Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/A2XR_2g5KcnJ6mAuwP9TpnZU2EI.roa
File:                     A2XR_2g5KcnJ6mAuwP9TpnZU2EI.roa (raw, json)
Hash identifier:          f/Jxhpw6A2FP4Sktfhs7sE96EfkL7SjgTD/nbN249XY=
Subject key identifier:   03:65:D1:FF:68:39:29:C9:C9:EA:60:2E:C0:FF:53:A6:76:54:D8:42
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       17738DC6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/A2XR_2g5KcnJ6mAuwP9TpnZU2EI.roa
Signing time:             Mon 28 Mar 2022 14:03:12 +0000
ROA not before:           Mon 28 Mar 2022 14:03:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211358
IP address blocks:        2a06:a005:e0::/44 maxlen: 48
                          2a06:a005:240::/44 maxlen: 48
                          2a06:a005:250::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393448902 (0x17738dc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Mar 28 14:03:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0365d1ff683929c9c9ea602ec0ff53a67654d842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:42:98:89:0f:40:54:8b:7e:91:5b:2f:dc:
                    84:7b:a2:30:45:a8:16:bb:06:ea:c6:96:66:c8:ce:
                    29:57:08:1d:87:c9:5d:9d:3f:15:7f:62:1a:c1:66:
                    a1:53:2b:2d:5c:3e:16:90:61:6f:2e:61:45:ec:57:
                    67:ad:9a:83:18:72:c3:e1:87:b8:9c:0e:0f:d2:82:
                    bb:92:89:38:af:45:d7:63:35:f1:66:48:e9:56:06:
                    48:b6:99:e7:df:3e:49:f2:19:69:59:66:bf:05:7f:
                    89:45:1e:22:a9:ae:8d:82:05:8f:94:d3:f8:b4:8c:
                    45:5e:c0:03:8a:f1:57:c9:84:1a:e4:1f:34:1c:3b:
                    c1:26:f8:27:05:12:d4:38:be:83:ae:0f:70:b4:23:
                    d8:9c:2c:40:b5:72:f7:78:85:70:5d:27:82:d0:fb:
                    26:b5:84:f4:9f:09:e8:8b:61:b4:84:92:71:5d:dc:
                    80:8e:8a:e7:db:ef:86:f1:1d:20:10:ca:c4:dc:89:
                    23:be:c0:a2:b2:cc:ec:5e:36:ab:7e:83:44:23:2d:
                    f6:85:45:27:8c:e0:08:cf:4c:60:d2:d0:5b:a0:f2:
                    ac:17:80:1e:b5:ae:b7:21:98:ac:6a:fd:26:11:28:
                    cd:90:5e:e1:7b:64:c7:f6:0b:3d:03:b2:6e:6e:47:
                    7c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:65:D1:FF:68:39:29:C9:C9:EA:60:2E:C0:FF:53:A6:76:54:D8:42
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/A2XR_2g5KcnJ6mAuwP9TpnZU2EI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:e0::/44
                  2a06:a005:240::/43

    Signature Algorithm: sha256WithRSAEncryption
         01:dd:fe:22:fe:81:14:db:80:10:ea:f3:76:48:bd:4f:47:bc:
         ba:95:fd:2c:5e:c5:64:23:9a:eb:bf:8a:05:4e:69:9d:46:95:
         67:13:a5:8a:52:98:a9:08:a3:9e:66:28:c5:99:9e:1b:4c:3c:
         c3:5a:da:b2:c4:cf:c8:d9:9f:7b:bd:5c:2a:f0:bd:3c:bf:9f:
         fa:10:df:9b:fe:50:5f:e8:3b:67:4a:9a:f5:20:c3:08:a7:2c:
         69:8b:7d:bf:bb:02:e1:c2:f1:ef:40:42:16:13:9b:cc:35:c8:
         a2:b6:74:dc:54:1a:50:ac:33:b6:60:a5:5e:15:c3:6a:cd:6c:
         4b:98:fb:fa:01:4e:f6:69:b7:03:40:b3:0a:8d:03:cd:57:7e:
         4b:a4:2a:fa:f2:1c:48:ba:7f:b4:31:09:16:9b:98:0a:42:69:
         b3:53:1a:5f:d7:56:98:1f:dc:c2:6b:50:42:7a:be:dc:8f:fb:
         75:26:73:83:c3:a5:3b:9f:c5:73:88:e8:2c:64:e8:49:2e:32:
         3c:60:2e:fc:9a:90:ad:67:a6:42:6f:7a:61:aa:31:c5:70:0c:
         5b:6b:87:c8:78:1a:56:ef:6f:50:32:a6:75:61:7f:e4:c5:96:
         07:99:cb:14:68:05:76:29:96:96:31:74:11:4b:6a:15:c2:6e:
         45:60:84:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----