Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ayX-SzYFJfBNIip1McOrk8jlwZE.roa
File:                     ayX-SzYFJfBNIip1McOrk8jlwZE.roa (raw, json)
Hash identifier:          KGq2JKCZzeAQ/SYcSGQyqT0kD1ggPq9wDou/00/XncY=
Subject key identifier:   6B:25:FE:4B:36:05:25:F0:4D:22:2A:75:31:C3:AB:93:C8:E5:C1:91
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182CA95E1DC9A62292D35D8F9F228E2C63D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ayX-SzYFJfBNIip1McOrk8jlwZE.roa
Signing time:             Tue 23 Aug 2022 12:03:16 +0000
ROA not before:           Tue 23 Aug 2022 12:03:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211233
IP address blocks:        2a06:a005:19b0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ca:95:e1:dc:9a:62:29:2d:35:d8:f9:f2:28:e2:c6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 23 12:03:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6b25fe4b360525f04d222a7531c3ab93c8e5c191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:34:e4:ec:3c:48:cd:b3:03:40:5a:8c:f8:a7:
                    17:7a:9a:79:3d:f4:0a:b6:71:33:0d:4d:20:08:7c:
                    c4:b3:6a:62:99:88:30:2a:bf:33:6f:46:44:56:6b:
                    1b:d1:4e:5c:91:92:8b:c2:1d:41:da:f0:1b:f9:07:
                    4a:fe:ca:04:ad:91:cc:4d:20:50:f9:3b:12:4f:7d:
                    92:8f:80:4b:94:0d:00:9d:03:49:a0:2f:25:16:2f:
                    2a:46:fc:0a:77:61:c8:3c:01:30:cd:2e:e1:17:dc:
                    5f:18:69:d6:d7:9a:55:48:ed:7e:27:7a:7c:43:d1:
                    4a:32:64:05:05:95:e6:67:21:2c:0e:b0:2a:26:09:
                    58:f9:57:9f:26:6c:9a:20:b3:ea:45:9e:df:90:71:
                    c6:60:b6:f7:db:5b:63:32:7d:23:53:f1:79:2d:1d:
                    e5:e3:b9:82:94:66:e9:1c:70:e5:f2:d7:54:e5:6e:
                    58:0f:ff:20:15:83:3a:28:07:2e:58:95:af:08:70:
                    cd:ae:2f:ec:51:6d:9c:80:34:a1:3c:02:b0:bf:2c:
                    9c:fc:11:04:9d:31:d4:47:33:da:f3:a9:3b:c6:01:
                    cc:0a:32:9d:6b:97:6a:98:0c:22:97:8a:d8:21:4a:
                    00:b3:74:53:ee:6e:87:73:b8:1c:ab:53:6f:4e:ab:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:25:FE:4B:36:05:25:F0:4D:22:2A:75:31:C3:AB:93:C8:E5:C1:91
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ayX-SzYFJfBNIip1McOrk8jlwZE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:19b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:e7:d7:8e:d7:98:03:30:1f:ae:0b:25:53:81:d4:65:e8:f0:
         2d:01:f3:50:ed:11:62:57:a8:6d:db:19:46:fc:52:0d:79:e2:
         14:90:dd:79:6e:f9:76:af:99:49:4d:9e:29:c2:c9:ed:34:6e:
         de:4c:8d:99:84:32:54:22:b5:9c:15:56:05:77:b7:32:5c:bb:
         39:3f:9a:5a:d7:2c:92:5f:cd:6f:ec:1d:d8:b1:9c:b3:b6:d8:
         22:10:a7:91:69:10:8c:46:2c:3d:ae:cf:fd:17:38:13:ef:04:
         5f:e2:f5:ed:34:9f:64:3c:02:48:71:0e:f6:ba:b3:ce:a4:84:
         da:83:98:0c:b3:e2:93:ea:33:52:6d:ae:ab:95:ab:08:1a:df:
         11:9d:11:b1:bc:62:48:98:db:05:42:05:f7:aa:89:89:d3:d2:
         1d:c5:38:7c:c4:de:99:d8:bb:a9:71:c2:54:9b:b6:c3:2a:e9:
         f6:d3:7c:44:eb:33:fb:53:d6:f7:4a:c6:0e:df:8b:db:8e:96:
         9c:30:34:a8:9e:0d:1b:f5:54:fe:9d:81:c8:3c:61:e9:b1:8c:
         6d:51:14:d8:eb:d1:d9:0a:a6:b9:e3:3c:87:56:11:25:01:c9:
         29:0f:8c:14:98:bc:12:dc:e7:2f:6d:a8:df:61:3f:13:03:59:
         45:36:e4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----