Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/ep_go7bd3sAtNAKYoMzQt_MG9-E.roa
File:                     ep_go7bd3sAtNAKYoMzQt_MG9-E.roa (raw, json)
Hash identifier:          Q3kry53hhCBof70FoRCTxHexxwJIgCBBfmLmaz62I2k=
Subject key identifier:   7A:9F:E0:A3:B6:DD:DE:C0:2D:34:02:98:A0:CC:D0:B7:F3:06:F7:E1
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       04F494E1
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/ep_go7bd3sAtNAKYoMzQt_MG9-E.roa
Signing time:             Tue 01 Feb 2022 23:12:44 +0000
ROA not before:           Tue 01 Feb 2022 23:12:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210810
IP address blocks:        2a10:4646:d0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83137761 (0x4f494e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Feb  1 23:12:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a9fe0a3b6dddec02d340298a0ccd0b7f306f7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:02:6d:6a:f2:08:c1:43:00:08:28:28:90:5d:
                    fc:98:2b:0d:8f:e9:98:70:45:5a:58:64:64:ce:79:
                    99:8c:8c:25:cf:5c:3e:4b:57:e6:44:79:bd:f2:d3:
                    ff:c2:10:a9:d5:e5:59:30:32:89:ce:5d:af:cc:62:
                    58:60:35:1c:6a:9a:9f:a0:5e:f9:d5:45:a0:47:e2:
                    96:db:89:e1:eb:cb:37:f5:a9:90:86:51:6b:eb:88:
                    f9:b3:71:d3:d1:50:fc:6d:fb:99:6b:e4:ec:67:a1:
                    9d:d3:20:a3:12:b0:30:a9:47:20:99:a3:8d:87:9a:
                    5d:a5:78:c5:30:10:d8:3f:db:79:30:95:bd:cb:20:
                    d5:20:71:c7:dc:df:7f:6a:d8:fa:b4:8b:94:21:5d:
                    fc:e6:e1:e1:27:d9:a8:5b:74:14:62:ed:75:39:0d:
                    d9:4d:99:33:35:5d:1b:e9:c2:cc:01:22:8c:ab:ca:
                    f3:8b:81:98:54:f0:b7:02:ed:b3:3d:50:e4:15:9a:
                    53:57:90:65:04:af:e4:ad:85:d0:76:26:6c:43:57:
                    aa:bd:d5:d2:a9:85:87:fa:5a:1a:5c:78:55:db:1d:
                    02:7f:20:57:33:a3:94:4f:d0:7d:a7:b6:08:95:f7:
                    16:ed:4b:1c:de:a4:dd:0f:81:be:51:b7:6e:6f:b6:
                    7c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9F:E0:A3:B6:DD:DE:C0:2D:34:02:98:A0:CC:D0:B7:F3:06:F7:E1
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/ep_go7bd3sAtNAKYoMzQt_MG9-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         40:95:a8:7e:2e:e1:51:4b:03:29:f5:af:c1:82:36:4a:be:31:
         aa:e4:3d:80:21:a9:a8:a3:10:db:45:ba:57:3c:16:17:b4:d5:
         4b:9b:a6:fb:c6:f4:cb:93:8a:d1:92:da:b3:5e:50:fc:0e:92:
         0a:d8:fc:ea:f2:a8:36:f2:54:6a:9c:a3:d3:fc:14:b0:94:41:
         58:9e:03:0f:b2:9d:06:3d:35:08:65:50:9d:8f:bc:0d:97:f2:
         59:7a:ec:24:af:c7:20:f2:bf:67:c0:d0:6f:9b:b0:65:f3:c2:
         ed:e7:bd:5b:df:0c:09:4b:5d:0c:14:f8:73:2f:ab:70:6e:77:
         0e:ef:d2:c2:b3:6a:ea:60:3a:5f:30:8f:b7:7b:8c:ba:b1:73:
         1e:9e:cf:5e:47:4c:84:c6:f3:8f:14:34:e0:8d:b8:3f:92:2f:
         f2:2d:80:17:85:d1:2b:e2:a4:6e:df:5d:61:22:e7:cf:76:be:
         08:2d:75:4d:48:ff:87:fd:08:d2:b2:46:87:c4:4d:25:3a:97:
         89:ec:55:96:a2:ed:b9:d8:87:cd:a9:d2:d2:2a:93:20:fe:8e:
         76:78:6a:ad:7f:52:41:2b:d8:e5:60:eb:ae:59:b4:42:20:b3:
         ee:59:a5:96:d8:a0:be:72:4c:5b:e2:d7:8a:51:02:92:11:bb:
         69:cf:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----