Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/y45Si1DWrFQhwtdSOdSBZnt1a4Q.roa
File:                     y45Si1DWrFQhwtdSOdSBZnt1a4Q.roa (raw, json)
Hash identifier:          X9/NsH96jeYvC8FkAMqaYZlvx8GT3vNSo9fL8NYueUk=
Subject key identifier:   CB:8E:52:8B:50:D6:AC:54:21:C2:D7:52:39:D4:81:66:7B:75:6B:84
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018431444DCBBC411E1C6BB9D73AE124C246
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/y45Si1DWrFQhwtdSOdSBZnt1a4Q.roa
Signing time:             Tue 01 Nov 2022 03:37:50 +0000
ROA not before:           Tue 01 Nov 2022 03:37:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     38846
IP address blocks:        2a06:a005:1e10::/44 maxlen: 48
                          2a06:a005:21f0::/44 maxlen: 48
                          2a06:a005:21b0::/44 maxlen: 48
                          2a06:a005:1e00::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:31:44:4d:cb:bc:41:1e:1c:6b:b9:d7:3a:e1:24:c2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov  1 03:37:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cb8e528b50d6ac5421c2d75239d481667b756b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:c7:b2:b4:59:a1:55:9a:61:46:44:89:c5:
                    ab:86:cc:87:c1:31:33:d7:b0:1c:ab:1b:e5:9c:34:
                    3b:08:d1:49:05:13:f1:b2:41:af:e5:4d:ae:cd:96:
                    95:d6:24:13:fb:93:5b:fe:6a:83:3d:1f:3b:94:98:
                    21:4b:61:99:99:5e:2e:eb:13:fc:bf:5b:d1:9c:b7:
                    cc:21:38:1f:c6:8d:e6:63:fe:63:c7:85:f5:e3:8e:
                    78:b2:fa:15:41:1e:d5:96:06:0e:44:e8:06:e7:c9:
                    fd:39:dd:80:f9:10:b5:55:37:ec:29:10:8b:c5:72:
                    e9:09:f7:07:d6:a8:56:3d:6c:8b:41:43:53:d2:94:
                    f0:e6:17:04:77:cf:d3:70:da:40:eb:4e:15:ed:dc:
                    27:4f:de:41:16:e9:3c:e1:2f:e4:c0:6f:b3:00:f1:
                    bd:31:e7:6e:8c:54:90:6a:22:dd:58:34:77:dc:37:
                    d1:2f:e9:72:e8:35:8c:e8:a6:7a:ea:fa:51:cc:86:
                    27:2e:b6:b0:45:68:f6:47:da:71:55:db:fa:6e:d9:
                    14:03:9f:77:b9:c4:7a:50:9f:c3:d8:80:62:83:42:
                    4f:0f:74:1c:27:e0:fc:3b:54:37:70:6f:8d:3e:90:
                    0e:50:18:76:da:50:3c:a9:d7:62:9d:22:15:c2:44:
                    c3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8E:52:8B:50:D6:AC:54:21:C2:D7:52:39:D4:81:66:7B:75:6B:84
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/y45Si1DWrFQhwtdSOdSBZnt1a4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1e00::/43
                  2a06:a005:21b0::/44
                  2a06:a005:21f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:0e:dc:b2:ef:51:18:d4:50:0e:32:13:99:be:5a:56:59:e4:
         cb:e1:e7:e9:2b:19:29:9b:72:7e:01:b7:68:36:e0:4d:cd:f2:
         88:79:d7:8a:f6:5d:43:cd:07:24:42:a3:22:3c:48:85:fe:35:
         e2:1e:55:68:da:38:bd:0c:f8:8f:fa:fa:fc:cc:9a:ab:12:db:
         e4:db:dc:83:34:b0:46:95:5e:77:ce:55:14:b0:0b:ed:30:3b:
         e8:f5:93:13:eb:73:ce:11:9f:f3:a9:00:88:cb:f4:a0:99:0e:
         2d:8b:6b:60:3f:70:25:50:67:81:ec:be:6b:c0:f3:e6:4d:c9:
         59:73:ba:c3:0a:92:db:d3:ab:90:4b:14:c9:af:33:9c:7d:65:
         2c:62:36:e7:6f:bf:b0:ec:de:aa:72:9e:ff:51:77:d1:80:a2:
         7b:45:0a:2d:bf:7c:1c:51:88:65:67:64:2c:25:11:6c:a5:36:
         76:ac:da:7f:24:ab:1f:98:19:93:4d:c8:d8:4a:f7:44:18:ee:
         6e:5c:9b:ea:f4:b5:8b:9c:5d:40:6a:80:4f:0b:65:36:49:36:
         18:22:13:b3:0f:33:69:5d:29:ed:6d:13:a9:14:4b:86:56:81:
         3a:1e:72:ca:a8:11:ef:96:01:48:13:48:a5:03:06:47:82:72:
         e9:fb:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----