Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kzmrKcvoi5RiV9P9mrexLCXrfJ0.roa
File:                     kzmrKcvoi5RiV9P9mrexLCXrfJ0.roa (raw, json)
Hash identifier:          IOhArarJYrwRiUbIuY1384ZvTE4CqP7Vay3dtRcr63U=
Subject key identifier:   93:39:AB:29:CB:E8:8B:94:62:57:D3:FD:9A:B7:B1:2C:25:EB:7C:9D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A9555FD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kzmrKcvoi5RiV9P9mrexLCXrfJ0.roa
Signing time:             Sat 04 Jun 2022 13:08:23 +0000
ROA not before:           Sat 04 Jun 2022 13:08:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138211
IP address blocks:        2a06:a005:c30::/44 maxlen: 48
                          2a06:a005:7c0::/44 maxlen: 48
                          2a06:a005:520::/44 maxlen: 48
                          2a06:a005:510::/44 maxlen: 48
                          2a06:a005:540::/44 maxlen: 48
                          2a06:a005:530::/44 maxlen: 48
                          2a06:a005:4c0::/44 maxlen: 48
                          2a06:a005:c20::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445994493 (0x1a9555fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun  4 13:08:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9339ab29cbe88b946257d3fd9ab7b12c25eb7c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b1:60:8f:99:f3:2e:1c:16:ef:4e:32:4a:1d:
                    20:42:4e:5b:d5:9d:ce:d7:42:1b:a0:58:fb:fe:4b:
                    c2:db:72:de:0f:b4:71:30:a9:ea:1e:6f:2a:9d:88:
                    0c:de:33:97:65:38:4c:78:0b:68:1f:1b:c7:ed:f9:
                    a5:9d:de:26:9a:4c:c3:d1:ee:16:ea:76:dd:3b:54:
                    27:90:74:ee:fd:66:72:f6:81:46:06:cb:24:40:b0:
                    b9:a3:55:10:ab:4f:d9:79:bf:82:a8:cd:52:a9:e6:
                    8c:3e:ab:5f:70:f0:68:de:59:a0:c4:1e:40:ae:02:
                    45:6c:3d:d0:f6:8a:7b:7e:dc:27:a3:a1:c2:77:9c:
                    9d:c0:64:5f:5e:ea:af:6f:ec:89:f8:3c:51:84:39:
                    1f:42:fc:23:48:47:da:62:4b:a2:7f:dc:38:c5:43:
                    12:fe:e2:30:85:5e:10:56:cf:8a:1b:5c:33:83:fd:
                    72:63:b5:b2:0a:d1:4d:b2:27:09:41:a3:a7:4d:1c:
                    eb:cf:23:32:6d:6f:82:65:8d:bc:d8:95:80:4f:75:
                    23:87:3e:f2:8a:56:41:f6:c7:84:b5:69:07:f3:5e:
                    21:bc:91:93:72:f2:77:0f:3a:51:ad:ef:8b:93:88:
                    26:e0:3a:3c:60:d0:cb:63:5c:43:a7:60:cd:38:29:
                    33:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:39:AB:29:CB:E8:8B:94:62:57:D3:FD:9A:B7:B1:2C:25:EB:7C:9D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kzmrKcvoi5RiV9P9mrexLCXrfJ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4c0::/44
                  2a06:a005:510::-2a06:a005:54f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:7c0::/44
                  2a06:a005:c20::/43

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:3e:4b:a6:2c:25:2c:1d:6c:e2:c5:aa:4d:91:1d:31:10:
         e2:5f:52:e0:f7:a9:28:2b:b1:b7:95:67:10:9b:54:d0:b0:8e:
         14:cb:06:2b:a6:48:43:cb:c5:a2:d0:78:62:dd:fa:78:71:36:
         c8:5a:87:4a:e5:10:85:0f:4b:e6:41:5e:5a:16:4a:4b:ed:81:
         3b:89:0f:92:18:8d:58:4e:7e:bc:2a:ee:9f:4e:a1:65:bc:a7:
         82:1b:3e:9c:96:5d:fe:26:50:4a:2e:cf:79:7d:cf:f9:22:3a:
         05:b6:5b:8c:a3:ec:3b:e3:5e:8c:26:4c:d0:1a:e2:87:1b:e3:
         f1:05:c9:5a:fe:6b:a2:0a:0f:d8:13:96:8f:a5:dd:55:bd:32:
         9a:d1:6a:76:22:63:22:d9:8e:fa:36:38:c8:e9:15:50:79:57:
         f6:b9:91:e6:e5:7b:53:91:cc:34:b6:7b:24:30:74:be:e2:2a:
         d8:07:f8:7e:b4:cc:1f:57:5b:1d:fd:f2:59:6a:c4:d6:24:9a:
         e8:57:a5:db:7a:87:62:1a:bb:f9:e2:3f:93:4e:25:c8:fc:06:
         ae:30:44:1e:53:2c:3f:9e:e6:70:d5:01:94:24:ee:75:af:8a:
         08:33:a6:de:80:15:d3:67:03:fc:b8:fb:66:c1:6c:45:b3:ae:
         c0:57:d0:60
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIEGpVV/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDYw
NDEzMDgyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTMzOWFiMjljYmU4
OGI5NDYyNTdkM2ZkOWFiN2IxMmMyNWViN2M5ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOOxYI+Z8y4cFu9OMkodIEJOW9WdztdCG6BY+/5Lwtty3g+0
cTCp6h5vKp2IDN4zl2U4THgLaB8bx+35pZ3eJppMw9HuFup23TtUJ5B07v1mcvaB
RgbLJECwuaNVEKtP2Xm/gqjNUqnmjD6rX3DwaN5ZoMQeQK4CRWw90PaKe37cJ6Oh
wnecncBkX17qr2/sifg8UYQ5H0L8I0hH2mJLon/cOMVDEv7iMIVeEFbPihtcM4P9
cmO1sgrRTbInCUGjp00c688jMm1vgmWNvNiVgE91I4c+8opWQfbHhLVpB/NeIbyR
k3Lydw86Ua3vi5OIJuA6PGDQy2NcQ6dgzTgpM+kCAwEAAaOCAjIwggIuMB0GA1Ud
DgQWBBSTOaspy+iLlGJX0/2at7EsJet8nTAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L2t6bXJLY3ZvaTVSaVY5UDltcmV4TENYcmZKMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBI
BggrBgEFBQcBBwEB/wQ5MDcwNQQCAAIwLwMHBCoGoAUEwDASAwcEKgagBQUQAwcE
KgagBQVAAwcEKgagBQfAAwcFKgagBQwgMA0GCSqGSIb3DQEBCwUAA4IBAQB71z5L
piwlLB1s4sWqTZEdMRDiX1Lg96koK7G3lWcQm1TQsI4UywYrpkhDy8Wi0Hhi3fp4
cTbIWodK5RCFD0vmQV5aFkpL7YE7iQ+SGI1YTn68Ku6fTqFlvKeCGz6cll3+JlBK
Ls95fc/5IjoFtluMo+w7416MJkzQGuKHG+PxBcla/muiCg/YE5aPpd1VvTKa0Wp2
ImMi2Y76NjjI6RVQeVf2uZHm5XtTkcw0tnskMHS+4irYB/h+tMwfV1sd/fJZasTW
JJroV6XbeodiGrv54j+TTiXI/AauMEQeUyw/nuZw1QGUJO51r4oIM6begBXTZwP8
uPtmwWxFs67AV9Bg
-----END CERTIFICATE-----