Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TmydFdM1-SoO25BrOGpYbm0ftsE.roa
File:                     TmydFdM1-SoO25BrOGpYbm0ftsE.roa (raw, json)
Hash identifier:          mv9UdjoO80Ue+mQADNw98HzOjmmPu00+1LTDaQxNKYI=
Subject key identifier:   4E:6C:9D:15:D3:35:F9:2A:0E:DB:90:6B:38:6A:58:6E:6D:1F:B6:C1
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018463741BA34C6E6411FB50E0D2FF3AAAE3
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TmydFdM1-SoO25BrOGpYbm0ftsE.roa
Signing time:             Thu 10 Nov 2022 21:31:04 +0000
ROA not before:           Thu 10 Nov 2022 21:31:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44570
IP address blocks:        2a06:a004::/32 maxlen: 48
                          2a06:a000::/32 maxlen: 48
                          2a06:1280:1000::/36 maxlen: 48
                          2a06:a003::/32 maxlen: 48
                          2a06:a005:2290::/44 maxlen: 48
                          2a06:a005::/32 maxlen: 48
                          2a06:a005:18b0::/44 maxlen: 48
                          2a06:a005:1a70::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48
                          2a05:dfc7:1300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:63:74:1b:a3:4c:6e:64:11:fb:50:e0:d2:ff:3a:aa:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 10 21:31:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4e6c9d15d335f92a0edb906b386a586e6d1fb6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:5d:15:1b:7e:30:51:e3:85:73:83:ea:14:
                    33:a5:2b:c9:6c:23:3d:a1:34:2e:dc:c3:49:9e:ca:
                    74:de:80:4e:58:11:f6:56:6b:36:6f:eb:08:bc:4d:
                    8c:ce:48:9e:81:ce:fa:47:66:c5:43:e5:1f:ca:8c:
                    10:44:6d:0f:0f:05:c3:a2:3b:c6:86:62:70:87:ed:
                    cc:fd:48:d0:40:d1:26:1f:b3:da:03:5c:13:3c:e7:
                    97:18:e6:1f:36:99:6c:c6:7d:c8:98:ab:7b:b1:41:
                    3a:23:eb:54:12:41:c0:b2:d7:14:10:24:19:1e:9e:
                    55:c8:fb:3c:f9:bb:3b:0a:d9:fa:18:75:71:6b:b6:
                    43:4c:5c:4c:eb:c9:8e:7f:ff:a3:43:a3:99:fd:eb:
                    d2:eb:48:a7:84:c4:3d:6e:aa:78:c5:9a:07:2a:41:
                    1c:6a:cc:84:e9:47:5d:e5:b8:29:0a:10:e6:e2:47:
                    f5:f6:5c:70:c0:0d:a6:f1:3c:9b:3b:f8:7a:db:a6:
                    26:6d:dc:5b:e9:f4:6a:1b:42:fb:ac:46:cb:2f:7e:
                    b2:91:24:cc:f3:fd:3a:7c:d0:f8:67:28:9f:50:b7:
                    bc:e0:17:c8:95:28:5f:c6:33:0f:4c:e8:83:9c:ea:
                    72:a5:13:14:62:b9:20:03:bb:7e:00:91:ca:85:64:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6C:9D:15:D3:35:F9:2A:0E:DB:90:6B:38:6A:58:6E:6D:1F:B6:C1
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/TmydFdM1-SoO25BrOGpYbm0ftsE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1300::/40
                  2a06:1280:1000::/36
                  2a06:a000::/32
                  2a06:a003::-2a06:a005:ffff:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:2d:e2:56:ec:bb:50:f6:3e:19:83:cc:47:57:da:ce:6d:10:
         84:0d:27:3c:20:6e:97:a2:c2:b6:3e:1a:91:16:1a:cb:f4:94:
         08:7e:37:15:d7:36:5f:fa:2a:ff:10:67:3f:be:77:a6:2d:e3:
         f0:7a:62:cd:3f:e4:04:d2:8a:1e:e8:77:95:ca:88:cd:52:d5:
         1c:5d:c2:63:3e:d6:80:49:06:a0:fb:d1:da:42:7b:e8:82:31:
         4b:b8:da:d6:9e:c6:17:18:9b:0b:79:9a:ce:00:f4:ff:7b:8b:
         61:67:20:1e:b9:55:53:a8:d5:90:9f:e1:2e:27:33:ca:62:4f:
         23:bd:21:f8:2f:94:44:f3:57:41:52:5d:d0:fc:cb:0a:44:67:
         b9:6e:6a:42:ba:ae:d6:7d:f3:35:be:2d:5f:f2:d4:68:3e:f7:
         1b:e4:07:07:20:d8:4d:23:c8:13:17:78:0b:67:0e:77:8e:e6:
         65:6c:c7:70:3a:aa:09:87:4d:03:d3:fc:89:9f:37:0c:66:cc:
         28:de:19:9d:03:73:fb:15:1b:38:17:84:00:1c:99:55:5a:70:
         28:ea:4b:15:90:24:4b:a4:bf:cf:d3:8a:78:5c:9a:f1:61:49:
         0f:f2:07:cc:e2:b4:7c:e5:6d:1a:e0:31:2a:00:04:fe:be:9a:
         fa:dd:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----