Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JLGnL790XuEyEXqAscHp8oMKqUE.roa
File:                     JLGnL790XuEyEXqAscHp8oMKqUE.roa (raw, json)
Hash identifier:          vsZOD+kACOGyjbKE9vdU7Es754Zl+WsXGjvGijsyYCw=
Subject key identifier:   24:B1:A7:2F:BF:74:5E:E1:32:11:7A:80:B1:C1:E9:F2:83:0A:A9:41
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184BF4A7A9F4D2C5CC77FB145CE9BB1DA43
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JLGnL790XuEyEXqAscHp8oMKqUE.roa
Signing time:             Mon 28 Nov 2022 17:30:39 +0000
ROA not before:           Mon 28 Nov 2022 17:30:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54681
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:1980::/44 maxlen: 48
                          2a06:a005:f00::/44 maxlen: 48
                          2a06:a005:1960::/44 maxlen: 48
                          2a06:a005:ee0::/44 maxlen: 48
                          2a06:a005:f20::/44 maxlen: 48
                          2a06:a005:18a0::/44 maxlen: 48
                          2a07:54c7::/32 maxlen: 48
                          2a06:a005:1506::/48 maxlen: 48
                          2a06:9f80::/29 maxlen: 48
                          2a06:a005:1970::/44 maxlen: 48
                          2a06:a005:ef0::/44 maxlen: 48
                          2a06:a005:1950::/44 maxlen: 48
                          2a06:a005:f10::/44 maxlen: 48
                          2a06:a005:1c7e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:bf:4a:7a:9f:4d:2c:5c:c7:7f:b1:45:ce:9b:b1:da:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 28 17:30:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=24b1a72fbf745ee132117a80b1c1e9f2830aa941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:f6:bc:98:7d:8b:3e:6e:b4:ba:bc:ea:17:
                    93:72:45:a4:c1:d3:ba:c8:b8:dc:ab:6a:4f:6a:17:
                    56:ef:97:59:77:f2:bb:1c:a4:dd:05:46:40:45:8e:
                    8b:60:e7:4b:34:81:fd:0b:9b:72:87:61:0d:ff:a4:
                    64:9e:5e:38:b4:2c:d7:12:a0:c2:f4:b5:a4:28:a5:
                    3a:31:5e:e3:3d:48:1e:ed:4e:28:bc:26:82:cd:e3:
                    3d:55:46:b0:e3:3b:5c:5a:41:91:ed:6e:b4:87:a3:
                    c5:f4:cf:63:9a:c3:d3:19:84:ea:49:a5:82:a2:2e:
                    46:4e:df:de:27:99:43:f3:06:8e:a2:ab:b8:29:93:
                    a3:ef:b2:27:6e:24:57:b5:7a:52:95:b9:d0:85:be:
                    8f:c4:fa:82:83:22:ab:9f:9b:23:8a:dd:bf:11:94:
                    98:a7:8a:34:2f:35:73:22:d7:8b:91:92:49:64:88:
                    e4:95:05:f5:87:26:0f:9d:6d:34:32:6f:94:c9:ea:
                    88:2c:01:3d:b1:58:98:65:dd:70:1b:85:69:f6:14:
                    97:bc:d4:cb:74:b7:1e:97:7a:b9:41:a7:59:38:89:
                    63:63:c3:f1:8c:1e:46:59:74:d5:59:af:33:d9:84:
                    23:27:db:91:6d:24:2c:2b:e6:38:94:62:51:29:e7:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B1:A7:2F:BF:74:5E:E1:32:11:7A:80:B1:C1:E9:F2:83:0A:A9:41
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/JLGnL790XuEyEXqAscHp8oMKqUE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f80::/29
                  2a06:a005:ee0::-2a06:a005:f2f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1506::/48
                  2a06:a005:18a0::/44
                  2a06:a005:1950::-2a06:a005:198f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1c7e::/48
                  2a07:54c2:b00b::/48
                  2a07:54c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:67:8d:2c:3d:a1:9a:7c:af:23:18:18:79:48:0d:56:dc:89:
         09:fb:e7:7e:98:44:ba:44:f2:42:9e:e8:99:8d:49:15:01:a5:
         1f:ad:e3:f2:15:41:45:81:1e:b2:de:95:bc:75:8e:4d:dd:fe:
         f5:0d:96:fd:d0:52:03:46:34:5e:d5:f4:18:dd:86:a1:ae:cd:
         86:bd:3d:a4:5d:5b:d3:34:51:f0:20:bc:b7:71:ab:b2:05:a5:
         1c:a1:a5:e2:9f:4a:26:bd:af:c6:ea:94:79:8a:46:e2:5b:43:
         b7:04:4c:be:cb:3f:0a:03:9a:b2:81:93:ae:25:dd:44:10:b8:
         82:e0:13:e0:c3:32:b6:71:aa:5a:61:e0:a9:a7:9b:44:ff:72:
         b1:54:55:77:20:4f:46:93:b0:ab:d1:f0:c5:6f:a8:b5:aa:6e:
         b3:e5:a1:32:a0:c2:27:22:18:b2:2f:22:cd:65:90:36:68:04:
         80:fe:78:2a:98:6f:e9:99:bb:05:be:9f:91:48:f7:f8:9f:33:
         ef:90:8c:24:75:1c:9c:d8:44:95:05:7a:74:b4:c1:83:0d:e3:
         7b:1d:c3:75:a9:1f:c4:bc:a3:22:16:49:f7:ea:05:88:37:6f:
         ef:8a:55:7f:8b:48:0e:16:26:ee:12:67:46:55:31:b6:9c:6c:
         e8:20:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----