Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YNRMuIL8KI7GUg_31MhQ7Yf7Tag.roa
File:                     YNRMuIL8KI7GUg_31MhQ7Yf7Tag.roa (raw, json)
Hash identifier:          wkloXI9va7VdB2LydpQv2CHpcuJgjydnzymJ/IFOFlA=
Subject key identifier:   60:D4:4C:B8:82:FC:28:8E:C6:52:0F:F7:D4:C8:50:ED:87:FB:4D:A8
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184B700C913B3F5A7FA8D9C6BF1BE04891B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YNRMuIL8KI7GUg_31MhQ7Yf7Tag.roa
Signing time:             Sun 27 Nov 2022 02:53:12 +0000
ROA not before:           Sun 27 Nov 2022 02:53:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210152
IP address blocks:        2a0a:6040:e000::/40 maxlen: 48
                          2a06:a005:17f0::/44 maxlen: 48
                          2a06:a005:1880::/44 maxlen: 48
                          2a06:a005:1290::/44 maxlen: 48
                          2a06:a005:1870::/44 maxlen: 48
                          2a06:a005:1890::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:b7:00:c9:13:b3:f5:a7:fa:8d:9c:6b:f1:be:04:89:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 27 02:53:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=60d44cb882fc288ec6520ff7d4c850ed87fb4da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:1a:77:f8:61:2b:69:8f:a1:55:18:a3:eb:
                    d3:c1:b0:bb:86:22:b3:a5:f6:5f:ba:b1:38:85:61:
                    06:ae:a6:3f:68:28:bd:0d:b0:7f:61:59:fb:5f:db:
                    b5:bd:2a:e4:ae:38:b0:62:58:5e:a6:be:5a:79:7b:
                    be:a6:16:62:f9:88:c1:92:6b:aa:16:0b:27:c5:5f:
                    10:8c:a0:29:ff:38:62:dc:ef:81:33:8b:43:18:1c:
                    e4:9e:87:9a:b7:b9:d7:94:59:57:bb:16:5b:1f:6e:
                    62:37:d4:f6:2d:d4:e4:38:4b:06:9d:41:cb:cd:fa:
                    8d:a8:68:09:d5:39:33:f1:59:c9:ef:5a:86:48:87:
                    57:4c:ec:a3:50:df:74:5f:dc:25:e0:c1:e0:f6:a6:
                    2e:70:8b:47:81:7a:d8:49:f5:54:ac:5a:14:3c:22:
                    7a:e5:8f:a4:13:e4:6a:4c:a9:db:e6:94:82:9f:24:
                    60:26:b9:c8:d6:93:7c:f2:7c:c3:2f:42:e5:03:f0:
                    8c:e1:76:55:37:fb:4a:cd:95:ad:e1:90:3d:2c:1b:
                    a2:2c:9e:61:88:47:3d:51:ad:5e:f8:66:bb:64:9a:
                    10:e7:bd:91:8c:00:17:8c:62:9d:8e:fe:95:5b:ff:
                    e8:1f:5d:c8:ae:4b:9d:cd:44:ea:ff:c7:67:2c:41:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D4:4C:B8:82:FC:28:8E:C6:52:0F:F7:D4:C8:50:ED:87:FB:4D:A8
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YNRMuIL8KI7GUg_31MhQ7Yf7Tag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1290::/44
                  2a06:a005:17f0::/44
                  2a06:a005:1870::-2a06:a005:189f:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48
                  2a0a:6040:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:19:68:59:54:c5:7c:ca:3d:0f:75:c6:ad:61:ca:df:02:8e:
         26:38:2e:c1:b0:1e:e1:b4:7a:6d:9a:87:27:3e:19:36:bc:df:
         df:b8:17:eb:0f:ed:31:8f:89:3c:fa:7d:50:50:a9:9d:0f:29:
         90:38:fe:d4:bd:5f:e5:79:7f:4a:76:22:e0:fe:e2:1b:b4:fe:
         34:ef:38:9b:04:db:83:a6:63:89:50:a5:aa:39:7e:35:12:e3:
         c1:73:b2:66:3b:d7:62:15:b0:ae:ff:41:6f:06:2e:85:b5:bb:
         1b:49:70:52:07:42:b4:53:e6:b8:da:84:93:e9:7f:1f:e4:db:
         bf:18:a6:92:6c:e7:91:d9:7c:87:18:7a:3c:ff:14:15:e3:b6:
         cb:ad:b8:4c:40:d7:15:08:e7:03:8b:6b:10:64:0d:63:39:c2:
         6a:a1:67:52:2d:0f:84:2a:37:4d:a2:f5:72:2c:93:cf:34:04:
         f2:92:35:d0:b5:ca:c2:82:64:21:0d:d5:cc:40:69:f1:92:3e:
         ae:ca:67:e3:ec:e3:27:f4:1a:94:43:f2:7f:63:48:e2:c0:ba:
         29:f9:e2:f0:f5:b9:95:5c:2d:8e:b8:66:1f:25:64:0e:41:dd:
         48:f2:7b:fd:7b:0b:1f:a0:02:35:6f:20:d6:1a:d9:3e:27:c5:
         dc:2d:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----