Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XY3XnybKw9kAprZm5EJAGoGc4NY.roa
File:                     XY3XnybKw9kAprZm5EJAGoGc4NY.roa (raw, json)
Hash identifier:          905ovjJClQLwFi+eQRXN7RwyMacZ2P7X5NDDLnlCZ5c=
Subject key identifier:   5D:8D:D7:9F:26:CA:C3:D9:00:A6:B6:66:E4:42:40:1A:81:9C:E0:D6
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01821286598CD1F3A696B046F72DFBB5412C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XY3XnybKw9kAprZm5EJAGoGc4NY.roa
Signing time:             Mon 18 Jul 2022 18:16:10 +0000
ROA not before:           Mon 18 Jul 2022 18:16:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209861
IP address blocks:        2a06:a005:a05::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:12:86:59:8c:d1:f3:a6:96:b0:46:f7:2d:fb:b5:41:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 18 18:16:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5d8dd79f26cac3d900a6b666e442401a819ce0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e6:73:1b:72:2b:42:b4:a8:81:97:ff:3b:2b:
                    ad:8b:ac:41:36:d4:11:4f:e9:6d:3a:ae:c7:fa:54:
                    4c:1c:63:33:a5:08:86:11:8e:93:fa:0f:97:8e:92:
                    e6:63:7e:0d:f2:5c:bc:66:35:8a:62:64:df:33:ea:
                    74:15:5b:69:06:18:87:58:30:ca:ac:68:4b:e1:a1:
                    99:8f:69:16:76:c6:e0:97:6c:b1:52:e1:94:7a:2b:
                    ee:82:ba:40:3c:dc:ab:a3:af:30:05:d1:20:a6:83:
                    2e:26:56:4e:53:d9:95:e0:79:67:bd:a4:b1:a5:1b:
                    90:09:35:62:13:38:5f:6e:ae:8d:4a:4a:b0:91:34:
                    ee:ae:28:82:27:ba:85:db:8c:33:72:53:95:fe:b7:
                    0a:a7:fe:81:43:05:cf:c2:c1:7f:00:cc:c0:b1:da:
                    f5:70:49:8a:0e:71:46:c0:62:a5:15:82:d1:dc:16:
                    9f:66:91:cd:e9:e6:d2:da:28:8e:0c:c9:fa:8a:02:
                    c7:bf:bc:96:b3:e9:26:7f:41:d8:ca:79:ec:bf:e0:
                    6e:ae:1c:65:ed:fb:6b:3a:1a:6c:32:17:0a:a6:d2:
                    fe:d1:f6:95:13:cf:86:8b:1a:b2:63:10:0f:05:ad:
                    08:55:2c:e6:2c:80:3d:c2:84:7c:ac:43:3b:56:25:
                    c7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8D:D7:9F:26:CA:C3:D9:00:A6:B6:66:E4:42:40:1A:81:9C:E0:D6
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/XY3XnybKw9kAprZm5EJAGoGc4NY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a05::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:f9:69:be:7b:6b:aa:92:e6:66:c4:e7:ed:5a:c1:f4:5f:80:
         46:74:e3:79:fb:06:95:41:72:44:e8:55:87:41:e0:74:6f:22:
         90:72:a7:aa:b2:b3:81:10:83:86:c8:f1:9e:21:cb:2d:89:f3:
         5c:7f:db:f2:55:bd:00:1c:c0:11:fa:e1:91:fe:2c:74:8e:11:
         a8:44:9b:e7:0c:cf:ec:47:23:ac:06:8f:da:f6:f0:1b:64:17:
         a9:8d:ff:e0:7b:23:13:85:36:80:69:9a:e0:61:b9:3b:9c:80:
         57:bf:ca:d9:6b:93:1c:47:f5:c0:69:ef:84:3f:aa:04:7f:1d:
         e6:1b:1d:be:79:c7:a0:6a:d0:df:76:2f:95:2b:f1:5c:27:f6:
         28:e3:78:35:69:eb:b4:a9:84:24:30:09:83:7d:47:5c:3b:e1:
         47:a9:10:e4:33:b9:55:61:84:13:18:0c:d9:9c:2f:7a:69:24:
         01:8c:8b:85:da:36:67:7c:2b:45:c3:a3:e9:50:14:e8:d8:4e:
         f3:8e:41:08:79:14:04:68:6c:2a:dd:b7:37:61:f8:9b:82:40:
         1d:4b:7c:e6:a9:70:80:c0:77:5e:be:3c:c6:cd:72:d8:16:a5:
         87:08:34:de:a5:9b:08:4e:2d:5f:33:97:a0:4f:69:49:5e:29:
         10:84:a6:1c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYIShlmM0fOmlrBG9y37tUEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzE4MTgxNjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDhkZDc5ZjI2Y2FjM2Q5MDBhNmI2NjZlNDQyNDAxYTgxOWNlMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheZzG3IrQrSogZf/Oyuti6xBNtQR
T+ltOq7H+lRMHGMzpQiGEY6T+g+XjpLmY34N8ly8ZjWKYmTfM+p0FVtpBhiHWDDK
rGhL4aGZj2kWdsbgl2yxUuGUeivugrpAPNyro68wBdEgpoMuJlZOU9mV4HlnvaSx
pRuQCTViEzhfbq6NSkqwkTTuriiCJ7qF24wzclOV/rcKp/6BQwXPwsF/AMzAsdr1
cEmKDnFGwGKlFYLR3BafZpHN6ebS2iiODMn6igLHv7yWs+kmf0HYynnsv+Burhxl
7ftrOhpsMhcKptL+0faVE8+GixqyYxAPBa0IVSzmLIA9woR8rEM7ViXHpwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFF2N158mysPZAKa2ZuRCQBqBnODWMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvWFkzWG55Ykt3OWtBcHJabTVFSkFHb0djNE5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgagBQoF
MA0GCSqGSIb3DQEBCwUAA4IBAQBp+Wm+e2uqkuZmxOftWsH0X4BGdON5+waVQXJE
6FWHQeB0byKQcqeqsrOBEIOGyPGeIcstifNcf9vyVb0AHMAR+uGR/ix0jhGoRJvn
DM/sRyOsBo/a9vAbZBepjf/geyMThTaAaZrgYbk7nIBXv8rZa5McR/XAae+EP6oE
fx3mGx2+ecegatDfdi+VK/FcJ/Yo43g1aeu0qYQkMAmDfUdcO+FHqRDkM7lVYYQT
GAzZnC96aSQBjIuF2jZnfCtFw6PpUBTo2E7zjkEIeRQEaGwq3bc3YfibgkAdS3zm
qXCAwHdevjzGzXLYFqWHCDTepZsITi1fM5egT2lJXikQhKYc
-----END CERTIFICATE-----