Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZgJ6TJZFD2JzLqcwAGGzY96wIdI.roa
File:                     ZgJ6TJZFD2JzLqcwAGGzY96wIdI.roa (raw, json)
Hash identifier:          ZAf8gfdxHNC7cYZHN7mprW0bV5llyoZDMCwmmzd9WJE=
Subject key identifier:   66:02:7A:4C:96:45:0F:62:73:2E:A7:30:00:61:B3:63:DE:B0:21:D2
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183BE8A114DE139A442FECFB93A3C96F1D7
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZgJ6TJZFD2JzLqcwAGGzY96wIdI.roa
Signing time:             Sun 09 Oct 2022 20:57:42 +0000
ROA not before:           Sun 09 Oct 2022 20:57:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212294
IP address blocks:        2a06:a005:1c40::/44 maxlen: 48
                          2a06:a005:1800::/44 maxlen: 48
                          2a06:a005:19e0::/44 maxlen: 48
                          2a06:a005:1c30::/44 maxlen: 48
                          2a06:a005:18d0::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a05:dfc7:8100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:be:8a:11:4d:e1:39:a4:42:fe:cf:b9:3a:3c:96:f1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct  9 20:57:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=66027a4c96450f62732ea7300061b363deb021d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:ed:48:e4:3a:bb:90:66:81:a9:b0:7a:c9:
                    6a:9b:1d:54:e6:dd:92:3a:b4:d2:4c:13:b2:73:e4:
                    46:70:ff:5c:e1:d6:64:71:5c:19:2a:c0:a5:25:4f:
                    13:67:f0:2a:ca:55:66:95:c3:cb:0b:7e:d2:00:d5:
                    67:88:94:20:e5:1f:50:22:0a:e4:79:d1:f1:0c:dd:
                    3b:a5:98:b8:8d:b2:a2:94:b4:aa:68:d6:f3:7e:7b:
                    a1:eb:b3:21:fa:b9:dc:31:d2:8d:e2:a8:d1:05:e7:
                    1b:ee:b7:5d:4d:f8:2c:c2:b9:29:7d:88:03:98:e1:
                    c3:b5:56:12:b6:d0:09:a0:5f:50:27:45:a7:5b:8d:
                    3c:4d:49:00:e1:a2:9e:03:53:27:0c:49:9d:6e:9b:
                    6d:c2:d7:cd:4e:7f:0e:f5:cf:af:58:9b:2e:17:eb:
                    26:b3:a1:94:ad:4a:88:0d:f5:53:57:41:70:0b:f6:
                    2d:9f:7b:bc:ab:e3:6b:ff:ed:6c:47:48:c4:5a:a7:
                    53:bc:da:e7:3d:39:59:21:13:01:09:ef:a3:b6:28:
                    f3:78:14:ea:98:b5:20:f4:58:4c:60:fd:9a:91:fc:
                    c8:41:91:61:51:f9:be:bd:26:ac:a8:00:cd:b6:32:
                    95:ce:05:ea:ed:54:b2:76:da:20:63:45:31:4b:eb:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:02:7A:4C:96:45:0F:62:73:2E:A7:30:00:61:B3:63:DE:B0:21:D2
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ZgJ6TJZFD2JzLqcwAGGzY96wIdI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8100::/40
                  2a06:a005:1800::/44
                  2a06:a005:18d0::/44
                  2a06:a005:19e0::/44
                  2a06:a005:1c30::-2a06:a005:1c4f:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:b6:d7:5a:8b:54:ba:82:fb:70:77:a5:c3:12:26:1a:17:81:
         66:86:2c:66:1e:58:99:37:ca:2d:d1:46:5a:d6:08:ef:84:c9:
         7d:c8:9d:68:65:9e:4b:64:8c:0e:0b:b1:cc:70:28:e5:eb:b9:
         68:d0:fb:2b:04:b8:59:50:e4:34:02:1c:11:ca:f2:92:37:ff:
         ab:c8:9b:af:e7:1e:d0:18:c5:b9:6a:d8:ca:ae:81:34:29:9a:
         24:f1:cf:18:31:72:f3:7a:71:fb:f5:98:86:a6:54:1c:b9:e6:
         a3:57:6e:1b:ae:21:71:99:a6:a4:d2:67:c7:17:f2:10:97:59:
         ba:66:25:d5:de:64:88:d1:12:14:9e:c5:69:77:8f:e3:22:31:
         af:13:4b:6d:25:4a:a2:ac:0a:d6:5a:37:49:ac:41:d7:24:f5:
         7c:07:1b:6d:55:d9:7f:3b:5d:20:ae:1b:38:c8:0e:bc:ef:51:
         22:54:88:e3:94:7e:92:ef:d7:af:a8:46:0e:74:60:b6:98:25:
         8b:f3:c0:27:c2:25:3d:72:7d:ac:ba:f6:b2:44:51:bd:2d:8b:
         17:70:62:21:4e:7a:3d:43:68:70:e8:93:76:be:17:f1:33:1c:
         32:3e:2a:18:47:62:1a:40:4e:56:f7:60:a7:cd:fa:19:cf:35:
         b4:db:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----