Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ajoINqUSbrUffnHMUAZrvFDIFQE.roa
File:                     ajoINqUSbrUffnHMUAZrvFDIFQE.roa (raw, json)
Hash identifier:          TwXso3dx3jiqCLjGhi4eBk/2GlY+sNaOs9yQPfdoFx0=
Subject key identifier:   6A:3A:08:36:A5:12:6E:B5:1F:7E:71:CC:50:06:6B:BC:50:C8:15:01
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183BD5C8E4CCFE24F716F8FAEFBA0D196D6
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ajoINqUSbrUffnHMUAZrvFDIFQE.roa
Signing time:             Sun 09 Oct 2022 15:28:23 +0000
ROA not before:           Sun 09 Oct 2022 15:28:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209294
IP address blocks:        2a06:a005:17e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:bd:5c:8e:4c:cf:e2:4f:71:6f:8f:ae:fb:a0:d1:96:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct  9 15:28:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6a3a0836a5126eb51f7e71cc50066bbc50c81501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:f1:11:06:8a:66:18:4b:1c:6b:49:f3:23:
                    01:e3:e3:17:23:01:dd:f5:ea:65:ef:7e:cb:76:e5:
                    5d:13:39:7a:57:67:6b:68:76:85:e2:b9:2c:8e:e8:
                    b5:c8:4c:0b:bb:b5:2d:6b:c3:93:e8:43:c1:ab:ab:
                    43:29:56:40:e7:c7:d5:09:e7:48:16:55:ad:52:51:
                    b5:ab:74:2e:e2:e0:73:a8:e9:55:15:54:d9:e5:f9:
                    92:9d:7a:96:fc:b8:14:aa:ab:a3:a7:ad:ba:6d:41:
                    c5:4a:cb:5d:20:66:4f:a7:4a:d1:a8:ff:c6:ab:d1:
                    79:60:76:c5:6e:77:4c:79:ea:ad:25:13:2c:2a:b2:
                    84:0e:ed:12:3c:c5:59:40:4a:aa:27:fd:89:13:44:
                    38:9d:60:d7:3f:73:69:da:fe:dc:cd:0d:f1:5e:81:
                    4c:2b:04:e9:af:eb:72:0f:ac:23:7d:b6:bb:57:39:
                    a8:ec:5d:d7:2d:f3:a6:00:eb:57:fe:e7:34:8d:ef:
                    04:84:59:3b:da:83:46:68:2c:34:5a:c2:b1:e3:04:
                    1e:f4:0c:8f:d9:67:71:a5:9b:a0:33:83:5b:fd:4d:
                    0b:42:1a:bd:57:f5:76:70:6f:b9:82:c8:ce:db:ad:
                    80:7b:c1:e9:62:db:c0:ea:05:e3:bb:56:ce:f2:d3:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3A:08:36:A5:12:6E:B5:1F:7E:71:CC:50:06:6B:BC:50:C8:15:01
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ajoINqUSbrUffnHMUAZrvFDIFQE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:17e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:1d:92:47:43:23:19:d9:c9:e5:00:a1:75:9e:55:7d:84:08:
         aa:d5:43:5f:90:2b:df:4e:43:dc:5a:73:be:63:9e:75:08:3b:
         da:d7:b9:7f:c9:31:2d:c5:5e:16:b6:4b:65:25:ea:21:37:56:
         75:b4:4e:cc:ef:50:4b:3c:13:56:ee:ac:66:7e:4f:8a:af:5c:
         e1:44:20:83:23:15:3b:27:59:3e:9c:ff:5e:31:c7:bb:5b:55:
         a8:72:8b:3b:a5:5d:05:2a:17:da:50:e2:68:e7:72:4d:9f:47:
         73:53:24:ef:05:06:b3:b4:af:8a:88:9a:43:8a:7a:1d:e2:26:
         41:f1:81:3b:24:93:77:c1:c8:05:d6:a1:e0:7f:c8:92:be:ac:
         aa:14:6a:40:68:12:8e:ec:0d:ba:28:e1:e6:7f:45:bb:d3:dd:
         cf:02:18:68:da:44:e8:1e:cb:18:61:7c:c2:5b:57:1b:f6:ed:
         c0:d6:9f:29:76:18:98:f1:3b:ca:53:0a:54:26:89:22:ff:b0:
         2b:b7:22:55:fd:c2:63:a4:1b:a4:28:c5:a2:d2:c0:06:7d:a8:
         7d:e5:66:2f:99:50:13:7a:9c:db:56:40:f2:b1:24:c8:77:31:
         f6:8e:e8:d9:99:3b:e4:da:f9:46:a2:26:90:7f:0b:5b:46:d5:
         6f:98:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----