Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RH94-Q5AruEs4bD55GgWNA3p3ao.roa
File:                     RH94-Q5AruEs4bD55GgWNA3p3ao.roa (raw, json)
Hash identifier:          4XmkykEfUq8Rr8VkPn7w26nxLt3Dwu6VFNFNSB+Cv+E=
Subject key identifier:   44:7F:78:F9:0E:40:AE:E1:2C:E1:B0:F9:E4:68:16:34:0D:E9:DD:AA
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184ECD7E078F61BC492F8ED744A28843548
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RH94-Q5AruEs4bD55GgWNA3p3ao.roa
Signing time:             Wed 07 Dec 2022 13:48:01 +0000
ROA not before:           Wed 07 Dec 2022 13:48:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200791
IP address blocks:        2a0a:6040:bb00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ec:d7:e0:78:f6:1b:c4:92:f8:ed:74:4a:28:84:35:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Dec  7 13:48:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=447f78f90e40aee12ce1b0f9e46816340de9ddaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:29:45:bd:86:97:08:52:c0:74:d6:52:85:
                    0c:eb:bd:99:2f:fc:bf:c8:23:e6:26:fa:00:a0:d8:
                    2a:b2:ed:05:4b:df:9e:55:12:4c:50:81:b0:56:bd:
                    50:ca:b2:5b:e4:52:37:9c:f3:5f:c6:3b:a6:7a:52:
                    9d:ac:77:ff:fc:d2:9a:a7:1f:b8:9e:ea:9a:bc:fe:
                    b7:84:87:2e:d4:58:a5:26:4a:b1:de:54:19:b5:81:
                    b5:7d:87:8f:43:0d:93:1a:c3:04:f1:a5:6d:a4:be:
                    be:e4:19:87:03:b9:e3:6e:08:56:99:ef:db:51:75:
                    ee:d9:b4:92:59:f0:39:c0:e4:ad:0d:d6:b7:26:66:
                    24:ce:25:8a:ec:bc:99:f8:b5:3f:6e:02:97:0d:9d:
                    1c:23:c7:25:81:05:4c:8d:26:21:f7:0c:f1:c6:2b:
                    3d:ae:55:a7:f4:15:84:3e:1d:07:a2:b4:a0:8c:d4:
                    0a:28:cd:12:0a:1b:dc:28:2c:ce:69:56:3a:35:6b:
                    1b:7a:f3:45:1a:d5:10:06:77:4a:3f:51:ed:14:82:
                    85:23:11:e3:18:6d:3a:54:85:70:96:10:0e:39:da:
                    66:f3:65:65:a1:f0:7e:0a:06:e3:e6:6e:18:42:5e:
                    03:cc:8b:f6:f0:ca:63:4d:b2:a7:2f:7f:4a:34:47:
                    13:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7F:78:F9:0E:40:AE:E1:2C:E1:B0:F9:E4:68:16:34:0D:E9:DD:AA
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/RH94-Q5AruEs4bD55GgWNA3p3ao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:bb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:29:4f:bb:45:1f:ae:26:2c:b7:ab:db:08:5c:e0:5d:c3:d2:
         2d:85:d5:bf:26:9f:e6:e6:b6:a8:c0:b9:be:a1:da:4d:43:0a:
         7c:ef:ac:e2:16:cb:ab:05:1b:a0:f9:33:e8:53:aa:6b:5f:01:
         85:67:e9:12:ef:fa:a7:c7:5d:06:a1:c0:3d:6a:7a:89:9c:27:
         62:08:e6:b0:c4:92:1a:15:ad:92:76:e3:27:9c:e3:8d:48:e2:
         c4:e2:b7:f9:2a:aa:27:11:4c:f7:0d:90:8e:e1:f2:dc:fc:ac:
         c5:c5:a2:34:5c:98:0c:6a:09:bb:e4:4f:65:ae:da:46:9a:2d:
         42:19:cd:fe:17:6f:14:a7:74:60:67:f6:ee:ec:12:14:e6:4f:
         e0:b0:f8:6b:25:93:ad:8d:5b:63:57:d4:fd:c7:3a:a8:b5:51:
         b1:4d:8e:13:4c:31:43:ca:4d:f7:d0:e6:05:a6:80:c4:c0:45:
         7f:ae:48:0c:f3:9b:d6:7b:a6:d2:d7:a3:df:80:76:05:d3:c8:
         08:20:c9:ca:94:5b:37:fa:ef:9d:10:04:61:8e:40:8b:9f:04:
         49:bd:d0:9b:4d:18:5b:4c:e8:8f:6b:cd:0e:38:84:b6:67:41:
         66:d0:14:fc:8c:3e:db:35:11:7e:83:80:e5:84:0d:e6:2f:16:
         52:0f:f7:e1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYTs1+B49hvEkvjtdEoohDVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMjA3MTM0ODAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDdmNzhmOTBlNDBhZWUxMmNlMWIwZjllNDY4MTYzNDBkZTlkZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzApRb2GlwhSwHTWUoUM672ZL/y/
yCPmJvoAoNgqsu0FS9+eVRJMUIGwVr1QyrJb5FI3nPNfxjumelKdrHf//NKapx+4
nuqavP63hIcu1FilJkqx3lQZtYG1fYePQw2TGsME8aVtpL6+5BmHA7njbghWme/b
UXXu2bSSWfA5wOStDda3JmYkziWK7LyZ+LU/bgKXDZ0cI8clgQVMjSYh9wzxxis9
rlWn9BWEPh0HorSgjNQKKM0SChvcKCzOaVY6NWsbevNFGtUQBndKP1HtFIKFIxHj
GG06VIVwlhAOOdpm82VlofB+Cgbj5m4YQl4DzIv28MpjTbKnL39KNEcTnQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFER/ePkOQK7hLOGw+eRoFjQN6d2qMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvUkg5NC1RNUFydUVzNGJENTVHZ1dOQTNwM2FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQLsw
DQYJKoZIhvcNAQELBQADggEBAHcpT7tFH64mLLer2whc4F3D0i2F1b8mn+bmtqjA
ub6h2k1DCnzvrOIWy6sFG6D5M+hTqmtfAYVn6RLv+qfHXQahwD1qeomcJ2II5rDE
khoVrZJ24yec441I4sTit/kqqicRTPcNkI7h8tz8rMXFojRcmAxqCbvkT2Wu2kaa
LUIZzf4XbxSndGBn9u7sEhTmT+Cw+Gslk62NW2NX1P3HOqi1UbFNjhNMMUPKTffQ
5gWmgMTARX+uSAzzm9Z7ptLXo9+AdgXTyAggycqUWzf6750QBGGOQIufBEm90JtN
GFtM6I9rzQ44hLZnQWbQFPyMPts1EX6DgOWEDeYvFlIP9+E=
-----END CERTIFICATE-----