Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tWVFu2EsHYed37dQwDMiBmcFP9s.roa
File:                     tWVFu2EsHYed37dQwDMiBmcFP9s.roa (raw, json)
Hash identifier:          BnH5KWwMZNS4Z91nW99C2djaVb6TDIWSIlG7WuJuqXM=
Subject key identifier:   B5:65:45:BB:61:2C:1D:87:9D:DF:B7:50:C0:33:22:06:67:05:3F:DB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184CA3C375EC3D7939FE0E0D0B40CB2076C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tWVFu2EsHYed37dQwDMiBmcFP9s.roa
Signing time:             Wed 30 Nov 2022 20:30:54 +0000
ROA not before:           Wed 30 Nov 2022 20:30:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201398
IP address blocks:        2a06:a005:108f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ca:3c:37:5e:c3:d7:93:9f:e0:e0:d0:b4:0c:b2:07:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 30 20:30:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b56545bb612c1d879ddfb750c033220667053fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1e:67:f2:4d:f3:ab:b0:92:6f:b0:41:2c:a9:
                    a4:14:fb:4c:fe:a8:30:d2:98:df:b7:e7:4b:0b:af:
                    78:a4:e6:80:ff:3b:a4:e3:d3:a7:08:c5:01:d7:6e:
                    58:4a:d7:73:95:90:7f:e7:9f:b1:87:21:de:ed:c3:
                    bd:10:ef:c8:f5:cd:77:d9:35:15:b2:ee:aa:96:5f:
                    05:e6:ef:5d:b1:57:57:19:bb:66:a0:7c:75:93:73:
                    54:83:78:1e:41:1b:72:e8:81:6b:92:3f:94:ac:7e:
                    a9:0f:6e:f5:6f:c4:bf:30:ff:e6:f0:3b:40:fa:72:
                    6a:d9:62:68:c7:48:5b:e7:bf:cc:c7:3b:b2:85:0d:
                    fc:c4:6e:07:30:44:28:8c:81:e4:7f:63:78:44:6e:
                    54:b7:77:44:ba:97:2c:ed:a9:f2:aa:fa:82:74:a7:
                    6b:d1:49:2a:e9:99:60:4e:13:0b:65:4d:36:db:a6:
                    96:83:cb:55:21:26:54:8a:aa:13:a4:6c:1f:77:39:
                    62:4e:2a:c4:4f:2a:16:9d:e2:3b:1e:db:aa:8e:20:
                    8f:73:ce:c2:19:ea:05:9e:37:6f:08:88:83:64:09:
                    4f:54:09:8e:de:0c:de:55:eb:a2:3d:e2:95:53:61:
                    eb:51:3f:e9:a8:81:6b:cc:b6:92:c2:b7:83:65:c8:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:65:45:BB:61:2C:1D:87:9D:DF:B7:50:C0:33:22:06:67:05:3F:DB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tWVFu2EsHYed37dQwDMiBmcFP9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:108f::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:72:78:18:e9:76:b8:fd:db:d1:c0:ca:24:73:f8:49:61:ab:
         2b:6f:a8:bc:ea:50:95:ea:60:16:aa:eb:a6:9c:eb:c3:64:d3:
         04:56:06:2d:2b:c9:69:c5:f6:50:bb:03:70:89:0b:d7:52:84:
         0e:a3:52:d1:e2:11:3d:11:14:2c:ce:e3:8e:ec:41:62:36:1a:
         74:7f:ae:44:a2:31:8a:fe:14:05:a0:c8:b3:16:66:96:39:0f:
         6f:75:81:a5:8c:ba:5f:4f:ac:ef:92:ae:08:a9:b9:69:ca:5a:
         b6:f9:42:4d:70:e0:3d:54:5b:0b:64:74:4b:fc:52:72:2f:54:
         5c:b8:fc:35:8d:c3:c1:89:a0:e9:41:b6:04:50:cd:cb:15:96:
         59:b6:93:bf:4b:a7:fa:56:e7:9a:5f:36:ab:f6:69:f0:c6:45:
         9c:eb:f1:16:9d:c5:b2:df:2e:7d:06:18:9c:85:e4:a8:b3:c2:
         16:37:59:38:9a:3c:fa:dd:56:f0:cf:d4:84:b1:a0:bc:ff:77:
         e4:5a:5e:87:43:bd:8c:d4:da:72:e3:75:a9:fa:36:99:19:bd:
         5b:69:94:d0:e7:58:4e:0d:c0:ac:6e:45:88:c9:fb:cc:61:2a:
         16:ef:41:86:22:b2:9d:a0:38:42:2d:52:1a:6d:91:c9:c3:31:
         ad:78:72:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----