Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kiz5A6twdMK-_ZN2spU4pdC1Z7o.roa
File:                     kiz5A6twdMK-_ZN2spU4pdC1Z7o.roa (raw, json)
Hash identifier:          KmqlmdD6SlFFgMcmhqwrEKVxqp9I4FgpZ4N/uD1X/ZQ=
Subject key identifier:   92:2C:F9:03:AB:70:74:C2:BE:FD:93:76:B2:95:38:A5:D0:B5:67:BA
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184650605F145CBF040BC70E6161F831C21
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kiz5A6twdMK-_ZN2spU4pdC1Z7o.roa
Signing time:             Fri 11 Nov 2022 04:50:04 +0000
ROA not before:           Fri 11 Nov 2022 04:50:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206131
IP address blocks:        2a06:a005:1c78::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:65:06:05:f1:45:cb:f0:40:bc:70:e6:16:1f:83:1c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 11 04:50:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=922cf903ab7074c2befd9376b29538a5d0b567ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a7:da:49:3a:9c:42:75:56:40:40:80:9a:3c:
                    ff:16:2c:cc:65:4a:17:15:aa:6f:c9:49:bc:3e:6c:
                    f6:4a:f7:1e:de:29:b0:3b:8f:26:42:79:86:82:3a:
                    ef:f5:22:24:38:79:cc:eb:86:5b:77:3b:53:da:a4:
                    48:dc:ad:6b:c7:ee:07:d1:a6:42:b4:3b:75:b8:7c:
                    30:fb:e2:05:01:50:49:a1:2c:f0:6b:1d:d4:fc:6e:
                    58:fe:53:3f:31:50:b9:6f:9b:dc:84:24:3d:45:3d:
                    05:03:1f:d4:27:ba:47:64:a5:f1:f0:b4:b8:29:15:
                    a2:09:7e:f2:59:14:9e:34:d3:85:ce:f7:ae:e9:81:
                    1e:62:a9:71:e5:db:f8:4e:6f:fe:66:f6:d5:a1:a2:
                    5d:0f:78:e5:d0:e4:1b:df:33:69:04:0b:17:ea:4d:
                    2f:0b:37:7b:11:45:12:1d:ff:c0:08:87:36:7b:d3:
                    20:c8:0c:28:b4:e4:d4:9f:d9:09:9f:d3:30:d1:35:
                    d6:73:b7:65:36:45:3b:14:c1:41:f6:0c:06:c9:03:
                    b5:a1:ee:f8:88:3c:0b:81:1e:03:49:1a:ba:75:fd:
                    ac:4e:25:96:74:c1:ad:1d:73:61:05:fb:68:a7:62:
                    1c:e8:34:04:fc:0e:cf:04:14:2e:50:2a:99:70:b8:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2C:F9:03:AB:70:74:C2:BE:FD:93:76:B2:95:38:A5:D0:B5:67:BA
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kiz5A6twdMK-_ZN2spU4pdC1Z7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1c78::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:57:11:54:bb:ef:67:43:15:f9:c1:06:5e:3c:16:83:25:
         64:ac:6f:32:41:86:25:86:f1:40:50:10:36:a7:dc:fe:22:0e:
         9f:13:49:01:3f:13:14:9f:72:29:ac:3b:5f:9c:55:e3:b3:ab:
         97:72:10:09:29:79:b7:01:f0:0e:1c:bf:88:4d:86:74:16:0c:
         9a:83:20:47:1f:a3:b8:28:3a:22:5f:4d:36:e6:03:e9:a0:59:
         4f:7f:6c:8e:6c:bd:5a:2f:06:b2:42:8e:be:6c:6e:56:94:d7:
         ea:5d:54:b2:da:f3:0d:32:92:a7:5f:c9:7e:ed:ec:69:d8:c8:
         da:a9:bd:fa:24:c5:8a:f3:4d:f0:79:66:06:43:f1:a3:5e:0c:
         d4:b8:9e:d3:4e:f0:53:c0:37:68:39:5c:c1:48:0d:44:54:d8:
         29:60:25:76:9e:51:19:5e:61:c2:8a:92:a1:a4:f6:0f:14:58:
         0e:65:69:da:ef:4c:b8:f7:e4:1d:25:9c:78:90:8d:43:e7:8e:
         96:f8:14:22:5c:bd:6a:e9:02:30:82:36:4b:1d:7b:b9:e1:74:
         77:41:c5:bc:71:d7:d4:20:de:22:34:2b:9d:cb:13:ae:4f:86:
         27:d0:9f:55:df:68:ac:f5:9a:be:25:3d:19:ca:7e:b3:7a:59:
         fc:08:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----