Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EraUN9y5U0eUTCSghj2nZAWILm4.roa
File:                     EraUN9y5U0eUTCSghj2nZAWILm4.roa (raw, json)
Hash identifier:          rLDe09M8+AT76T4ZXBLZiOpri2O/9Y+8pZk7B5uJaU4=
Subject key identifier:   12:B6:94:37:DC:B9:53:47:94:4C:24:A0:86:3D:A7:64:05:88:2E:6E
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01832772E662D1467EC46BD39B41DCDFC1A8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EraUN9y5U0eUTCSghj2nZAWILm4.roa
Signing time:             Sat 10 Sep 2022 12:49:44 +0000
ROA not before:           Sat 10 Sep 2022 12:49:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60379
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:127b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:27:72:e6:62:d1:46:7e:c4:6b:d3:9b:41:dc:df:c1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 10 12:49:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12b69437dcb95347944c24a0863da76405882e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:51:91:f2:98:e4:ed:79:a6:56:e5:cd:2c:06:
                    78:09:62:bd:e4:43:4e:17:e3:7d:69:92:15:cc:79:
                    63:7e:19:c9:eb:6c:1d:f7:1f:a6:42:cb:12:61:20:
                    a7:08:1e:da:93:22:1a:0c:d9:42:a8:82:b6:77:ca:
                    9a:0d:f1:97:9d:95:79:a8:3b:03:97:c5:88:83:0a:
                    97:c5:bb:14:20:a7:29:6e:7a:d2:36:1c:67:1f:70:
                    d5:d5:77:98:9d:c7:a1:ae:77:c4:9b:cc:cb:21:dc:
                    85:a2:2a:48:d8:57:95:9d:71:e7:71:06:25:54:1a:
                    0c:92:c1:36:6c:27:1f:ed:3a:f9:41:9e:02:0b:8a:
                    00:13:35:5e:da:d1:03:c2:18:8e:2f:0d:df:b5:69:
                    20:7c:24:d7:8c:bd:c0:e9:bd:ca:96:e0:30:51:a8:
                    4c:03:1a:56:0b:d2:0e:e9:55:4e:dd:1d:a0:b5:81:
                    ff:8f:19:8b:8e:e4:de:96:46:0d:c7:4b:04:4a:d6:
                    39:af:ca:d8:d9:73:69:3d:49:4f:90:16:fe:f4:35:
                    7f:94:7d:92:f9:19:46:14:96:37:6b:6e:02:30:75:
                    27:cc:b7:0c:52:52:c4:c4:14:a3:b3:da:a8:13:2c:
                    15:eb:57:9c:f7:5e:32:53:9d:c7:c1:d3:6c:60:35:
                    ba:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B6:94:37:DC:B9:53:47:94:4C:24:A0:86:3D:A7:64:05:88:2E:6E
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EraUN9y5U0eUTCSghj2nZAWILm4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:127b::/48
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:75:16:78:1b:8c:ed:a9:7d:f4:2b:a3:59:86:e9:04:20:a3:
         d2:6e:9f:83:5a:4c:87:db:2a:b7:ef:45:f0:65:2a:98:db:6d:
         cf:e4:97:da:18:d7:40:5c:7b:3c:05:f0:9e:55:a7:8f:03:17:
         cb:cc:8a:22:69:4a:b9:74:52:96:11:60:08:81:b5:ac:15:1e:
         16:df:a9:42:94:5a:0c:a9:25:09:14:c4:0c:86:21:18:33:f0:
         46:b9:b6:ef:62:a1:99:d9:20:69:72:ff:ee:50:04:36:1f:3e:
         96:8e:d2:c4:43:1c:55:12:82:60:ca:3b:2b:85:70:b8:17:36:
         71:0a:ec:f2:b6:0e:e5:ef:10:5b:4b:02:11:78:13:92:08:0a:
         1f:39:00:21:c5:a8:55:f6:fa:bd:50:d2:32:a2:b9:16:b5:e5:
         de:5b:ee:d8:b6:31:ac:97:8d:88:45:43:53:cb:48:e9:d6:7f:
         0b:fe:7d:d4:80:8b:1b:29:a6:68:0f:4f:ee:33:e0:82:84:3d:
         cc:5f:43:81:b8:1c:41:71:63:af:3e:0e:88:f5:49:2d:27:5c:
         df:dd:8d:67:f0:38:47:aa:d9:c9:ac:33:50:23:2b:cd:95:62:
         d3:8e:18:e2:ae:69:65:31:7f:a6:89:f4:0d:db:b9:1a:6b:e5:
         e2:91:da:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----