Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RDFW7HRIYADraRU_9zVS9Ke7GTE.roa
File:                     RDFW7HRIYADraRU_9zVS9Ke7GTE.roa (raw, json)
Hash identifier:          ctWszXlcFtab0Mw1Eph0+5G2JVEYbUcn8/hRUC/S5AM=
Subject key identifier:   44:31:56:EC:74:48:60:00:EB:69:15:3F:F7:35:52:F4:A7:BB:19:31
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184E289C2E5139B34EFFD62851A1645AECD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RDFW7HRIYADraRU_9zVS9Ke7GTE.roa
Signing time:             Mon 05 Dec 2022 13:46:29 +0000
ROA not before:           Mon 05 Dec 2022 13:46:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208690
IP address blocks:        2a06:a005:2080::/44 maxlen: 48
                          2a06:a005:2070::/44 maxlen: 48
                          2a06:a005:2060::/44 maxlen: 48
                          2a06:a005:24e0::/44 maxlen: 48
                          2a06:a005:2040::/44 maxlen: 48
                          2a06:a005:2050::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e2:89:c2:e5:13:9b:34:ef:fd:62:85:1a:16:45:ae:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  5 13:46:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=443156ec74486000eb69153ff73552f4a7bb1931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ea:34:d8:be:d4:cb:4c:ee:78:07:6d:cf:04:
                    15:23:e0:e1:60:c3:f5:76:53:6d:9a:ca:89:99:08:
                    0a:f9:e6:a0:29:38:3e:a3:d1:00:2b:03:eb:dd:eb:
                    05:1c:a9:a3:3b:8b:23:e5:1e:92:49:3a:b6:46:6d:
                    33:bc:d3:80:7a:7a:9c:60:de:bf:4f:84:d2:f9:52:
                    e3:97:b9:d2:0c:4e:35:a4:4a:1f:d0:ea:9d:08:c1:
                    1e:96:0a:70:7f:6b:72:55:99:de:d6:7c:35:b9:55:
                    48:0a:f8:bd:ae:e3:ef:3a:4e:24:9a:bc:28:ca:9b:
                    85:d3:68:5c:a2:67:2b:35:ae:a0:94:22:76:d9:9f:
                    ab:2b:01:75:c7:60:7e:58:ea:8a:d8:65:a6:86:68:
                    7c:9b:63:2a:a1:cd:c0:16:ba:ad:06:af:af:2c:b4:
                    bb:b6:3c:fd:e9:5e:ca:4d:80:b4:76:da:b2:d1:c0:
                    18:77:4d:a5:99:39:35:87:e0:f9:6d:12:5b:41:ab:
                    7c:77:97:1e:cf:bb:3c:f4:69:9e:d9:6b:8d:92:a8:
                    3a:ca:cc:f6:88:75:1e:64:69:e0:a9:bd:6d:78:fc:
                    47:7a:63:c2:e4:aa:5e:63:22:61:76:83:81:fb:5d:
                    a6:ba:57:08:be:aa:2f:c7:87:c7:01:47:e8:78:ac:
                    c3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:31:56:EC:74:48:60:00:EB:69:15:3F:F7:35:52:F4:A7:BB:19:31
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RDFW7HRIYADraRU_9zVS9Ke7GTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2040::-2a06:a005:208f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:24e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:88:26:30:3f:16:ea:0c:b5:97:f6:87:f8:5f:ed:64:2c:20:
         38:d1:52:14:4b:1f:f7:a3:11:26:9b:a8:34:e7:ec:0f:ee:28:
         10:eb:54:bd:2b:ff:ee:29:25:87:35:b5:ce:b6:44:ac:3e:98:
         ce:e0:d1:4c:0f:e7:6a:85:55:a7:b7:8e:2f:7e:36:87:cf:59:
         99:32:4f:98:89:f8:4e:0d:d6:64:44:0f:55:3e:9a:bd:4f:94:
         57:43:ce:1f:27:8e:e6:6b:be:5f:63:fa:e5:d1:ca:c4:f9:d5:
         0b:44:aa:78:4e:df:a0:c4:1d:9a:a0:f3:22:20:e8:e3:57:ea:
         6a:ff:bc:d2:46:a3:a2:63:31:0f:1f:39:3b:46:36:c1:28:2e:
         eb:09:c9:7f:73:9c:98:23:f8:e9:a2:a5:ba:73:d6:06:17:ec:
         92:ac:be:d9:a9:30:f7:64:a2:70:57:0f:fd:ae:cc:a2:04:e1:
         f6:c0:1a:52:0c:7d:03:7a:bc:d7:58:89:e2:78:58:68:d3:ff:
         83:9e:f5:36:c3:30:a5:ee:b9:4c:e7:14:5b:6f:a1:c9:ff:50:
         36:21:b2:60:cf:26:78:bd:95:e3:f1:35:93:94:8a:80:cb:8c:
         2d:23:57:bc:19:8d:00:ba:84:76:6d:54:17:d7:e5:66:f3:74:
         f6:69:58:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----