Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_ywTKcRsKOHp1M7lU-Amhg_Aea0.roa
File:                     _ywTKcRsKOHp1M7lU-Amhg_Aea0.roa (raw, json)
Hash identifier:          baUbr6reN80NcOHkj5L8lKyqCX03hJpUy5dx1SiziiM=
Subject key identifier:   FF:2C:13:29:C4:6C:28:E1:E9:D4:CE:E5:53:E0:26:86:0F:C0:79:AD
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018287E3B1C513B515992842BF85428EB728
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_ywTKcRsKOHp1M7lU-Amhg_Aea0.roa
Signing time:             Wed 10 Aug 2022 13:13:42 +0000
ROA not before:           Wed 10 Aug 2022 13:13:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140506
IP address blocks:        2a06:a005:d70::/44 maxlen: 48
                          2a06:a005:1700::/44 maxlen: 48
                          2a06:a005:e60::/44 maxlen: 48
                          2a06:a005:f80::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:87:e3:b1:c5:13:b5:15:99:28:42:bf:85:42:8e:b7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 10 13:13:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff2c1329c46c28e1e9d4cee553e026860fc079ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:78:4c:34:62:9c:bc:f4:6f:4b:cb:2f:e5:
                    5a:23:09:c4:56:32:f5:08:6c:74:b0:7b:99:6d:79:
                    cb:9a:1f:f8:fd:3c:39:94:49:33:91:da:e4:ae:e7:
                    b0:8f:ee:8e:f1:f1:80:9c:f8:98:3e:43:25:1f:96:
                    7c:7c:e2:d6:84:2f:93:f6:b3:56:eb:9d:8e:ca:3b:
                    2f:1a:9a:d7:4a:74:9d:da:f1:52:20:d4:48:49:60:
                    5d:80:64:98:90:50:06:0a:24:86:d6:06:8e:57:84:
                    37:f5:c6:42:e7:fb:91:31:ef:70:3e:31:c1:71:1a:
                    d2:20:d8:12:02:ca:b6:c4:c4:00:5b:2f:c6:2a:e0:
                    d3:33:52:27:03:78:e6:9f:50:8c:de:8d:c4:89:9e:
                    74:6d:5b:b2:95:54:0c:bd:a4:11:db:ca:51:03:02:
                    f4:98:1d:76:6d:d7:fb:ab:dc:9e:0d:da:70:a4:5c:
                    91:f1:a1:3a:3b:a7:e9:01:c1:f2:03:f5:88:e7:54:
                    68:4e:b4:ac:c9:ff:35:0c:fd:22:f9:f5:72:0e:bd:
                    07:f6:53:ca:2a:72:31:44:86:6f:42:9d:dd:dc:88:
                    d3:c1:dd:37:f5:ce:13:2f:09:47:9a:a6:04:19:b6:
                    df:02:1a:c0:33:65:1e:c6:60:8d:97:6f:b1:b1:e4:
                    d1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2C:13:29:C4:6C:28:E1:E9:D4:CE:E5:53:E0:26:86:0F:C0:79:AD
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_ywTKcRsKOHp1M7lU-Amhg_Aea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d70::/44
                  2a06:a005:e60::/44
                  2a06:a005:f80::/44
                  2a06:a005:1700::/44

    Signature Algorithm: sha256WithRSAEncryption
         87:4d:26:3e:c3:1d:2b:dd:8c:7c:c4:4d:ad:72:0c:a7:8d:22:
         df:9f:2d:04:f0:29:0d:77:ae:2b:c7:21:a4:ae:30:83:f6:6a:
         55:d6:fa:76:da:99:d8:74:6b:c0:76:02:f9:fa:33:9d:50:b8:
         06:33:cf:be:04:df:cd:2d:2c:65:fa:98:f5:d8:ec:f9:54:b9:
         4d:b4:bf:dd:bc:ae:23:62:03:ad:f8:bc:1c:78:d1:2b:bd:3f:
         81:38:57:04:b9:5a:e3:15:94:84:76:29:c3:36:13:af:6b:67:
         ad:59:82:5d:40:7f:da:55:25:cb:08:ce:5b:0b:80:2d:f0:29:
         22:f5:81:92:a3:6a:02:be:4a:70:df:52:41:25:b9:a7:18:c5:
         b1:2b:bd:ce:49:36:2f:9a:8a:71:2f:34:24:b3:00:d7:b1:cf:
         08:d2:97:c9:94:04:2c:2f:a6:c6:a0:63:34:ba:8f:0b:51:8d:
         a1:b0:a5:68:ab:e3:e4:b1:13:41:45:a4:86:a5:23:de:c0:25:
         70:5d:ca:50:8b:78:f1:17:96:81:bf:fd:b8:07:af:9e:cd:30:
         8c:04:7b:de:d6:e9:50:50:59:e5:33:37:83:25:d6:b5:c4:c1:
         31:be:61:54:73:e9:26:c6:b8:24:39:dd:2a:fe:39:98:f2:f3:
         0b:57:9e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----