Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H2WgLGiC931bKeYBywoCctqXTxg.roa
File:                     H2WgLGiC931bKeYBywoCctqXTxg.roa (raw, json)
Hash identifier:          5Td8/20kWMuN5ts8nWozv/LEIJri6y8vGk8i0XDKBFE=
Subject key identifier:   1F:65:A0:2C:68:82:F7:7D:5B:29:E6:01:CB:0A:02:72:DA:97:4F:18
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184C6CD14040E1899481F931C9749D13EF0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H2WgLGiC931bKeYBywoCctqXTxg.roa
Signing time:             Wed 30 Nov 2022 04:30:39 +0000
ROA not before:           Wed 30 Nov 2022 04:30:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54681
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:1980::/44 maxlen: 48
                          2a06:a005:f00::/44 maxlen: 48
                          2a06:a005:1960::/44 maxlen: 48
                          2a06:a005:ee0::/44 maxlen: 48
                          2a06:a005:f20::/44 maxlen: 48
                          2a06:a005:18a0::/44 maxlen: 48
                          2a07:54c7::/32 maxlen: 48
                          2a06:a005:1506::/48 maxlen: 48
                          2a06:a005:1970::/44 maxlen: 48
                          2a06:a005:ef0::/44 maxlen: 48
                          2a06:a005:1950::/44 maxlen: 48
                          2a06:a005:f10::/44 maxlen: 48
                          2a06:a005:1c7e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c6:cd:14:04:0e:18:99:48:1f:93:1c:97:49:d1:3e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 30 04:30:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1f65a02c6882f77d5b29e601cb0a0272da974f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:02:92:6f:ab:47:5f:75:5c:9d:9f:8e:d0:
                    fc:cf:7e:61:ce:76:e6:37:ea:e5:a8:13:e5:68:e3:
                    a0:79:fe:56:fe:ba:a1:ba:74:95:a8:0e:6b:69:f9:
                    77:11:20:87:10:7a:0d:51:de:ed:80:7c:89:fe:89:
                    2b:9f:09:97:a2:a8:31:f3:e0:7b:09:8c:2d:24:02:
                    ad:4f:fe:cb:29:49:81:65:00:36:ad:c8:80:60:26:
                    ca:7f:b0:50:c0:1d:12:79:34:09:8d:12:8c:ec:b4:
                    ee:ec:99:cd:9c:44:79:77:de:74:63:01:7b:c6:50:
                    c8:5c:de:d6:eb:89:9e:3f:f2:a7:32:ad:97:9a:d2:
                    76:4e:e4:2e:51:bd:51:fc:7b:c0:fa:37:02:6a:69:
                    b2:f4:de:fc:16:11:62:67:8a:7a:9e:bf:f5:e9:16:
                    55:e5:04:8a:bb:18:20:63:eb:03:a7:56:6b:b1:7b:
                    62:eb:67:50:ee:1e:c4:02:da:2f:6b:98:84:56:17:
                    3c:8b:57:b5:12:fb:76:64:48:da:86:c1:22:a9:d2:
                    66:d4:4e:5b:34:54:84:7c:86:2f:6d:2a:ee:21:87:
                    71:ec:65:79:83:af:8a:31:23:db:6f:5f:f6:67:db:
                    4c:b3:a5:e3:98:a3:09:9f:2c:48:e3:db:e4:34:74:
                    27:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:65:A0:2C:68:82:F7:7D:5B:29:E6:01:CB:0A:02:72:DA:97:4F:18
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/H2WgLGiC931bKeYBywoCctqXTxg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:ee0::-2a06:a005:f2f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1506::/48
                  2a06:a005:18a0::/44
                  2a06:a005:1950::-2a06:a005:198f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1c7e::/48
                  2a07:54c2:b00b::/48
                  2a07:54c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:f1:22:48:8d:87:ac:74:1c:a3:8a:5a:b4:39:1a:b8:53:68:
         e4:a1:15:87:77:ca:71:44:cc:41:4f:4d:28:b2:c0:75:db:42:
         23:c3:56:8b:2d:a6:e5:e9:ea:77:e2:71:86:ab:fb:f8:2c:5d:
         d3:20:5b:f9:e1:dc:45:f0:43:b1:31:bf:9b:e5:66:f2:31:78:
         83:18:60:e1:63:ce:03:80:56:68:fa:a9:5d:e2:af:ac:43:ed:
         ca:f6:7e:c2:d7:8a:08:a8:7d:d1:9f:17:3f:e2:e0:eb:bd:6c:
         49:0d:7c:ad:41:d3:4d:f2:6b:0b:1e:09:69:fa:00:36:6f:1f:
         fa:3a:1d:0b:78:16:90:d5:6a:98:e7:50:1b:90:ab:31:3e:be:
         91:45:15:94:49:7b:fa:72:f9:29:a9:14:ec:9e:73:c2:32:08:
         cd:e1:0d:df:e6:40:84:ca:b3:2e:ef:61:9a:34:c0:97:34:90:
         35:81:c6:21:c7:8e:d7:6c:b9:ab:54:2b:1f:bb:57:37:23:d3:
         ca:3b:bb:ff:e8:63:74:64:d6:d2:d6:5e:38:04:7d:b7:3c:24:
         a7:7f:8d:57:60:82:a3:d8:fc:47:53:37:a0:33:24:d5:b1:25:
         95:1f:6a:e9:43:a4:e9:c5:ef:05:2e:d0:b5:0e:71:98:88:5f:
         45:e3:e6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----