c:04:76:60:d0:b6:46:7b:ea:37:bd:43:7e:1b:
         9e:20:a6:1b:dc:e1:1b:f6:62:bc:ce:5b:cb:03:c6:8b:02:2c:
         92:0f:f5:d6:1f:25:31:6e:d3:4e:5e:11:bf:d6:f6:4a:05:f0:
         9b:de:5e:29:af:71:47:df:e5:65:28:c2:83:11:6a:f8:b3:46:
         e9:eb:1a:5d:88:d5:e7:60:0b:bc:37:5b:24:24:89:b2:33:dc:
         01:19:7d:17:e6:15:b7:8f:7b:46:a0:49:f4:ba:b6:0f:4d:57:
         5b:57:78:4f:62:ab:e3:89:c4:ff:ff:af:64:09:27:59:6c:7d:
         34:bb:23:be:c2:bf:0b:d3:80:ea:a0:bc:f5:c0:b0:e4:f7:b7:
         27:3f:8a:fc:46:6a:67:ac:5d:a7:b0:93:79:13:b2:ed:82:08:
         ad:f7:e9:66:d0:a8:17:46:7c:2b:17:e1:df:b9:a4:b3:26:62:
         88:27:c1:18:72:02:6a:1c:6d:64:8f:4f:56:50:3c:e5:b5:df:
         61:6c:ee:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----