Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OiTW1KKM5eN7hToCrbYJPYRFrJY.roa
File:                     OiTW1KKM5eN7hToCrbYJPYRFrJY.roa (raw, json)
Hash identifier:          aV6YmTMW3UfkoiF7x+vOXyUW2S/SyzDsoRiQhTKcxS8=
Subject key identifier:   3A:24:D6:D4:A2:8C:E5:E3:7B:85:3A:02:AD:B6:09:3D:84:45:AC:96
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184470DB4B46845B89B6E6E744EF916A88C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OiTW1KKM5eN7hToCrbYJPYRFrJY.roa
Signing time:             Sat 05 Nov 2022 09:09:51 +0000
ROA not before:           Sat 05 Nov 2022 09:09:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203888
IP address blocks:        2a06:a005:150a::/48 maxlen: 48
                          2a06:a005:d22::/48 maxlen: 48
                          2a06:a005:2250::/44 maxlen: 48
                          2a06:a005:2260::/44 maxlen: 48
                          2a06:a005:1550::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:47:0d:b4:b4:68:45:b8:9b:6e:6e:74:4e:f9:16:a8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov  5 09:09:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a24d6d4a28ce5e37b853a02adb6093d8445ac96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:4f:a0:4b:e7:c3:02:84:46:9b:84:8d:5a:
                    36:dc:5b:4c:d3:28:f1:50:c4:f9:2b:1b:61:01:57:
                    85:2e:39:5a:a3:f1:7f:da:53:0c:dd:13:6b:df:8c:
                    75:d3:ec:7b:7c:5e:36:85:19:25:f9:8c:58:1b:07:
                    14:d9:ff:18:e3:2b:e9:89:8f:76:f9:87:9a:42:99:
                    70:94:b5:7a:b9:90:c1:53:40:c5:37:0f:18:66:df:
                    5e:b6:1f:5c:38:93:e9:80:fb:db:b9:ec:d3:c4:e6:
                    16:27:10:ae:46:0e:94:44:8d:fb:e4:dc:c5:6c:ca:
                    dc:d0:ac:7d:d7:e1:02:7e:34:f8:a6:6e:35:17:f3:
                    5a:41:d4:d3:2f:63:0d:2f:2e:de:d0:3c:a2:72:49:
                    f3:eb:09:74:7a:1c:43:4d:cb:d0:34:ff:72:ce:35:
                    ad:f2:68:c1:2f:d2:bc:16:4c:b8:65:24:c2:97:66:
                    37:8d:11:aa:26:8f:31:f9:bc:54:d6:f3:e4:e0:9e:
                    fe:89:6f:4c:2a:52:34:b2:9f:5b:0c:fe:3b:0d:3e:
                    92:54:5d:30:52:8f:0c:ba:78:ba:eb:93:42:ff:cb:
                    04:b6:79:d4:a3:e4:d2:99:ca:a0:c3:15:55:88:16:
                    50:e9:57:74:f1:b3:0e:f2:1c:11:75:16:24:72:71:
                    64:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:24:D6:D4:A2:8C:E5:E3:7B:85:3A:02:AD:B6:09:3D:84:45:AC:96
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/OiTW1KKM5eN7hToCrbYJPYRFrJY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d22::/48
                  2a06:a005:150a::/48
                  2a06:a005:1550::/44
                  2a06:a005:2250::-2a06:a005:226f:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:ec:85:c5:fb:f1:85:51:56:fc:ed:9c:b6:a1:4a:c9:24:a6:
         2c:58:cc:eb:e1:b2:0f:e5:ac:b8:9f:14:21:c9:f7:9c:00:a2:
         d5:78:8f:c7:77:ef:85:a9:96:4b:7d:06:e2:ef:4b:14:d3:10:
         8f:f2:aa:48:1a:73:70:2b:ad:90:ca:f9:ba:68:1f:bb:74:c9:
         3e:f4:29:aa:cc:49:28:eb:9f:88:cb:9a:0a:a2:2b:75:dc:71:
         99:09:9c:65:3d:ce:c9:0a:1b:26:97:25:81:ae:13:f9:16:0a:
         30:09:c3:72:81:7a:ce:81:58:a7:44:1f:6b:ae:a3:f0:99:bc:
         b1:83:00:19:46:98:a3:7c:cc:a1:21:55:90:67:8f:fd:a4:63:
         fe:d2:30:df:f7:0d:a7:23:48:9e:9b:08:5d:05:3b:d3:40:37:
         f9:6f:07:a8:3d:02:ad:85:7d:cf:15:80:a8:ee:07:44:4c:2c:
         46:f9:4f:df:25:ea:7b:74:a2:01:4d:50:86:97:05:bd:7f:00:
         b9:b0:bb:72:f0:a2:17:68:f3:bf:a0:32:4f:59:2e:f8:82:11:
         36:95:dc:57:d4:31:d0:e2:9f:c1:e2:a9:97:37:0a:a3:8a:03:
         95:cc:ec:ea:e6:3b:38:3c:25:80:20:d9:02:b2:da:db:cf:7d:
         79:dc:49:22
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYRHDbS0aEW4m25udE75FqiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTA1MDkwOTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTI0ZDZkNGEyOGNlNWUzN2I4NTNhMDJhZGI2MDkzZDg0NDVhYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxNPoEvnwwKERpuEjVo23FtM0yjx
UMT5KxthAVeFLjlao/F/2lMM3RNr34x10+x7fF42hRkl+YxYGwcU2f8Y4yvpiY92
+YeaQplwlLV6uZDBU0DFNw8YZt9eth9cOJPpgPvbuezTxOYWJxCuRg6URI375NzF
bMrc0Kx91+ECfjT4pm41F/NaQdTTL2MNLy7e0Dyicknz6wl0ehxDTcvQNP9yzjWt
8mjBL9K8Fky4ZSTCl2Y3jRGqJo8x+bxU1vPk4J7+iW9MKlI0sp9bDP47DT6SVF0w
Uo8Muni665NC/8sEtnnUo+TSmcqgwxVViBZQ6Vd08bMO8hwRdRYkcnFkYwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFDok1tSijOXje4U6Aq22CT2ERayWMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvT2lUVzFLS001ZU43aFRvQ3JiWUpQWVJGckpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAAjA4AwcAKgagBQ0i
AwcAKgagBRUKAwcEKgagBRVQMBIDBwQqBqAFIlADBwQqBqAFImADBwAqB1TCsAsw
DQYJKoZIhvcNAQELBQADggEBAGvshcX78YVRVvztnLahSskkpixYzOvhsg/lrLif
FCHJ95wAotV4j8d374Wplkt9BuLvSxTTEI/yqkgac3ArrZDK+bpoH7t0yT70KarM
SSjrn4jLmgqiK3XccZkJnGU9zskKGyaXJYGuE/kWCjAJw3KBes6BWKdEH2uuo/CZ
vLGDABlGmKN8zKEhVZBnj/2kY/7SMN/3DacjSJ6bCF0FO9NAN/lvB6g9Aq2Ffc8V
gKjuB0RMLEb5T98l6nt0ogFNUIaXBb1/ALmwu3Lwohdo87+gMk9ZLviCETaV3FfU
MdDin8HiqZc3CqOKA5XM7OrmOzg8JYAg2QKy2tvPfXncSSI=
-----END CERTIFICATE-----