Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IOwolSN81Y9siuVeUV8hynTg-Dk.roa
File:                     IOwolSN81Y9siuVeUV8hynTg-Dk.roa (raw, json)
Hash identifier:          aevWdj2QcG217m8FKk8cxfJH9vWEYD/S42fo1xRpPOQ=
Subject key identifier:   20:EC:28:95:23:7C:D5:8F:6C:8A:E5:5E:51:5F:21:CA:74:E0:F8:39
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19D78AC2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IOwolSN81Y9siuVeUV8hynTg-Dk.roa
Signing time:             Sun 15 May 2022 13:50:41 +0000
ROA not before:           Sun 15 May 2022 13:50:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     149506
IP address blocks:        2a06:a005:8b0::/44 maxlen: 48
                          2a06:a005:8c0::/44 maxlen: 48
                          2a06:a005:8d0::/44 maxlen: 48
                          2a06:a005:990::/44 maxlen: 48
                          2a06:a005:9a0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433556162 (0x19d78ac2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 15 13:50:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=20ec2895237cd58f6c8ae55e515f21ca74e0f839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:0e:c4:51:3c:fa:9e:54:c1:7d:e1:16:4b:
                    1e:87:74:94:e5:42:96:c1:c0:73:85:85:c3:89:f2:
                    8d:00:37:59:45:bd:98:2d:b1:ed:90:53:d4:0b:4c:
                    c5:fe:66:aa:91:97:15:6e:09:85:26:16:15:72:80:
                    0a:23:39:ea:4d:2b:de:f4:41:d1:4d:17:8d:5a:99:
                    45:97:19:c3:07:4b:1f:95:2d:6a:2f:ad:91:1c:be:
                    12:fa:bf:5f:b9:a2:90:38:c2:11:3b:f6:e4:fc:6e:
                    32:ca:3e:7b:e6:3b:27:88:41:58:2e:80:1b:02:de:
                    42:99:bc:39:52:d8:37:19:3b:f1:9a:eb:20:40:1f:
                    24:85:70:35:28:2a:e6:3d:78:22:31:e1:8b:02:fe:
                    d7:f9:5e:81:d9:19:b3:b7:bc:00:c1:ed:d2:d4:34:
                    f5:6c:45:99:1e:38:01:bc:5f:3b:97:ad:64:2d:99:
                    89:d8:18:32:91:51:48:75:89:6e:63:83:3d:5c:17:
                    42:5e:5d:8a:19:07:9f:32:7e:19:6b:f2:ca:22:61:
                    c9:b5:ea:e3:e1:1f:2f:ee:39:a5:f9:f0:d9:70:6d:
                    f2:82:eb:8f:0d:41:2e:97:30:f7:76:3b:e2:40:bd:
                    22:a1:2d:18:2a:1a:2f:f1:f7:41:36:78:a9:89:de:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EC:28:95:23:7C:D5:8F:6C:8A:E5:5E:51:5F:21:CA:74:E0:F8:39
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IOwolSN81Y9siuVeUV8hynTg-Dk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:8b0::-2a06:a005:8df:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:990::-2a06:a005:9af:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         17:33:9f:ab:8f:a3:40:0f:74:32:58:aa:1c:40:4b:ab:ea:90:
         58:d3:64:d7:9a:d4:b2:65:f3:44:41:00:cc:b3:26:0c:0e:b7:
         7d:da:78:77:c3:e0:ea:ff:46:fb:e6:80:0f:98:7a:59:63:8d:
         05:49:5a:16:9e:e1:bd:a9:79:db:74:19:22:7a:a2:7f:29:14:
         d7:ad:6b:93:07:70:ed:ad:d6:b7:5f:9a:e0:4a:3a:c9:df:b2:
         ec:24:a8:94:c3:38:13:26:dc:64:ed:ad:86:cb:0e:04:52:fb:
         9d:a3:ae:90:ac:fd:d7:0a:46:ec:6d:58:38:9c:71:08:e8:8c:
         32:93:a1:f2:88:e8:ae:52:c3:b0:e8:32:b6:01:0d:d9:19:b8:
         c3:4d:9b:8c:2e:03:ae:94:dc:99:4c:45:1a:0d:00:67:d4:91:
         5b:70:42:cf:41:ed:6e:ad:46:7a:65:a9:9a:ca:6f:3b:66:6e:
         ea:9c:cb:7b:fb:4b:8d:7c:6e:14:18:68:fe:4a:90:85:89:5b:
         b5:66:17:16:f9:79:49:d9:00:0d:0e:13:65:1d:cd:b0:8e:00:
         68:03:5b:9a:5b:17:47:70:b1:74:d1:a9:1d:3e:56:9b:df:97:
         97:7c:b4:6e:2f:dc:88:ab:cd:71:64:07:89:75:a5:58:85:e4:
         b2:ed:d2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----