Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7zosDK2n8Rheg-y2eD0k2J-noLw.roa
File:                     7zosDK2n8Rheg-y2eD0k2J-noLw.roa (raw, json)
Hash identifier:          VmORdBkYt0DmEq4Z1srbrXKiZ/p7jlTEfXRuLoIFgd0=
Subject key identifier:   EF:3A:2C:0C:AD:A7:F1:18:5E:83:EC:B6:78:3D:24:D8:9F:A7:A0:BC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01846656EFFB01E9B2492D3165B955ED06C1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7zosDK2n8Rheg-y2eD0k2J-noLw.roa
Signing time:             Fri 11 Nov 2022 10:58:04 +0000
ROA not before:           Fri 11 Nov 2022 10:58:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210631
IP address blocks:        2a06:a005:22a0::/44 maxlen: 48
                          2a06:a005:2290::/44 maxlen: 48
                          2a06:a005:22b0::/44 maxlen: 48
                          2a06:a005:22c0::/44 maxlen: 48
                          2a06:a005:22d0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:66:56:ef:fb:01:e9:b2:49:2d:31:65:b9:55:ed:06:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 11 10:58:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef3a2c0cada7f1185e83ecb6783d24d89fa7a0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:76:53:9e:02:3d:b1:95:69:40:07:db:96:
                    a8:de:6f:13:86:99:5e:3c:35:2b:8f:2e:33:9a:a3:
                    e9:84:6e:0c:4c:c5:69:b1:24:74:f8:f7:f9:c5:d3:
                    5a:ae:38:74:86:fa:83:19:7f:9f:07:2c:a0:49:49:
                    06:e2:b4:78:6a:d2:72:56:83:5f:fe:4a:63:8d:7e:
                    cf:4d:13:b7:7f:38:53:03:60:c9:4f:c0:d6:5b:40:
                    69:59:6f:9f:67:c0:d7:a8:12:f3:23:23:d3:74:23:
                    99:5d:7f:11:ec:c4:20:ad:dc:65:1b:d4:03:c9:d5:
                    91:9d:9e:17:3f:f9:98:f2:dd:26:6b:a7:b2:f1:96:
                    db:30:18:1b:ee:81:aa:ce:b5:24:fb:08:3c:bd:f9:
                    21:0f:5b:41:62:0a:c7:d8:c1:ec:e2:25:d1:6c:3d:
                    67:c2:6a:21:d7:8a:de:d2:32:5c:1e:0d:8f:1a:c7:
                    79:e5:ab:3e:8d:2e:66:f5:de:82:1d:ec:bc:5a:ed:
                    50:ab:20:be:40:7e:19:73:bc:6c:79:43:6e:dd:58:
                    3f:da:af:13:3b:bf:65:0b:be:6e:9e:e4:7b:b0:02:
                    23:17:cf:bd:b3:f1:f4:9b:93:7e:09:b1:7d:b2:30:
                    8a:98:8b:81:83:c6:ff:ce:68:cc:4e:78:47:71:61:
                    a1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3A:2C:0C:AD:A7:F1:18:5E:83:EC:B6:78:3D:24:D8:9F:A7:A0:BC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7zosDK2n8Rheg-y2eD0k2J-noLw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2290::-2a06:a005:22df:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         8e:e5:ad:bb:e3:82:2a:bb:77:84:fc:f9:24:eb:12:a5:5d:e8:
         dc:f5:16:91:83:a6:9c:76:08:84:02:dd:94:52:d9:b0:cc:d9:
         95:f6:2d:6e:98:22:b5:19:76:bb:4f:32:d1:33:01:a7:19:3c:
         27:6a:67:05:53:c5:4c:e1:bc:1c:ca:d3:5a:3c:dd:8f:e6:5b:
         b1:08:0a:a8:16:0d:52:d8:ba:40:27:c3:9a:03:12:97:12:a7:
         9f:88:53:fc:eb:0c:51:a5:65:19:fa:76:3c:8f:a8:f2:71:a8:
         73:96:33:03:86:24:09:45:e7:b2:dd:60:5e:07:02:85:b6:a8:
         f8:91:c2:8f:18:b0:7b:6c:9b:77:16:3a:7f:95:85:94:98:35:
         b3:4d:66:b7:9b:1b:54:a4:99:7b:0f:f7:14:06:e1:ab:17:c1:
         77:82:80:50:c8:02:9b:9e:b5:20:66:15:8e:10:ab:b0:ec:85:
         7b:d2:d6:ee:44:c5:d3:98:99:4d:7e:cb:71:a0:c2:85:5b:aa:
         7d:ad:65:b8:76:aa:95:9b:5d:03:12:1d:d3:59:db:37:04:ac:
         96:d6:6f:6a:b4:6e:ad:b6:7e:f6:38:31:37:72:9c:bd:41:bf:
         b2:ea:f8:de:ef:11:26:89:f2:30:12:5b:09:7f:3a:35:1a:d8:
         44:dd:21:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----