Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/upma-rvt55H8Vr7svYPShAI4cko.roa
File:                     upma-rvt55H8Vr7svYPShAI4cko.roa (raw, json)
Hash identifier:          ZI6IipEOoNdVcioVDp9G4L9GrTobwM6OKqnfVuorWhQ=
Subject key identifier:   BA:99:9A:FA:BB:ED:E7:91:FC:56:BE:EC:BD:83:D2:84:02:38:72:4A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       189C9905
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/upma-rvt55H8Vr7svYPShAI4cko.roa
Signing time:             Fri 22 Apr 2022 22:03:13 +0000
ROA not before:           Fri 22 Apr 2022 22:03:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210305
IP address blocks:        2a06:a005:5b5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412915973 (0x189c9905)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 22 22:03:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ba999afabbede791fc56beecbd83d2840238724a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:78:ef:29:a2:61:cd:11:a3:fe:ed:9e:3f:
                    01:45:83:e9:f5:aa:ed:63:1f:aa:8c:2e:93:e9:2f:
                    08:58:25:a2:92:05:14:30:44:dd:43:4f:73:ad:09:
                    d8:d1:fb:fa:5f:af:2f:d9:05:d2:a8:76:bf:0f:96:
                    9b:2c:6a:9c:21:19:89:ec:58:f4:84:d5:d5:52:eb:
                    bd:f0:79:ba:17:b9:75:b5:4a:89:29:95:5d:7c:22:
                    ac:fa:01:f4:d2:d3:b6:1e:1a:d6:f9:73:06:d5:d4:
                    88:e6:09:06:07:03:6e:d3:fe:cb:5c:6d:85:50:38:
                    04:29:25:73:84:6b:91:b6:0f:fe:11:63:5c:d7:8a:
                    29:86:32:04:c2:d3:8f:57:a3:eb:e8:50:7f:b2:1f:
                    95:a9:e9:0b:0b:bd:c4:fc:8d:da:5c:3b:23:74:c0:
                    4b:f2:e3:4d:65:49:fc:57:38:54:c8:3c:df:5c:c9:
                    17:84:ad:05:bd:b6:5d:45:46:ed:40:0d:4b:b7:ee:
                    17:01:e1:4e:f3:a7:aa:27:16:44:13:ff:92:0c:ee:
                    49:f3:1b:94:75:2b:0b:9c:7e:44:c0:0a:32:cd:86:
                    99:86:d7:e8:83:d9:e6:fc:42:a4:ca:d2:a8:f2:cc:
                    71:a7:b3:d3:e0:bd:4c:d7:ec:c4:65:ea:e1:88:53:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:99:9A:FA:BB:ED:E7:91:FC:56:BE:EC:BD:83:D2:84:02:38:72:4A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/upma-rvt55H8Vr7svYPShAI4cko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:a5:c8:cb:1e:88:8a:5c:bf:0a:9e:52:4e:45:84:24:04:98:
         7b:c4:95:39:57:c8:6d:a2:cc:53:61:26:05:a3:3d:12:b0:0f:
         d3:21:4f:fa:4c:fe:c8:4c:94:a6:58:c3:f9:1c:39:f8:7d:87:
         eb:79:b1:c2:82:0d:42:7f:5b:2e:1b:90:d6:39:d7:21:b9:ab:
         ce:fa:49:f5:b7:6a:07:99:8e:bb:70:d8:3f:66:56:4e:65:9a:
         e3:37:12:8e:a4:b1:e4:2e:51:05:4e:ac:cf:ed:49:65:0c:46:
         45:96:1a:20:0c:ba:93:69:52:fb:cd:1e:3d:00:5d:7f:37:9e:
         ca:3d:c6:bf:4b:1d:d4:7c:cb:00:81:c1:35:eb:cf:80:70:b6:
         d0:f7:78:3e:f0:2f:da:ab:a7:c3:8d:12:ad:86:b0:5f:fe:b5:
         40:81:4b:74:d4:18:5e:06:2b:2d:98:c9:2d:da:02:a7:9c:ff:
         9a:7a:50:53:d6:ca:44:af:31:a7:da:6e:63:42:21:bf:40:02:
         c6:a6:93:06:82:3d:b1:e9:8d:04:b5:fb:a9:1e:4e:99:8f:eb:
         85:7e:77:dc:bc:41:39:42:45:e6:97:88:93:95:09:a2:d3:83:
         9a:d0:9f:b7:98:71:72:cb:55:96:2c:c9:09:e9:b4:ce:90:0d:
         07:ba:01:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----