Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/iaARdPgj9fJK2hqxFjRxih7l5Nw.roa
File:                     iaARdPgj9fJK2hqxFjRxih7l5Nw.roa (raw, json)
Hash identifier:          ZLFpLjjQddH8Gt12311SsysL2Jx/AlmTvnXMpruA3uw=
Subject key identifier:   89:A0:11:74:F8:23:F5:F2:4A:DA:1A:B1:16:34:71:8A:1E:E5:E4:DC
Certificate issuer:       /CN=f5e83611014d5a99f8715dd05bd02234c6b46bd5
Certificate serial:       022FB9B6
Authority key identifier: F5:E8:36:11:01:4D:5A:99:F8:71:5D:D0:5B:D0:22:34:C6:B4:6B:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9eg2EQFNWpn4cV3QW9AiNMa0a9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/iaARdPgj9fJK2hqxFjRxih7l5Nw.roa
Signing time:             Sat 01 Jan 2022 04:59:06 +0000
ROA not before:           Sat 01 Jan 2022 04:59:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        213.139.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36682166 (0x22fb9b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e83611014d5a99f8715dd05bd02234c6b46bd5
        Validity
            Not Before: Jan  1 04:59:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89a01174f823f5f24ada1ab11634718a1ee5e4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:e9:4b:66:35:b2:b3:81:08:c5:ee:98:b9:
                    b5:5f:a3:8d:0c:63:3b:64:4c:81:7d:49:50:9e:4a:
                    06:49:2c:1f:35:a3:4e:71:c0:d3:53:45:96:9c:02:
                    a2:7e:17:1b:1e:38:14:82:f7:89:c3:8c:bb:60:a4:
                    37:77:13:cc:34:12:49:27:95:97:f5:a0:bc:cc:16:
                    ec:92:b4:46:e9:bc:46:cf:20:7f:65:d0:3d:05:48:
                    f6:22:6b:39:d4:61:74:7b:55:ce:bf:77:8c:52:4b:
                    e2:57:fd:3e:1d:a6:2f:97:14:57:5b:9c:d5:97:04:
                    e0:f0:f1:87:4a:7a:48:9d:49:a3:4a:d5:1d:f7:c4:
                    8e:59:d0:9f:f5:5a:2e:dc:34:3b:f6:20:96:f1:30:
                    cd:ae:a7:13:42:12:76:c1:8f:a4:6b:06:6c:aa:52:
                    f7:37:df:f7:96:6e:b3:1f:8c:80:b8:c3:44:72:97:
                    b5:74:e1:0f:00:75:b6:a6:34:ba:7d:c8:97:0d:c4:
                    48:30:0e:da:47:b5:c0:38:52:30:33:99:94:db:af:
                    82:86:3a:19:85:51:26:36:3e:fd:a5:c9:cc:a9:c6:
                    ef:db:5e:e5:c0:a6:14:31:78:4d:48:5d:0b:03:e2:
                    8f:d1:31:f4:bf:b5:1f:f8:58:c6:f8:59:99:e6:bf:
                    b3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A0:11:74:F8:23:F5:F2:4A:DA:1A:B1:16:34:71:8A:1E:E5:E4:DC
            X509v3 Authority Key Identifier:
                keyid:F5:E8:36:11:01:4D:5A:99:F8:71:5D:D0:5B:D0:22:34:C6:B4:6B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eg2EQFNWpn4cV3QW9AiNMa0a9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/iaARdPgj9fJK2hqxFjRxih7l5Nw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b74e8-1cc0-493a-909b-ec439e1b874a/1/9eg2EQFNWpn4cV3QW9AiNMa0a9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:2e:15:73:92:61:9f:46:b1:04:74:43:88:14:29:8f:e6:f6:
         71:76:63:86:7d:6d:4d:01:79:fe:2e:e5:cf:20:4c:da:1f:1f:
         63:b9:82:13:12:3d:a3:6b:e1:47:0a:ea:4b:51:4a:23:e6:21:
         64:a4:5e:de:5c:bd:ae:9a:ca:2c:5c:58:06:bd:3b:55:34:4d:
         67:e9:71:dd:5e:3a:6c:33:75:d3:16:ef:80:05:be:bf:7f:e9:
         17:18:e2:90:ad:2a:d4:6b:28:99:b2:ad:3f:a0:a9:c3:02:33:
         21:a9:5c:96:40:f7:7d:fd:a0:ac:cc:20:34:c7:66:89:e8:71:
         54:a3:65:cf:70:6d:4a:ae:80:25:7a:92:6d:48:5a:8f:d4:4a:
         91:d8:29:6e:6e:34:cd:19:c3:61:e3:cd:25:bd:61:7b:5c:68:
         a1:39:65:c6:93:29:9d:da:a7:e5:fb:fa:c9:1e:ea:1a:90:1c:
         7e:ee:22:3a:23:39:ac:29:80:c8:f2:87:ca:59:33:6e:ee:8c:
         d0:0b:78:78:dd:c5:e8:58:c2:a4:4e:c0:67:e2:15:82:02:57:
         88:5d:f9:14:52:0c:0e:58:64:f8:d2:54:ff:ee:7e:90:07:7a:
         84:60:b6:0b:49:0e:6c:9c:4c:ff:97:05:d4:22:3d:68:3b:6b:
         0b:f5:29:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----