Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iY9hISyMDmBPm1YibDAulndS3f0.roa
File:                     iY9hISyMDmBPm1YibDAulndS3f0.roa (raw, json)
Hash identifier:          vwKa2lz10w0KyRQwuDODf6lFHN485S8pacvIkSFxKsU=
Subject key identifier:   89:8F:61:21:2C:8C:0E:60:4F:9B:56:22:6C:30:2E:96:77:52:DD:FD
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018203E22D3BB3CF4A2E49EDE8008C480C67
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iY9hISyMDmBPm1YibDAulndS3f0.roa
Signing time:             Fri 15 Jul 2022 22:02:10 +0000
ROA not before:           Fri 15 Jul 2022 22:02:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210387
IP address blocks:        2a06:a001:a0f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:03:e2:2d:3b:b3:cf:4a:2e:49:ed:e8:00:8c:48:0c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 15 22:02:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=898f61212c8c0e604f9b56226c302e967752ddfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:15:ec:e7:ae:c7:e3:26:dd:a9:d3:82:34:6f:
                    61:8a:f6:53:26:47:3f:b4:0f:d8:ac:42:68:23:7c:
                    8f:55:7e:54:00:1c:df:9d:a4:2f:99:c5:4c:c5:41:
                    18:36:14:42:00:d0:46:68:4a:2c:2e:7c:40:59:ba:
                    fb:ff:8a:9d:c6:dc:2e:9f:f0:a1:ee:b6:eb:1a:9b:
                    2c:c3:d3:0f:9a:65:ae:57:e3:3e:7d:33:67:f6:cc:
                    1b:f5:3b:d4:7c:ff:d8:2a:11:5b:20:7e:22:bd:bd:
                    2c:bc:cf:70:d7:3c:ce:11:55:d0:d5:d2:56:0c:c7:
                    44:c3:6e:62:26:e1:c3:05:3b:80:a9:3d:dd:80:60:
                    17:d1:44:d0:43:70:67:60:11:5f:dc:45:b7:90:72:
                    87:81:ba:4f:eb:b8:46:f8:49:57:ad:7d:3b:b9:c4:
                    f9:e0:d1:4a:88:61:c3:6b:82:05:c4:a7:e1:0a:e8:
                    6d:de:40:88:ae:de:aa:29:35:51:6a:77:20:f2:d8:
                    1c:0a:10:c0:bf:14:0a:16:48:ce:f6:40:b3:13:9d:
                    20:1d:ca:45:a0:d6:2b:25:6b:40:0e:98:e8:ab:9b:
                    99:41:f2:38:9d:85:cf:28:15:c4:f2:4d:a9:40:2d:
                    95:ae:98:22:98:55:f3:2a:82:51:4f:aa:f8:47:33:
                    58:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8F:61:21:2C:8C:0E:60:4F:9B:56:22:6C:30:2E:96:77:52:DD:FD
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/iY9hISyMDmBPm1YibDAulndS3f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a001:a0f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:dc:76:47:f3:ea:8e:29:ae:b9:a3:da:bc:1f:b8:a4:45:0d:
         92:c2:72:09:64:a1:d8:5f:ba:01:24:18:cf:53:ac:d6:4e:f0:
         97:35:c3:a5:25:98:df:b0:5a:cc:a9:60:b4:8a:34:ba:12:7f:
         6a:89:57:47:49:2b:e7:30:29:3c:9c:d3:d7:99:bb:62:e3:7e:
         ae:d9:73:87:a0:a6:8b:94:b6:a8:ff:5a:fa:5a:d3:3c:89:42:
         e7:d0:30:47:d9:b8:40:b1:bc:a2:86:2f:1e:8b:3d:67:2d:13:
         5d:0e:19:51:cd:47:fd:7c:6e:b4:d4:e3:d9:69:88:cd:13:75:
         ff:06:19:81:43:cf:e7:94:1e:50:76:04:4c:56:72:0f:89:59:
         c9:93:9d:e9:ca:30:8b:3e:32:42:cf:4a:0d:a9:31:1d:03:dc:
         49:d4:43:76:d8:09:24:64:26:e1:2a:10:8d:bf:86:8d:1a:53:
         48:73:40:0f:93:e8:f3:62:fa:5c:db:d1:b6:06:80:b0:0f:e2:
         45:4b:7b:37:ab:28:04:19:28:3d:09:d3:a5:fc:a6:5e:50:d8:
         18:38:92:d8:1f:a9:fe:3a:8f:76:3f:68:90:57:80:c4:c4:03:
         cd:0a:ec:c1:60:40:b2:f5:f3:63:a7:eb:4c:a7:82:f8:5f:4a:
         a1:87:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----