Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YVwrE9HMx_grTKZQX3Zrqkv3OW0.roa
File:                     YVwrE9HMx_grTKZQX3Zrqkv3OW0.roa (raw, json)
Hash identifier:          GMK9JiQFJ7E1GMSyOy0ztTGwsanoYQbdnhQeC39y70U=
Subject key identifier:   61:5C:2B:13:D1:CC:C7:F8:2B:4C:A6:50:5F:76:6B:AA:4B:F7:39:6D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181F065782393515AD13D98794F889C8831
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YVwrE9HMx_grTKZQX3Zrqkv3OW0.roa
Signing time:             Tue 12 Jul 2022 03:13:10 +0000
ROA not before:           Tue 12 Jul 2022 03:13:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208548
IP address blocks:        2a06:a000:300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f0:65:78:23:93:51:5a:d1:3d:98:79:4f:88:9c:88:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 12 03:13:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=615c2b13d1ccc7f82b4ca6505f766baa4bf7396d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:20:0d:97:6b:07:bc:7f:b4:99:1a:4f:9e:f5:
                    ee:00:d0:e9:13:d9:aa:31:d2:4f:6e:5d:58:bb:97:
                    1f:4f:cd:1a:73:79:87:2f:ac:11:95:f5:b1:7b:cb:
                    a6:21:34:0c:70:8a:09:dc:f0:b6:c7:63:da:e9:cf:
                    5c:2b:50:ec:87:c5:df:65:d3:16:31:d5:e7:d5:04:
                    2b:55:80:02:ec:e7:73:92:8a:7a:4f:ac:eb:e1:80:
                    3e:a5:76:dd:2a:60:64:f7:32:bc:e8:78:aa:29:4b:
                    11:92:13:52:80:57:3b:a0:e0:aa:97:be:3a:ee:95:
                    67:41:2e:3f:e1:31:47:68:e9:42:03:8d:b2:dc:c7:
                    42:83:4e:9d:7f:d7:9d:f9:4f:3a:b5:aa:bd:e8:3f:
                    7c:9e:36:60:2e:0e:b8:65:e5:c2:c3:03:96:08:3d:
                    51:98:9d:36:a5:13:59:6c:7e:71:0d:a5:ba:10:e0:
                    db:24:c9:1b:33:7d:84:08:f1:71:d6:a8:2b:cc:17:
                    30:ec:29:6b:5c:b2:49:1e:e5:53:91:1e:5a:f6:4d:
                    83:e4:d2:27:01:a3:ce:6a:9d:c8:11:0a:f7:7e:f2:
                    0f:01:97:ed:82:6f:21:41:a8:46:3e:28:4a:83:e8:
                    35:5d:11:be:ef:9f:9b:c0:98:02:1a:8e:0f:4a:7d:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5C:2B:13:D1:CC:C7:F8:2B:4C:A6:50:5F:76:6B:AA:4B:F7:39:6D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/YVwrE9HMx_grTKZQX3Zrqkv3OW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a000:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:d9:ba:1c:4b:e8:67:63:a9:a5:11:67:cd:66:a6:d4:74:43:
         20:35:ce:11:78:20:8b:72:38:6c:20:ea:26:e5:ac:d8:71:88:
         b7:76:cb:97:b5:b2:4c:55:5e:37:4c:03:2a:ad:65:37:3e:f2:
         4b:a0:86:3f:f2:4b:e7:16:e5:85:b3:c1:23:3a:24:7d:a1:f6:
         15:20:04:9b:a5:6d:6e:85:28:0b:ae:7e:a0:3e:ce:31:d6:46:
         8d:91:f2:cf:52:1d:6a:50:80:c0:af:61:a5:6f:06:ad:dd:73:
         81:64:a7:97:dd:e0:3f:f0:40:b6:cf:a7:3e:88:5a:e3:3d:23:
         59:be:a2:7f:ca:ef:ca:97:65:0d:ae:79:21:bd:09:1a:73:25:
         36:ae:3a:0f:0d:c1:f3:d1:f5:02:3e:64:46:ba:a0:8a:90:e5:
         5d:88:4a:12:32:80:8a:de:47:87:f4:1b:fc:4a:30:6c:6f:fd:
         87:d5:9f:d0:aa:30:c5:51:31:bc:89:ba:14:c7:07:4c:8b:22:
         e1:43:b4:39:f7:78:a4:70:7b:01:82:03:4e:11:a9:2b:05:1f:
         7f:7c:33:d2:07:9a:13:a2:8f:c9:9e:62:a9:9d:e2:05:18:dc:
         73:37:8c:21:ed:5f:97:ce:9a:28:4c:72:32:98:77:0d:c4:8e:
         a9:11:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----