Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/JjNN2clQCl_9DM0xtrdqiHygupY.roa
File:                     JjNN2clQCl_9DM0xtrdqiHygupY.roa (raw, json)
Hash identifier:          ndnchPHLSDQXoa9OUTSSRLkLFOWA/O+MPInOm1u0wtc=
Subject key identifier:   26:33:4D:D9:C9:50:0A:5F:FD:0C:CD:31:B6:B7:6A:88:7C:A0:BA:96
Certificate issuer:       /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial:       27F2E910
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/JjNN2clQCl_9DM0xtrdqiHygupY.roa
Signing time:             Sat 01 Jan 2022 13:00:28 +0000
ROA not before:           Sat 01 Jan 2022 13:00:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207806
IP address blocks:        2a00:7180:8004::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670230800 (0x27f2e910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
        Validity
            Not Before: Jan  1 13:00:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26334dd9c9500a5ffd0ccd31b6b76a887ca0ba96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:44:39:85:1e:21:1f:ca:ff:eb:9f:64:50:cc:
                    6c:cb:dc:ae:9a:ed:fb:c5:89:a2:82:fd:3f:a7:ad:
                    bf:3c:4b:a6:2e:2d:e0:00:02:4f:97:b7:51:e6:36:
                    e4:c4:0b:bd:63:51:d0:03:80:c0:57:6d:b1:7c:32:
                    f4:cc:08:ec:c9:c9:8c:d2:27:3c:df:60:8c:32:6c:
                    ad:a8:ea:8e:60:a9:17:b5:95:1d:f3:9e:fb:c9:f8:
                    c3:e6:05:6d:2a:7f:cf:e4:6c:d8:37:f8:db:b6:2c:
                    17:74:e7:20:17:a5:28:86:4d:92:a4:bc:bd:e8:69:
                    66:2d:0f:32:45:f2:c2:29:81:b3:91:ec:2d:d8:41:
                    4e:df:cb:cb:2e:56:c3:f9:c9:03:ae:3a:6f:da:ec:
                    41:a6:68:7f:f8:68:d3:02:f3:56:23:ce:0a:46:f9:
                    d6:c4:0f:62:ef:b3:ca:ef:48:2f:e8:03:ea:42:79:
                    6b:e7:07:03:30:3a:69:15:76:20:5f:2b:fd:c6:9e:
                    2d:dd:8c:21:c4:89:74:49:ca:71:d0:01:6b:c6:8d:
                    11:da:a3:96:6f:a5:e2:e3:0d:2e:47:c5:78:3c:4d:
                    07:f7:5d:d0:39:b6:47:24:78:91:54:aa:fc:07:45:
                    d4:c6:b7:44:84:6e:a4:4a:b8:31:a4:2b:8b:f5:13:
                    8a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:33:4D:D9:C9:50:0A:5F:FD:0C:CD:31:B6:B7:6A:88:7C:A0:BA:96
            X509v3 Authority Key Identifier:
                keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/JjNN2clQCl_9DM0xtrdqiHygupY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:7180:8004::/46

    Signature Algorithm: sha256WithRSAEncryption
         00:a2:24:0a:4f:bf:fe:c2:cb:1c:61:ae:f4:d8:a5:6f:59:79:
         b7:cf:af:e7:12:ed:c5:ea:90:44:a1:5f:56:56:e4:ca:6b:e7:
         03:81:64:7b:89:c9:29:3e:d4:5f:97:82:fe:19:64:60:19:b5:
         8e:d4:cb:e4:41:0c:3b:20:28:05:94:cd:da:fd:75:15:61:dc:
         39:28:bb:f8:af:0e:52:af:25:95:2b:55:77:92:ff:35:1a:b3:
         f1:1b:2a:58:ff:b7:a4:53:ff:51:f5:b2:18:e7:03:22:95:ed:
         42:8f:52:d6:67:6c:d2:72:2c:de:0d:8e:a2:8a:dd:79:a4:64:
         a5:5d:0f:15:3b:bd:c4:33:f8:6d:18:e3:50:1a:eb:62:0e:75:
         50:95:ce:9d:62:48:74:f3:43:f3:66:c9:fd:e8:ad:2c:53:48:
         85:81:55:34:02:14:6a:c4:d9:98:fa:04:11:28:19:6a:97:66:
         de:c5:81:64:4f:fb:e5:8b:8b:05:f4:3a:56:ce:a0:fd:f5:5f:
         c2:c6:85:c7:93:ad:4e:ec:d8:a8:79:30:48:bc:c5:8f:80:1d:
         ae:08:ea:c0:8c:6d:a8:6b:41:29:39:36:55:3d:d8:f3:0e:37:
         c9:87:c3:e3:82:e2:cf:ae:29:89:3e:95:dd:5a:e1:50:09:fd:
         05:be:a5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----