Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/on0NgNWEaEVuAsmb0Gaoc0iaIJo.roa
File:                     on0NgNWEaEVuAsmb0Gaoc0iaIJo.roa (raw, json)
Hash identifier:          raCnznlax8kOW+TiT7HVebb+UEFcz1ithlbN+AKMVF8=
Subject key identifier:   A2:7D:0D:80:D5:84:68:45:6E:02:C9:9B:D0:66:A8:73:48:9A:20:9A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018378F693FE7F138DA66EB1566ADCAB6E32
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/on0NgNWEaEVuAsmb0Gaoc0iaIJo.roa
Signing time:             Mon 26 Sep 2022 08:42:49 +0000
ROA not before:           Mon 26 Sep 2022 08:42:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212900
IP address blocks:        2a06:a005:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:78:f6:93:fe:7f:13:8d:a6:6e:b1:56:6a:dc:ab:6e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 26 08:42:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a27d0d80d58468456e02c99bd066a873489a209a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:54:14:2a:e3:8c:78:b9:31:d1:58:1b:d9:
                    c7:f9:59:7e:04:e7:7b:72:e7:8f:81:38:80:bf:6f:
                    90:2d:99:f6:06:ec:ad:ea:3d:0c:c9:70:42:d6:11:
                    d2:a3:db:8f:e0:09:4a:ff:41:d0:ed:c2:4d:a5:10:
                    3e:fe:c8:b9:48:f7:c0:55:b4:ae:5b:99:d2:45:85:
                    d8:f1:95:55:29:d3:cf:62:e2:e0:85:1c:47:96:c5:
                    dd:db:fa:97:ed:37:45:ea:2c:84:21:07:77:d9:20:
                    08:ff:c0:03:ea:4c:32:6b:c0:8e:3a:6d:a2:86:11:
                    62:09:a4:53:c9:c3:de:65:f1:c9:3f:ae:d2:a4:fb:
                    95:91:74:33:a6:9a:6a:ab:ff:f9:c4:4b:c0:fa:dd:
                    8c:d5:fa:ba:5c:a9:83:f2:17:29:97:f8:39:18:61:
                    c0:a1:e5:39:30:09:74:98:0c:27:b8:a4:fd:d6:99:
                    91:a9:d2:33:74:d5:ae:fe:a5:e2:3e:f1:a8:62:cb:
                    53:b0:be:11:3f:eb:ca:bb:61:a3:c2:63:c9:be:b2:
                    15:49:dc:68:a4:90:fd:a8:1d:ea:9b:7b:81:57:98:
                    d3:2a:eb:b9:cd:cd:87:50:1d:b8:4d:ad:21:b2:e5:
                    33:df:71:19:33:c2:9b:a0:3e:9b:5f:04:27:32:94:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7D:0D:80:D5:84:68:45:6E:02:C9:9B:D0:66:A8:73:48:9A:20:9A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/on0NgNWEaEVuAsmb0Gaoc0iaIJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:2f:90:36:43:78:4e:d2:5e:3b:fe:c5:62:df:73:5e:f7:e0:
         76:83:a7:5f:a3:a7:8c:e2:69:4a:8c:43:90:89:92:b5:f5:bb:
         33:31:1a:5a:c4:1c:21:96:1e:09:29:e5:1b:85:19:fc:fb:bc:
         53:be:00:dd:66:08:d1:36:50:27:3b:2e:1c:14:29:64:7a:10:
         7d:92:72:09:36:6a:86:68:7a:0b:54:9b:4d:57:5f:70:a5:f7:
         55:c3:6e:9a:d5:49:63:05:2b:08:47:a1:5c:97:1c:20:f9:00:
         8c:18:08:e4:27:37:71:80:0a:83:0c:06:e4:a1:65:f9:a5:a9:
         e7:a7:65:cc:29:d0:5d:00:16:e5:e4:1e:b6:a8:ec:3a:f4:fc:
         3b:fc:71:c2:f7:12:99:77:6a:d2:1d:fe:1a:33:08:3f:81:5c:
         38:43:ff:8f:85:d3:a4:3f:cd:f0:bc:6d:3e:85:d5:94:00:23:
         26:4f:23:33:82:ab:7f:43:df:5c:52:9a:f2:71:58:a3:88:e1:
         16:23:c5:bc:fb:f7:86:40:f0:ed:fc:ae:ca:3e:b1:d1:d1:7c:
         1d:1f:d5:bb:74:91:0f:3c:1b:83:4b:82:81:23:65:0b:fb:cf:
         5d:66:24:88:cd:01:21:31:fa:34:a1:b0:4d:a7:a9:28:a5:87:
         a0:f3:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----