Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j9WSfsil6Z6zqL_KPhSZh2ofhjI.roa
File:                     j9WSfsil6Z6zqL_KPhSZh2ofhjI.roa (raw, json)
Hash identifier:          HFH59ql9ULWFQ777xgwBaaYWLRccsA91NM8tFdH51o0=
Subject key identifier:   8F:D5:92:7E:C8:A5:E9:9E:B3:A8:BF:CA:3E:14:99:87:6A:1F:86:32
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01824458C2E8C24AA9A30ED9098A70FC84DF
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j9WSfsil6Z6zqL_KPhSZh2ofhjI.roa
Signing time:             Thu 28 Jul 2022 10:27:23 +0000
ROA not before:           Thu 28 Jul 2022 10:27:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203655
IP address blocks:        2a06:a005:13e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:44:58:c2:e8:c2:4a:a9:a3:0e:d9:09:8a:70:fc:84:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 28 10:27:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fd5927ec8a5e99eb3a8bfca3e1499876a1f8632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:8c:bd:6f:64:d7:09:f9:56:e0:70:d9:f2:
                    f7:05:43:5c:ee:ce:eb:57:5a:f9:9d:0e:73:86:1a:
                    10:2f:04:77:b9:85:8e:a3:06:2a:b7:d9:9d:35:14:
                    b2:f4:f5:dc:4c:96:1a:21:3f:48:51:43:2b:d7:24:
                    78:92:3f:ae:59:0e:c8:c7:ec:81:97:39:c5:76:b3:
                    7d:79:5b:c3:d1:66:48:7c:c0:aa:bd:11:81:a8:cc:
                    8d:4e:ba:06:c0:7f:82:24:af:4a:43:3e:7f:a6:ee:
                    c4:3b:64:d1:7b:84:ff:d4:fb:57:ca:fe:3b:1e:bc:
                    8f:1c:9c:c2:d3:6b:00:e0:e2:39:98:75:a3:72:f5:
                    38:ba:e1:34:34:81:14:fb:e1:9f:ed:4c:85:a3:3a:
                    dd:b7:df:c8:86:e5:4e:49:e1:3c:03:3b:88:b7:aa:
                    50:99:0d:01:b2:38:9a:f3:0b:38:a2:72:df:68:77:
                    c0:d8:8e:0d:af:c0:de:63:0d:8a:d3:71:50:4e:4d:
                    2f:8b:a3:0d:05:5a:85:2a:b2:0f:a0:30:e1:43:ac:
                    97:7f:8b:55:8e:67:c1:30:06:7b:68:06:0a:f8:4e:
                    94:26:9e:a7:6c:f7:f0:77:43:8c:89:70:02:30:89:
                    cd:d6:8b:22:b8:88:19:3e:50:8f:ea:76:0b:6e:b4:
                    56:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D5:92:7E:C8:A5:E9:9E:B3:A8:BF:CA:3E:14:99:87:6A:1F:86:32
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j9WSfsil6Z6zqL_KPhSZh2ofhjI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:13e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:c4:47:5c:fc:0e:d7:2a:d0:13:09:e3:43:5e:4d:77:d2:f8:
         ca:0b:6c:17:34:bd:34:16:c8:72:5e:c0:a5:4c:d4:1a:1b:84:
         59:62:bd:08:b7:9c:23:51:23:d6:93:41:b7:cd:7f:7a:c0:12:
         90:89:49:f4:a9:c2:e1:2a:e3:a6:2d:68:30:e7:74:43:26:6a:
         e2:2a:56:2e:38:56:ba:a8:e7:e8:44:1c:b1:6a:fa:9a:fc:fb:
         d4:42:3f:8d:c5:ae:f5:6e:d1:18:41:9d:92:8e:38:9e:d0:41:
         9b:70:17:c2:6d:b4:ab:ae:a5:26:6c:13:26:24:4e:59:9d:48:
         3f:01:b3:19:75:6c:ea:27:da:f6:bc:23:6b:2f:76:df:ad:90:
         ea:d3:08:2e:b5:92:6c:93:1c:3e:f5:61:ff:d8:8c:2f:e0:5b:
         e7:47:3f:70:b5:d3:17:74:c1:bd:1d:f9:48:e3:d6:27:13:4d:
         a5:2e:47:a9:62:b1:76:34:be:39:4a:6b:80:b9:1b:a3:cc:48:
         24:58:8a:06:d0:f4:ca:97:98:00:b5:33:75:70:34:10:78:18:
         7a:68:e5:c5:fa:d1:d6:6b:7b:9a:8b:29:71:b4:5c:65:20:5d:
         4f:8f:3c:c5:97:d4:5c:7b:0f:bd:b1:78:71:fe:f3:1e:a3:8d:
         df:9d:c8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----