Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/ara2wWHvLVPzEC-f6pzUVVzR9wg.roa
File:                     ara2wWHvLVPzEC-f6pzUVVzR9wg.roa (raw, json)
Hash identifier:          7jON/RYtzMfkaOW3FWLqsi/sq9ibboog9jdFh5u3XFo=
Subject key identifier:   6A:B6:B6:C1:61:EF:2D:53:F3:10:2F:9F:EA:9C:D4:55:5C:D1:F7:08
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       04A74F70
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/ara2wWHvLVPzEC-f6pzUVVzR9wg.roa
Signing time:             Sat 01 Jan 2022 10:03:16 +0000
ROA not before:           Sat 01 Jan 2022 10:03:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211693
IP address blocks:        2a10:4646:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78073712 (0x4a74f70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Jan  1 10:03:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ab6b6c161ef2d53f3102f9fea9cd4555cd1f708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:af:b8:b8:32:27:09:d4:d4:25:10:a8:1d:
                    47:4f:a8:5c:68:75:f3:16:e4:c8:14:e7:02:ed:0e:
                    13:ea:4e:1a:f7:76:1f:5b:0b:e5:e7:29:13:d2:a6:
                    b8:1b:ab:ff:21:74:c4:6b:d8:02:7f:94:a7:22:f1:
                    87:d6:89:80:0d:00:d8:83:a8:91:7e:6b:d8:fe:de:
                    fa:01:25:ab:e9:7d:69:ea:50:51:2f:ba:ee:b2:65:
                    27:fe:0a:eb:e7:35:d2:0d:aa:11:92:b0:5c:00:07:
                    c2:82:cc:17:b0:1f:c4:1a:b4:a1:71:94:fd:ac:a3:
                    ae:d0:9c:97:ee:c9:31:a0:b0:28:b1:a6:50:59:37:
                    ad:0f:a5:58:92:fb:16:5a:07:e4:e6:f9:dd:a2:91:
                    2d:2f:5f:d9:14:1d:85:81:98:7b:ca:73:7b:46:bd:
                    bc:6b:73:5b:51:18:1d:90:31:dc:77:af:db:7e:6c:
                    d8:8b:12:85:9f:b5:07:c1:33:f2:ed:9e:d2:60:94:
                    88:6a:79:01:b7:f4:1d:07:d8:9d:e7:17:2b:a4:61:
                    a8:60:20:b7:8b:0f:65:23:44:34:c0:57:b5:45:e0:
                    4d:d6:33:a3:24:9e:d7:35:2e:dd:d1:1a:03:af:d0:
                    ff:a2:92:6b:64:11:36:58:c6:c9:8c:2a:7b:13:d3:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B6:B6:C1:61:EF:2D:53:F3:10:2F:9F:EA:9C:D4:55:5C:D1:F7:08
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/ara2wWHvLVPzEC-f6pzUVVzR9wg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:e1:03:ed:26:63:59:79:fc:55:d5:c7:7b:0a:16:20:4e:d6:
         b2:27:d1:55:e9:c0:f0:4f:33:3c:90:d9:e5:9c:5d:4c:3c:15:
         e3:2c:d9:4c:44:b0:c7:19:24:4b:ce:28:70:c1:e9:05:a4:56:
         8c:21:c2:ac:2c:17:82:c2:5c:1a:98:63:31:e6:73:a0:75:c8:
         aa:4d:2e:48:f7:11:05:a2:dd:28:cf:4f:81:04:c5:80:ff:16:
         11:7b:9e:38:cd:ca:6b:c6:c8:58:d0:94:8f:01:2d:54:08:6f:
         ad:b7:6f:68:b0:2b:ba:05:62:c7:35:49:af:0e:4c:a2:7c:00:
         ef:36:f3:6d:8f:d5:f4:91:97:9d:76:d0:87:b8:b2:b9:e4:43:
         56:54:69:6c:eb:d7:47:86:a8:33:3d:61:a6:cf:f2:78:6c:78:
         61:cd:0c:e0:ac:ac:e3:36:45:ad:94:de:ba:b5:85:58:a2:ed:
         d1:15:3d:8e:a9:5f:2b:f5:22:11:1b:87:23:2c:9f:dd:21:ae:
         d8:2f:63:0d:35:88:33:40:e0:38:a4:d5:94:79:e2:29:d7:46:
         1c:8e:72:2a:3b:dd:a9:34:af:a3:04:6c:d2:48:64:6c:9c:98:
         cc:ef:79:17:65:76:10:5c:a9:25:4e:a5:73:b6:02:1d:57:1b:
         7e:65:61:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----