Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/grUbTQz61zOFXzLXxemAtWkFoKc.roa
File:                     grUbTQz61zOFXzLXxemAtWkFoKc.roa (raw, json)
Hash identifier:          HXUOPVG4SMxbpXS2hHBs7X7HS2ChoDQALnrGtT6JHFo=
Subject key identifier:   82:B5:1B:4D:0C:FA:D7:33:85:5F:32:D7:C5:E9:80:B5:69:05:A0:A7
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01835BC7001DFD41E25C257C7B576826C20E
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/grUbTQz61zOFXzLXxemAtWkFoKc.roa
Signing time:             Tue 20 Sep 2022 16:41:51 +0000
ROA not before:           Tue 20 Sep 2022 16:41:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213327
IP address blocks:        2a06:a005:1272::/48 maxlen: 48
                          2a06:a005:1c7b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5b:c7:00:1d:fd:41:e2:5c:25:7c:7b:57:68:26:c2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 20 16:41:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82b51b4d0cfad733855f32d7c5e980b56905a0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:1c:26:b5:7f:43:96:ac:6a:35:2a:7e:58:
                    bf:b3:17:d1:73:58:10:e8:f2:1a:51:a5:eb:17:fb:
                    1f:14:b5:e0:ae:81:be:6d:7c:02:41:c5:0b:80:48:
                    c7:bc:01:d6:56:30:5c:71:53:2b:f8:76:22:f9:6b:
                    11:a7:51:76:57:63:6d:2a:cc:ba:2a:b1:ef:cd:b1:
                    42:03:c8:cb:ae:b0:5d:5f:18:a4:1a:b2:56:87:87:
                    d3:de:f0:77:c3:1a:ec:16:3a:b9:b5:b6:37:0a:23:
                    0a:fc:0e:22:ed:73:08:6d:1f:9d:89:da:75:39:42:
                    7c:2a:90:b1:3a:12:32:03:0d:7e:75:5b:78:f9:5a:
                    ac:c6:eb:a3:68:cf:02:09:fd:33:ca:cf:dc:7b:5d:
                    50:da:15:07:72:c1:3d:12:9a:ab:c4:71:93:5a:bb:
                    80:e0:bc:eb:06:3d:37:d1:28:1d:47:ef:c9:ba:58:
                    6e:6d:91:74:40:98:25:b8:42:b0:af:11:77:e7:b2:
                    b6:9d:7e:8f:27:26:5a:37:a4:03:96:8e:f1:16:ee:
                    7b:35:0f:70:e3:8e:fb:a5:f7:9c:3d:b2:8c:14:3c:
                    b4:ba:2b:3f:0f:1e:98:6c:9e:39:0f:5b:e3:80:25:
                    90:d6:bf:86:75:c7:84:1f:5d:21:c9:a4:e7:53:59:
                    f8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B5:1B:4D:0C:FA:D7:33:85:5F:32:D7:C5:E9:80:B5:69:05:A0:A7
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/grUbTQz61zOFXzLXxemAtWkFoKc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1272::/48
                  2a06:a005:1c7b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:db:c8:3e:39:23:2b:12:41:17:26:d3:7d:c7:a6:bc:94:42:
         96:d1:a8:b0:3a:90:33:69:27:b2:ba:cf:98:4f:35:4d:9f:bb:
         38:d0:64:cc:59:53:cf:46:c0:57:1c:24:c3:f8:99:6f:2d:8f:
         cd:63:73:3f:13:61:4d:d8:f0:3f:ac:0b:df:65:ac:15:ee:89:
         d4:0a:59:63:98:0d:0d:34:56:20:20:e9:d1:c2:5a:56:81:38:
         69:c9:23:25:3b:e8:e1:7b:81:cd:40:ef:f0:32:a0:27:b0:93:
         3e:08:cb:ce:63:80:5f:f6:81:5c:05:da:6d:d5:41:46:ca:12:
         2a:6a:f0:6e:fc:9f:d3:dc:62:8f:4f:95:1b:a7:a2:10:a3:85:
         b4:3e:cb:c8:47:7f:7c:e4:ad:f9:af:3a:7b:ab:64:b7:cf:ba:
         5c:cf:41:55:c7:db:3a:d7:14:df:55:3b:ee:84:dd:1b:d4:a0:
         7d:93:d0:c9:f8:f8:06:1a:69:d1:91:43:4b:f0:61:9d:89:eb:
         df:be:23:0c:cb:76:1a:31:10:65:b3:ef:85:1a:fa:ba:43:78:
         4d:fa:f9:f8:1e:75:39:98:f5:24:bc:9e:81:d2:5e:89:8a:e6:
         2b:62:06:a4:3a:6b:61:44:64:24:d8:61:e1:ef:f6:4e:4a:01:
         fc:aa:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----