Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ta7E6Vvg2_kUMW73dA0ZK-JlaFg.roa
File:                     ta7E6Vvg2_kUMW73dA0ZK-JlaFg.roa (raw, json)
Hash identifier:          rqhe4zh1KsheClg0JPIwfW2AvEoxzWpNAiTTIXBenFo=
Subject key identifier:   B5:AE:C4:E9:5B:E0:DB:F9:14:31:6E:F7:74:0D:19:2B:E2:65:68:58
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01824D356FD632C62A103732B00B94E6BE77
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ta7E6Vvg2_kUMW73dA0ZK-JlaFg.roa
Signing time:             Sat 30 Jul 2022 03:45:23 +0000
ROA not before:           Sat 30 Jul 2022 03:45:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50842
IP address blocks:        2a06:a005:1540::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:4d:35:6f:d6:32:c6:2a:10:37:32:b0:0b:94:e6:be:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 30 03:45:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5aec4e95be0dbf914316ef7740d192be2656858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e9:47:4a:fb:88:a3:a0:63:99:1c:24:78:48:
                    55:63:bb:f9:d1:a9:1d:14:dc:59:98:fa:01:2a:53:
                    7e:7e:72:49:4d:0b:b1:9c:2b:b9:c5:9b:23:fe:0e:
                    b6:3d:a3:74:2c:7e:b5:50:d3:ee:ed:0f:69:06:45:
                    91:be:b3:97:00:e1:87:3f:f0:99:0a:c3:00:0e:01:
                    e1:a2:d3:e6:3d:1e:de:16:30:3d:95:06:a4:3b:8d:
                    88:ab:4c:6d:79:16:7c:01:9b:3d:d2:3c:7f:e9:df:
                    45:1e:75:47:3a:d5:58:e6:b0:d1:2b:2f:84:16:3d:
                    83:45:d5:eb:bb:e6:b0:1b:19:ad:4c:36:34:e8:d3:
                    d8:d4:b9:e0:b3:53:fd:09:34:86:f0:c0:99:be:76:
                    de:8a:a8:b8:95:7c:03:a8:b1:a7:94:da:c0:8c:fa:
                    92:52:fd:8f:92:09:1f:14:06:ae:b6:51:b7:94:3b:
                    59:29:5f:a7:ba:05:ab:ab:58:fb:c8:cf:16:eb:31:
                    b8:54:43:cf:0f:df:40:9d:e6:c8:34:af:8b:3a:64:
                    ab:09:83:9f:8c:b6:0a:ae:2f:2e:13:ef:a9:7b:a0:
                    e7:61:18:86:5c:96:a1:9a:39:9d:c2:36:f4:60:97:
                    c1:6f:ff:e9:d5:f0:86:f5:46:a9:22:84:39:02:e4:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AE:C4:E9:5B:E0:DB:F9:14:31:6E:F7:74:0D:19:2B:E2:65:68:58
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ta7E6Vvg2_kUMW73dA0ZK-JlaFg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1540::/44

    Signature Algorithm: sha256WithRSAEncryption
         22:64:69:15:14:ef:37:d8:1e:9d:8d:b7:61:12:e4:62:45:b0:
         de:ac:7b:33:56:cc:1d:61:aa:9e:b4:b7:38:45:e6:45:c4:9b:
         a3:48:f9:e5:a8:42:a8:2b:49:ee:6e:2f:87:1e:3f:d3:8e:d2:
         67:ec:f7:9c:df:dc:3e:58:e8:62:08:4f:e2:15:3c:af:6f:bc:
         24:92:59:d0:53:0d:c6:f8:4e:98:7f:e3:81:91:9a:b1:f5:4f:
         b2:84:ba:37:4c:3d:30:49:ac:cd:eb:ba:1b:af:14:de:dc:50:
         a0:b2:d2:83:2d:09:4f:61:0f:bb:ac:57:b2:98:f3:8f:33:88:
         27:a5:0c:ff:82:e0:f5:1e:9f:a8:11:30:32:a9:e6:1d:ad:6c:
         da:f2:28:db:6c:ac:c2:6c:fe:2e:2f:e7:f4:15:28:97:b0:23:
         09:d2:43:50:12:67:2a:fd:f7:58:47:8b:ea:33:30:4b:ea:2a:
         03:77:d1:20:8e:08:2e:ee:30:d6:df:c8:e7:40:fa:22:4c:d4:
         cb:28:2e:5b:02:8d:ee:38:23:14:9f:48:92:d8:74:44:c5:12:
         c2:ae:35:49:51:70:80:60:9c:bb:a9:e1:97:36:1f:95:6c:de:
         9d:b2:a1:71:f7:c9:ff:33:be:36:67:5b:af:ed:1c:73:64:5f:
         83:1c:f3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----