Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7ArLyrMmlvUiHxdWQiNW5Ggy0LA.roa
File:                     7ArLyrMmlvUiHxdWQiNW5Ggy0LA.roa (raw, json)
Hash identifier:          Arm3Ow/8NJlNt2s1jiS30S3zNxtuNUjys+f0t1ROaxI=
Subject key identifier:   EC:0A:CB:CA:B3:26:96:F5:22:1F:17:56:42:23:56:E4:68:32:D0:B0
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183C06C3DBC49F21C61116FCAA17C8F9FA4
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7ArLyrMmlvUiHxdWQiNW5Ggy0LA.roa
Signing time:             Mon 10 Oct 2022 05:44:22 +0000
ROA not before:           Mon 10 Oct 2022 05:44:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205152
IP address blocks:        2a06:a005:1aa0::/44 maxlen: 48
                          2a06:a005:1ab0::/44 maxlen: 48
                          2a06:a005:1ac0::/44 maxlen: 48
                          2a06:a005:1a90::/44 maxlen: 48
                          2a06:a005:1a80::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c0:6c:3d:bc:49:f2:1c:61:11:6f:ca:a1:7c:8f:9f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 10 05:44:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec0acbcab32696f5221f1756422356e46832d0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:df:1b:d3:3e:5d:02:7f:5f:00:38:9b:ec:31:
                    c6:f0:2b:15:17:ae:49:b1:4a:88:29:9b:12:0f:fa:
                    cc:ee:c0:70:75:10:ce:ef:b7:67:09:b2:e4:b5:b8:
                    03:34:13:d4:8f:f9:ef:02:d6:2b:0f:f3:d9:80:20:
                    9c:44:07:da:1c:32:6a:57:78:ce:8b:ea:fd:50:38:
                    ad:b6:99:4a:9a:5d:91:6f:e3:94:66:bf:56:70:5f:
                    38:c0:96:ee:16:e9:3e:24:3a:99:02:63:20:d8:89:
                    3e:43:e7:8a:34:f2:55:58:c3:2e:a6:1f:2f:11:c7:
                    fe:1f:e0:ed:dc:3d:77:7c:62:39:60:15:3a:d5:fc:
                    d9:49:4d:fe:48:d9:f5:fc:ca:ca:25:c4:c6:3f:8f:
                    c9:aa:a3:24:66:22:f0:dd:c1:19:27:ea:9c:75:00:
                    21:74:02:71:2b:db:2c:d4:7a:e7:98:9f:62:7e:3a:
                    49:43:ed:82:4a:86:2e:df:da:0d:3f:c0:8b:15:63:
                    47:cd:a0:0d:22:92:98:b8:60:11:7b:41:ba:29:10:
                    96:f1:aa:79:3d:b0:6f:7b:69:bc:0c:7a:2e:ad:65:
                    c9:03:8a:08:55:26:94:3c:db:21:12:7d:5c:67:33:
                    9e:a9:f7:73:f1:98:64:93:11:f4:de:35:50:3a:d2:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0A:CB:CA:B3:26:96:F5:22:1F:17:56:42:23:56:E4:68:32:D0:B0
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/7ArLyrMmlvUiHxdWQiNW5Ggy0LA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1a80::-2a06:a005:1acf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         60:43:9e:a1:f7:63:04:4a:0c:c3:4e:c2:7e:75:35:a0:d5:86:
         8d:e6:24:96:ce:d0:51:5a:77:63:f8:15:b8:1f:8b:67:5e:e3:
         bc:9f:86:28:19:c1:85:c3:b9:66:68:f5:98:a1:a1:48:5d:f7:
         e3:f5:a9:98:f6:49:1d:26:dd:14:01:53:80:21:2e:31:ee:d3:
         f8:f0:c8:a1:f4:40:d4:c4:52:48:9b:ac:d4:15:04:d5:f0:f3:
         87:d2:2a:18:7a:d3:97:78:5b:f9:9c:ce:bd:c8:f5:38:ed:39:
         ab:b9:f6:fa:f4:7d:e8:2d:58:00:f0:4a:c0:08:6d:f6:25:dd:
         ce:c7:8c:ff:a1:0e:f1:76:b8:1c:a7:c6:1f:0b:16:b7:f1:50:
         5f:24:ee:98:e8:9e:85:e5:78:1b:67:dc:63:bc:05:d9:ae:54:
         f8:08:c6:fd:56:e1:08:23:2f:c3:63:51:b2:5d:f6:ca:30:e2:
         14:82:cf:6e:14:42:61:19:d1:d4:e9:50:aa:8a:53:d0:b8:af:
         c6:3a:26:ae:83:98:90:dd:7c:1d:4e:7b:c2:a9:99:f3:e5:eb:
         15:e8:74:9b:90:de:c9:5b:3c:4c:73:a3:21:fb:23:b6:8c:de:
         e0:46:40:b3:c6:a2:d0:f2:6a:f3:10:da:4b:14:49:e2:ca:16:
         52:00:f3:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----