Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tEDAypc7B3FwCtkBR8o7sn7qDnI.roa
File:                     tEDAypc7B3FwCtkBR8o7sn7qDnI.roa (raw, json)
Hash identifier:          9NBdeu6xHJcY8EZC+3Q7Wrek40rGMDcFHIFJ3K/jvFQ=
Subject key identifier:   B4:40:C0:CA:97:3B:07:71:70:0A:D9:01:47:CA:3B:B2:7E:EA:0E:72
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184615055D1CFEC7A674C7822664832EA3F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tEDAypc7B3FwCtkBR8o7sn7qDnI.roa
Signing time:             Thu 10 Nov 2022 11:32:45 +0000
ROA not before:           Thu 10 Nov 2022 11:32:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203888
IP address blocks:        2a06:a005:150a::/48 maxlen: 48
                          2a06:a005:d22::/48 maxlen: 48
                          2a06:a005:b60::/44 maxlen: 48
                          2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:61:50:55:d1:cf:ec:7a:67:4c:78:22:66:48:32:ea:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 10 11:32:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b440c0ca973b0771700ad90147ca3bb27eea0e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:63:50:3c:c0:3d:0b:95:fa:e6:c3:8c:43:0b:
                    14:b4:5f:89:1b:5d:23:cf:f2:dc:2b:e6:3f:d9:c9:
                    d4:23:56:e3:af:6e:b2:7c:2d:d3:55:5d:93:c7:5d:
                    8a:bd:07:a8:00:6c:9a:a7:ca:d8:9b:64:19:d9:76:
                    8b:69:03:96:de:bb:83:af:e3:64:82:0e:1c:c1:cc:
                    3a:34:66:d1:57:96:24:59:75:cf:d2:46:c5:86:bf:
                    44:34:6e:ed:37:f9:8f:a7:08:32:98:9a:3f:98:be:
                    e3:bd:ed:08:5d:ba:ba:d3:12:e7:73:9e:e2:7a:31:
                    27:58:d9:40:21:09:d0:85:1e:b9:a7:37:e6:68:bc:
                    cd:f1:86:25:c7:07:5a:f1:a9:73:cb:da:44:cf:07:
                    ef:1e:ca:72:6d:04:7e:8f:9d:4f:39:57:65:e4:ea:
                    b1:f9:ad:ad:ae:2f:f3:1b:aa:6c:41:70:8b:eb:6c:
                    2a:fe:1f:63:aa:0f:40:86:35:53:7a:b0:19:7f:49:
                    ee:7c:7f:1d:42:0c:ca:d1:ed:5f:ef:9a:7d:32:a0:
                    08:11:02:86:b0:14:03:7b:c1:e0:62:5f:cb:c4:b3:
                    1d:df:57:d0:bb:e5:fa:1b:bb:11:aa:92:02:ad:52:
                    5b:26:79:6b:fb:91:e8:9d:fb:07:78:2a:91:77:46:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:40:C0:CA:97:3B:07:71:70:0A:D9:01:47:CA:3B:B2:7E:EA:0E:72
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tEDAypc7B3FwCtkBR8o7sn7qDnI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b60::/44
                  2a06:a005:d22::/48
                  2a06:a005:150a::/48
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:15:58:57:f9:78:e7:33:63:f7:0a:9a:0b:5e:0b:f5:11:a6:
         99:9e:ac:a9:64:bc:61:9d:cd:5b:a3:aa:6e:09:6c:92:d3:e9:
         e1:dc:38:95:30:b7:e8:ad:9a:5e:f7:1a:50:f5:d2:9c:98:02:
         4f:48:1f:1b:01:08:cd:2b:2f:7a:e7:90:ed:c6:7a:44:82:3f:
         1a:b9:3f:91:b2:1d:8f:56:96:46:0b:f4:eb:53:19:2e:f6:cc:
         0f:d8:c0:41:5e:8c:af:99:04:a9:9e:75:b8:e1:75:10:f0:6b:
         e3:18:ba:a8:0b:f0:04:4d:2c:16:0c:c0:97:a2:93:d3:99:ea:
         c7:b2:e3:f3:b0:31:23:42:65:bb:bc:fe:18:7b:56:28:d7:56:
         b1:b2:13:47:5f:02:0d:8d:c3:a3:a4:74:66:9f:4d:d6:99:72:
         e2:5a:69:5b:3c:8c:82:e1:1a:c9:5d:a3:b6:23:3e:fb:69:28:
         5b:2b:86:74:58:2c:3a:82:d8:b6:97:39:33:d6:99:8a:c2:e2:
         05:df:54:04:d4:95:f7:1f:be:1e:34:28:af:9a:c6:5b:ad:83:
         c4:ca:e2:bb:9c:65:c7:b3:f3:f5:2b:82:33:c8:e8:c5:d4:60:
         69:18:36:cc:cd:2b:c3:d5:8b:32:26:1b:e0:d4:32:8e:9b:dc:
         d4:d9:44:dc
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYRhUFXRz+x6Z0x4ImZIMuo/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTEwMTEzMjQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDQwYzBjYTk3M2IwNzcxNzAwYWQ5MDE0N2NhM2JiMjdlZWEwZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWNQPMA9C5X65sOMQwsUtF+JG10j
z/LcK+Y/2cnUI1bjr26yfC3TVV2Tx12KvQeoAGyap8rYm2QZ2XaLaQOW3ruDr+Nk
gg4cwcw6NGbRV5YkWXXP0kbFhr9ENG7tN/mPpwgymJo/mL7jve0IXbq60xLnc57i
ejEnWNlAIQnQhR65pzfmaLzN8YYlxwda8alzy9pEzwfvHspybQR+j51POVdl5Oqx
+a2tri/zG6psQXCL62wq/h9jqg9AhjVTerAZf0nufH8dQgzK0e1f75p9MqAIEQKG
sBQDe8HgYl/LxLMd31fQu+X6G7sRqpICrVJbJnlr+5HonfsHeCqRd0aXNwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLRAwMqXOwdxcArZAUfKO7J+6g5yMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvdEVEQXlwYzdCM0Z3Q3RrQlI4bzdzbjdxRG5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcEKgagBQtg
AwcAKgagBQ0iAwcAKgagBRUKAwcAKgdUwrALMA0GCSqGSIb3DQEBCwUAA4IBAQCf
FVhX+XjnM2P3CpoLXgv1EaaZnqypZLxhnc1bo6puCWyS0+nh3DiVMLforZpe9xpQ
9dKcmAJPSB8bAQjNKy9655DtxnpEgj8auT+Rsh2PVpZGC/TrUxku9swP2MBBXoyv
mQSpnnW44XUQ8GvjGLqoC/AETSwWDMCXopPTmerHsuPzsDEjQmW7vP4Ye1Yo11ax
shNHXwINjcOjpHRmn03WmXLiWmlbPIyC4RrJXaO2Iz77aShbK4Z0WCw6gti2lzkz
1pmKwuIF31QE1JX3H74eNCivmsZbrYPEyuK7nGXHs/P1K4IzyOjF1GBpGDbMzSvD
1YsyJhvg1DKOm9zU2UTc
-----END CERTIFICATE-----