Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/isJnW_NK3sD4kxHySuGuEgB3rR0.roa
File:                     isJnW_NK3sD4kxHySuGuEgB3rR0.roa (raw, json)
Hash identifier:          7b5ayZNobxN96JDB6YbbMmuKtTXXNedoQlAjsddfbAg=
Subject key identifier:   8A:C2:67:5B:F3:4A:DE:C0:F8:93:11:F2:4A:E1:AE:12:00:77:AD:1D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018327B4D056B1D59F3187B0E0D5E2505DB5
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/isJnW_NK3sD4kxHySuGuEgB3rR0.roa
Signing time:             Sat 10 Sep 2022 14:01:44 +0000
ROA not before:           Sat 10 Sep 2022 14:01:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203069
IP address blocks:        2a06:a005:1b20::/44 maxlen: 48
                          2a06:a005:1b70::/44 maxlen: 48
                          2a06:a005:1b10::/44 maxlen: 48
                          2a06:a005:1b00::/44 maxlen: 48
                          2a06:a005:1af0::/44 maxlen: 48
                          2a06:a005:488::/46 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a05:dfc7:4800::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:27:b4:d0:56:b1:d5:9f:31:87:b0:e0:d5:e2:50:5d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 10 14:01:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8ac2675bf34adec0f89311f24ae1ae120077ad1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:13:11:74:d5:9d:4b:6a:36:fe:77:cc:0a:19:
                    7a:d6:fb:89:68:7f:8c:44:e1:64:56:f1:1b:79:c9:
                    b2:83:d7:a9:ad:0b:37:f5:0a:8e:df:01:48:49:5b:
                    c7:cc:29:63:d7:e7:d5:ca:8b:7e:28:b7:b9:61:8f:
                    fb:32:f9:d1:f8:d6:fe:f6:df:6c:c0:2d:4d:62:34:
                    2d:c5:30:a6:58:12:ca:3d:f3:ee:a7:37:ba:f6:d3:
                    be:18:50:2f:ca:65:f3:23:e5:57:f9:ae:40:34:e7:
                    e3:20:f6:0c:60:b4:90:df:a6:ac:a3:02:ac:74:09:
                    e3:3e:db:fc:ab:63:94:6b:12:96:02:b7:95:84:87:
                    80:4a:98:11:da:f1:e3:98:2f:7a:f8:01:82:b4:5b:
                    dd:f2:ed:b0:0d:9a:3a:e1:88:58:08:0c:92:15:d1:
                    b5:a1:28:74:bd:29:ec:db:bc:83:3d:34:6a:b1:1f:
                    bd:71:09:0d:5a:8a:b5:31:3c:b2:22:bf:4d:b4:e7:
                    6b:8a:74:6e:93:24:30:f8:e2:8b:5f:e9:31:84:f1:
                    80:cc:13:c9:8c:5d:a8:25:55:0c:e5:4b:87:05:48:
                    20:b1:86:c0:ff:c6:db:e2:06:8c:65:7c:25:5a:7f:
                    37:80:96:20:fd:42:df:44:27:aa:a0:67:f8:11:56:
                    43:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C2:67:5B:F3:4A:DE:C0:F8:93:11:F2:4A:E1:AE:12:00:77:AD:1D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/isJnW_NK3sD4kxHySuGuEgB3rR0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4800::/40
                  2a06:a005:488::/46
                  2a06:a005:1af0::-2a06:a005:1b2f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1b70::/44
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:a1:62:fd:fc:fa:ca:ee:e0:2b:4d:38:b5:ed:af:c2:d9:d7:
         0d:b8:e0:12:9d:a3:d2:92:9f:25:fe:97:31:5d:44:dd:e3:ed:
         55:1d:ba:75:83:0f:7f:ce:82:21:50:76:6f:d4:44:bf:9c:8b:
         d5:c0:8a:ea:5e:54:01:79:d5:90:56:d7:c9:b4:03:3b:86:68:
         f3:d9:fb:82:fb:55:99:19:03:1a:81:a5:b9:06:ed:f7:26:b7:
         b1:02:dc:eb:63:79:9d:f2:1a:70:f3:8b:b9:2e:93:3c:d9:80:
         65:76:b3:b4:40:8b:c1:07:c2:46:21:fd:9a:f6:ee:b6:7e:e5:
         4c:00:e5:26:bc:42:ba:be:c0:17:46:12:80:b1:21:f5:e4:88:
         d7:d4:e0:1c:c7:9c:7c:82:e7:0b:a7:db:d7:75:d7:a2:6d:9c:
         bf:eb:bf:5a:ee:19:4c:71:eb:4b:fe:be:e9:62:1f:67:e0:29:
         17:a1:15:76:29:d4:1d:fe:fb:84:b9:2f:c5:fa:2a:a3:55:b9:
         41:4f:e0:05:50:ea:13:64:74:24:7c:93:f8:ca:5f:a1:be:2b:
         21:0c:c0:48:12:7d:82:4a:e6:4b:1d:3c:9f:07:78:5d:58:bb:
         1c:45:08:10:4e:ed:1b:84:2b:6d:bd:ef:38:56:32:bc:2f:f6:
         4b:58:c3:58
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAYMntNBWsdWfMYew4NXiUF21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTEwMTQwMTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWMyNjc1YmYzNGFkZWMwZjg5MzExZjI0YWUxYWUxMjAwNzdhZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRMRdNWdS2o2/nfMChl61vuJaH+M
ROFkVvEbecmyg9eprQs39QqO3wFISVvHzClj1+fVyot+KLe5YY/7MvnR+Nb+9t9s
wC1NYjQtxTCmWBLKPfPupze69tO+GFAvymXzI+VX+a5ANOfjIPYMYLSQ36asowKs
dAnjPtv8q2OUaxKWAreVhIeASpgR2vHjmC96+AGCtFvd8u2wDZo64YhYCAySFdG1
oSh0vSns27yDPTRqsR+9cQkNWoq1MTyyIr9NtOdrinRukyQw+OKLX+kxhPGAzBPJ
jF2oJVUM5UuHBUggsYbA/8bb4gaMZXwlWn83gJYg/ULfRCeqoGf4EVZDlQIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFIrCZ1vzSt7A+JMR8krhrhIAd60dMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvaXNKbldfTkszc0Q0a3hIeVN1R3VFZ0IzclIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzA9BAIAAjA3AwYAKgXfx0gD
BwIqBqAFBIgwEgMHBCoGoAUa8AMHBCoGoAUbIAMHBCoGoAUbcAMHACoHVMKwCzAN
BgkqhkiG9w0BAQsFAAOCAQEAhqFi/fz6yu7gK004te2vwtnXDbjgEp2j0pKfJf6X
MV1E3ePtVR26dYMPf86CIVB2b9REv5yL1cCK6l5UAXnVkFbXybQDO4Zo89n7gvtV
mRkDGoGluQbt9ya3sQLc62N5nfIacPOLuS6TPNmAZXaztECLwQfCRiH9mvbutn7l
TADlJrxCur7AF0YSgLEh9eSI19TgHMecfILnC6fb13XXom2cv+u/Wu4ZTHHrS/6+
6WIfZ+ApF6EVdinUHf77hLkvxfoqo1W5QU/gBVDqE2R0JHyT+Mpfob4rIQzASBJ9
gkrmSx08nwd4XVi7HEUIEE7tG4Qrbb3vOFYyvC/2S1jDWA==
-----END CERTIFICATE-----