Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7ee55c-6952-4a64-b0a6-fe15c1c5aea1/1/51IVYus62T-gX1955MZipc8fH90.roa
File:                     51IVYus62T-gX1955MZipc8fH90.roa (raw, json)
Hash identifier:          yM1pQ93JiMsyP0xeCKrY91eDvmyzLgZ/HiFpElr0vww=
Subject key identifier:   E7:52:15:62:EB:3A:D9:3F:A0:5F:5F:79:E4:C6:62:A5:CF:1F:1F:DD
Certificate issuer:       /CN=a97498e063cbb9a3efbfe706beec3a0c3a6f7294
Certificate serial:       0182F88D3FEB4416CEB79F950D519B4E1BD2
Authority key identifier: A9:74:98:E0:63:CB:B9:A3:EF:BF:E7:06:BE:EC:3A:0C:3A:6F:72:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qXSY4GPLuaPvv-cGvuw6DDpvcpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/7ee55c-6952-4a64-b0a6-fe15c1c5aea1/1/51IVYus62T-gX1955MZipc8fH90.roa
Signing time:             Thu 01 Sep 2022 10:16:22 +0000
ROA not before:           Thu 01 Sep 2022 10:16:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208196
IP address blocks:        2a0f:bf00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f8:8d:3f:eb:44:16:ce:b7:9f:95:0d:51:9b:4e:1b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97498e063cbb9a3efbfe706beec3a0c3a6f7294
        Validity
            Not Before: Sep  1 10:16:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e7521562eb3ad93fa05f5f79e4c662a5cf1f1fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:a2:78:94:c6:32:23:7f:e0:b6:e4:0d:c3:
                    dc:00:f6:72:bb:2b:4a:a9:f7:fb:12:14:6c:c6:2a:
                    4e:0b:29:8e:06:aa:bf:2f:72:dd:73:2a:87:d2:1d:
                    27:01:28:e1:d2:87:e2:55:38:87:6d:9e:fb:47:88:
                    05:fb:11:c4:bf:4b:3f:d3:f5:3f:98:4b:ec:d2:9e:
                    7c:ff:c2:ae:a7:ba:85:1a:b3:33:5c:58:a8:6d:a8:
                    79:cc:ec:59:57:55:99:a7:04:12:e3:b9:d7:eb:a7:
                    30:33:8a:52:85:f5:f6:d1:b0:e8:5e:09:95:b7:b7:
                    03:90:d9:e2:51:d9:3a:18:87:24:ff:eb:6c:4c:84:
                    3c:91:f6:f3:ba:67:8d:9c:27:f7:ca:0f:55:88:61:
                    ed:6d:37:d7:bc:5d:da:99:f0:79:a6:a8:2d:37:f4:
                    cb:d4:06:bf:80:ca:e5:f9:33:7e:ba:ca:ba:36:4e:
                    f9:96:72:79:17:c0:18:0c:de:c9:d7:7f:68:48:69:
                    7e:13:2c:ec:da:8c:cc:99:72:03:73:5a:cf:85:14:
                    11:f9:0a:18:8d:30:4c:c3:81:33:9a:61:e0:04:58:
                    64:cb:6d:76:dd:fe:b1:38:ad:52:da:c7:41:b3:fe:
                    24:46:3c:a3:f6:24:80:ad:4f:c0:16:24:7c:67:32:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:52:15:62:EB:3A:D9:3F:A0:5F:5F:79:E4:C6:62:A5:CF:1F:1F:DD
            X509v3 Authority Key Identifier:
                keyid:A9:74:98:E0:63:CB:B9:A3:EF:BF:E7:06:BE:EC:3A:0C:3A:6F:72:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXSY4GPLuaPvv-cGvuw6DDpvcpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7ee55c-6952-4a64-b0a6-fe15c1c5aea1/1/51IVYus62T-gX1955MZipc8fH90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7ee55c-6952-4a64-b0a6-fe15c1c5aea1/1/qXSY4GPLuaPvv-cGvuw6DDpvcpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:bf00::/29

    Signature Algorithm: sha256WithRSAEncryption
         22:67:b5:21:f4:81:5b:b5:bf:27:a2:39:6b:9d:75:f2:1b:af:
         51:f0:9b:b6:bd:e5:28:1f:7b:49:44:fe:b7:fc:48:cf:b6:62:
         d5:39:14:5b:f1:10:a6:3e:de:72:d9:ff:db:0e:90:53:c0:36:
         77:57:ae:fc:7c:4d:cc:5f:3d:66:23:b1:64:29:e3:9e:da:0a:
         47:c3:1b:da:b2:18:5e:77:11:c7:2b:d2:80:16:1f:44:76:c2:
         04:d6:fb:1a:89:96:e4:ce:6f:99:3d:89:03:6d:ad:1b:f5:dd:
         69:ba:ff:b5:54:ee:9e:33:33:f0:c2:1a:4a:9e:f5:0a:14:4e:
         2b:24:1d:9e:da:e4:bf:30:ab:27:58:f3:4d:67:a8:bd:65:60:
         b0:a9:5d:7c:b1:2a:4c:0a:cc:6c:f5:30:2b:b8:f0:d0:5d:bb:
         99:87:e6:c0:31:85:59:10:9e:5c:5f:04:6f:71:00:05:ff:fc:
         17:f7:a3:cd:2f:75:ec:71:ae:96:0f:eb:5a:f6:30:7a:3b:07:
         d2:37:d9:ce:54:c8:77:e2:0f:78:73:3e:af:cf:d5:04:3f:fc:
         5d:d9:ce:b8:40:0e:4e:8c:01:3e:d2:41:1f:a9:6c:5d:7f:40:
         bd:04:39:c2:9f:f3:1e:2c:b3:0b:48:5a:2e:f8:cd:85:be:be:
         5d:89:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----