Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6aMpB0MoukH5LXLjp-x3KdfPayU.roa
File:                     6aMpB0MoukH5LXLjp-x3KdfPayU.roa (raw, json)
Hash identifier:          FUKLKuqGPS924SoOG/9A+v5u6Qg+eGb1xQcA6kthPFA=
Subject key identifier:   E9:A3:29:07:43:28:BA:41:F9:2D:72:E3:A7:EC:77:29:D7:CF:6B:25
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1AD041D8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6aMpB0MoukH5LXLjp-x3KdfPayU.roa
Signing time:             Mon 13 Jun 2022 11:49:15 +0000
ROA not before:           Mon 13 Jun 2022 11:49:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7907
IP address blocks:        2a06:a005:cd0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449855960 (0x1ad041d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 13 11:49:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e9a329074328ba41f92d72e3a7ec7729d7cf6b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:86:7b:46:4d:2b:86:e9:87:d2:29:51:a0:37:
                    15:8d:02:c3:3f:db:b1:33:9c:1b:94:f4:58:f2:fb:
                    33:9b:94:65:c7:a6:ac:4e:f3:af:21:a8:9e:f6:ff:
                    9b:9a:6c:f6:b6:af:3f:2d:79:17:cb:a3:fc:aa:8b:
                    66:2a:85:dc:09:9a:24:78:ed:2e:65:15:73:f9:dc:
                    e5:b9:47:1d:49:f4:c0:6d:59:d2:fc:ca:96:5b:e3:
                    31:3e:d7:ba:8b:a9:dc:01:1c:27:9e:10:53:ac:86:
                    66:49:31:98:58:d7:ad:5d:e0:97:7a:2c:96:76:a4:
                    6c:36:37:0b:7f:ef:5e:c7:94:6a:84:5a:23:ce:6a:
                    3e:6c:61:03:a3:bd:7b:cd:48:93:78:8f:cd:23:9b:
                    f5:32:51:d5:b8:25:71:7c:56:be:23:f1:6c:c1:fa:
                    47:4a:46:c8:4c:67:ff:6d:fc:9d:b5:a6:3b:db:9a:
                    cd:54:36:6e:e6:4e:9c:34:e0:ae:2f:5d:0a:51:21:
                    bc:b0:ef:84:b4:c4:9d:96:7d:b0:f7:dd:d7:5e:3c:
                    3f:d1:d8:bf:51:90:e1:18:77:d3:10:50:58:17:2e:
                    0c:f9:6a:bc:01:c3:d5:52:00:03:86:41:06:ad:fc:
                    2f:9c:44:15:79:e3:21:e5:23:b1:cc:72:e3:cc:54:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A3:29:07:43:28:BA:41:F9:2D:72:E3:A7:EC:77:29:D7:CF:6B:25
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/6aMpB0MoukH5LXLjp-x3KdfPayU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:cd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         26:f1:d1:4b:7c:41:2d:d5:b5:35:8f:7e:87:18:47:f9:14:43:
         81:ff:26:23:63:48:fc:96:f8:54:2e:e8:fc:be:6c:f9:5d:ae:
         89:3a:2c:be:b2:30:b5:a9:ce:5a:f0:43:90:28:f6:b6:f3:93:
         50:83:1d:cd:25:a7:10:6b:ea:9f:d1:83:6f:b6:18:35:82:6c:
         ea:ae:68:64:0b:b7:1d:10:b1:e3:85:77:33:b5:1a:c3:54:b6:
         d7:46:ea:e6:67:89:7e:10:9d:8d:f6:e8:c6:67:c8:58:b6:39:
         65:07:3d:dd:97:b8:85:a7:40:aa:44:d3:b6:2e:f8:86:c7:60:
         ef:54:97:b1:07:09:d6:88:c3:08:a6:3c:09:79:eb:74:83:da:
         4e:85:ae:1c:21:a1:16:b5:99:3d:58:8e:7d:97:2e:74:67:be:
         17:3a:45:d4:73:3e:1c:d7:61:ac:7f:db:c0:80:94:00:85:83:
         73:40:df:95:2b:4a:5d:27:63:e7:f9:bf:e2:b5:0d:c2:8c:b4:
         38:bd:b4:02:92:5e:75:bf:e2:de:2f:44:a1:0e:b4:71:95:ea:
         18:63:1f:46:2e:a7:ce:1c:3b:72:8c:2c:05:79:df:92:45:2f:
         1f:ac:48:be:ce:ef:2e:63:4d:65:fd:d1:56:c5:cd:dd:e8:1f:
         ab:19:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----