Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/Vdsa_h4Q9Jp9VNjohi44YJndRlY.roa
File:                     Vdsa_h4Q9Jp9VNjohi44YJndRlY.roa (raw, json)
Hash identifier:          U430vOV343bz2JdgwweVNqz/U4fZfmA2fd1OacJtJ0g=
Subject key identifier:   55:DB:1A:FE:1E:10:F4:9A:7D:54:D8:E8:86:2E:38:60:99:DD:46:56
Certificate issuer:       /CN=2a922d0c6c99be3ddb4d2500fe8fb5ddf163c9a0
Certificate serial:       084550AE
Authority key identifier: 2A:92:2D:0C:6C:99:BE:3D:DB:4D:25:00:FE:8F:B5:DD:F1:63:C9:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KpItDGyZvj3bTSUA_o-13fFjyaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/Vdsa_h4Q9Jp9VNjohi44YJndRlY.roa
Signing time:             Sat 01 Jan 2022 04:01:04 +0000
ROA not before:           Sat 01 Jan 2022 04:01:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51559
IP address blocks:        2a06:41c0:7::/48 maxlen: 48
                          2a06:41c0:2::/48 maxlen: 48
                          2a06:41c0:d::/48 maxlen: 48
                          2a06:41c0:8::/48 maxlen: 48
                          2a06:41c0:b::/48 maxlen: 48
                          2a06:41c0:6::/48 maxlen: 48
                          2a06:41c0:1::/48 maxlen: 48
                          2a06:41c0:c::/48 maxlen: 48
                          2a06:41c0:f::/48 maxlen: 48
                          2a06:41c0:a::/48 maxlen: 48
                          2a06:41c0::/48 maxlen: 48
                          2a06:41c0:3::/48 maxlen: 48
                          2a06:41c0:e::/48 maxlen: 48
                          2a06:41c0:9::/48 maxlen: 48
                          2a06:41c0:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138760366 (0x84550ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a922d0c6c99be3ddb4d2500fe8fb5ddf163c9a0
        Validity
            Not Before: Jan  1 04:01:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55db1afe1e10f49a7d54d8e8862e386099dd4656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:ed:f6:7d:18:84:b6:2d:cb:8c:c2:2b:52:
                    91:24:1b:89:ba:46:bc:8d:a6:5a:33:26:e9:d5:18:
                    1b:1c:34:6b:e6:1f:59:fa:6b:12:cf:ae:a5:fa:c8:
                    79:90:47:53:d1:60:26:91:aa:5c:98:6a:4f:4d:88:
                    9a:85:b9:bb:76:76:5d:c3:00:34:59:90:42:48:1f:
                    6d:3d:3f:51:9d:d7:cd:c0:a1:b1:81:7c:97:74:e9:
                    1f:bc:c8:05:ed:d8:66:05:90:74:dd:dc:b0:17:16:
                    38:5e:04:78:bc:e0:48:38:86:8e:54:2b:cd:52:58:
                    4e:be:7a:52:b4:77:16:c4:7b:23:29:2a:f3:71:73:
                    23:9f:00:35:9b:59:73:94:60:d4:73:86:52:6f:cc:
                    0a:03:67:20:a6:17:70:97:40:3d:21:b0:c1:c5:04:
                    95:10:c7:fb:cf:56:e9:0b:a3:76:c5:a3:f5:dd:25:
                    b7:9d:9f:89:6e:b8:18:4e:4f:e7:b7:e7:a5:56:35:
                    31:38:64:0b:d1:2f:21:24:9d:b6:47:d2:63:61:0e:
                    75:48:a9:65:c1:e9:cc:c9:93:f3:8b:ee:5c:ab:99:
                    71:b0:bd:2d:d3:ce:c0:df:0e:e1:2e:1a:31:c6:09:
                    d2:b5:c9:69:dd:09:0b:54:75:63:3d:67:23:3a:5e:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DB:1A:FE:1E:10:F4:9A:7D:54:D8:E8:86:2E:38:60:99:DD:46:56
            X509v3 Authority Key Identifier:
                keyid:2A:92:2D:0C:6C:99:BE:3D:DB:4D:25:00:FE:8F:B5:DD:F1:63:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpItDGyZvj3bTSUA_o-13fFjyaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/Vdsa_h4Q9Jp9VNjohi44YJndRlY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3898a9-5a8f-45d5-a57e-1c8158f94a89/1/KpItDGyZvj3bTSUA_o-13fFjyaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:41c0::-2a06:41c0:4:ffff:ffff:ffff:ffff:ffff
                  2a06:41c0:6::-2a06:41c0:f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         ae:1f:70:f9:01:7f:76:4d:e2:48:2a:35:3a:6a:70:0c:3f:40:
         0b:a4:06:cb:b2:a0:3b:7f:24:a7:9a:24:94:82:2d:58:7c:d0:
         8a:2e:13:b5:87:0c:61:25:fd:b9:72:9f:1f:a1:12:bd:73:06:
         80:9a:0f:23:1b:cb:41:9b:34:75:7b:e3:dc:e3:04:7d:59:ba:
         97:8a:01:98:f9:3a:d8:7b:3e:d9:97:3c:88:80:68:f9:49:45:
         32:bd:58:c5:5f:ea:d4:5f:0e:15:8e:54:62:61:ba:ed:6f:ce:
         92:8d:4c:52:22:2b:64:a2:53:2c:44:bb:c8:cc:65:e7:a6:45:
         e7:27:95:12:8a:1c:a5:24:e7:b4:eb:3a:ac:d3:2c:6f:c5:55:
         1c:2f:ad:f5:67:bc:2f:ee:40:a4:09:ba:bd:58:b4:21:f4:f8:
         e0:00:8b:48:a9:0f:bd:d2:ce:63:e8:6b:33:12:4f:ac:51:3e:
         60:4c:39:86:4d:1d:1b:4b:3a:a6:92:16:26:6e:0d:8f:12:2d:
         9f:68:6f:b0:f3:db:ef:55:c8:40:a2:c4:21:cc:c6:82:1f:3b:
         4c:9b:92:38:65:ae:16:53:3e:87:82:ee:a0:5f:f8:a5:8c:e3:
         ef:63:58:d8:61:cd:24:52:34:af:d7:f7:38:46:67:de:1c:fe:
         01:d4:7a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----