Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wjC0enTdLJYkwScfxIBDJ8Q-ews.roa
File:                     wjC0enTdLJYkwScfxIBDJ8Q-ews.roa (raw, json)
Hash identifier:          19JYQ1lJkldPFBL/TYv0hk1R9fEj8tInty8sMvcm+zo=
Subject key identifier:   C2:30:B4:7A:74:DD:2C:96:24:C1:27:1F:C4:80:43:27:C4:3E:7B:0B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183024200B480849B7F0E8EDE2F28A9648C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wjC0enTdLJYkwScfxIBDJ8Q-ews.roa
Signing time:             Sat 03 Sep 2022 07:30:23 +0000
ROA not before:           Sat 03 Sep 2022 07:30:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47158
IP address blocks:        2a06:a005:5aa::/48 maxlen: 48
                          2a06:a005:1730::/44 maxlen: 48
                          2a06:a005:1b30::/44 maxlen: 48
                          2a06:a005:5ab::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:02:42:00:b4:80:84:9b:7f:0e:8e:de:2f:28:a9:64:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep  3 07:30:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c230b47a74dd2c9624c1271fc4804327c43e7b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:e5:9e:08:66:09:ef:9e:76:11:7e:2d:f5:
                    8b:15:c4:e2:ab:24:c9:2b:86:45:7a:57:31:38:e6:
                    ad:39:5c:f0:4b:59:ca:27:f2:6d:ce:2d:3d:ad:47:
                    d9:73:a8:ca:f9:fc:75:8b:97:6c:01:e4:72:b3:85:
                    3e:5f:28:7d:1d:de:ad:66:17:ad:50:95:66:df:82:
                    9c:84:85:e3:4b:45:08:d6:13:cb:51:67:60:ab:45:
                    3b:5a:ec:49:b6:62:df:18:9e:db:aa:af:c8:d3:56:
                    c0:28:02:73:8c:1e:84:fc:2c:83:7f:80:55:93:38:
                    db:2b:3e:0b:52:38:72:1e:f9:07:6f:5f:dc:42:7f:
                    26:eb:26:33:3b:0e:03:3b:25:32:9b:fd:37:c7:f8:
                    b7:da:a8:24:5f:9a:ff:52:a3:a9:4a:52:3c:78:a0:
                    99:67:67:0c:ee:09:69:76:eb:9e:f0:09:b9:dd:8d:
                    85:88:d8:29:61:b2:c0:ad:46:4a:40:2c:4d:f1:a7:
                    fa:bb:95:2e:05:b7:b0:16:e4:11:a1:b8:de:24:58:
                    12:17:1d:84:17:10:c8:21:c1:17:97:c7:c7:89:d1:
                    9c:2a:fa:06:5c:10:97:f4:47:6c:4a:38:df:46:e9:
                    b6:68:00:e7:9a:67:76:98:2b:95:a8:7f:cf:d6:51:
                    c4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:30:B4:7A:74:DD:2C:96:24:C1:27:1F:C4:80:43:27:C4:3E:7B:0B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/wjC0enTdLJYkwScfxIBDJ8Q-ews.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5aa::/47
                  2a06:a005:1730::/44
                  2a06:a005:1b30::/44

    Signature Algorithm: sha256WithRSAEncryption
         64:37:28:83:7d:dc:90:45:8a:8c:be:11:f8:2a:a1:34:43:be:
         a7:bf:ee:86:25:d8:12:a6:24:1b:ff:02:06:4b:42:09:af:f4:
         28:b9:c6:d7:04:34:d1:eb:fa:58:51:de:24:27:f5:79:d3:30:
         6e:16:e0:2d:ce:e0:69:fe:00:fe:7d:a1:1a:32:e9:49:83:61:
         5d:cc:5f:95:e8:91:b2:c8:62:e9:ff:f0:ad:6c:02:d5:27:10:
         29:6b:b5:8c:b3:f9:c2:c9:13:32:a7:19:15:31:55:80:99:ab:
         19:84:c1:25:85:19:1c:f4:c0:64:8c:e2:8a:ad:d4:70:06:95:
         59:45:24:13:f1:00:bf:3d:e1:8e:f3:93:48:93:86:ba:0b:0b:
         0a:b6:af:ef:f0:47:11:b7:1e:32:42:fe:66:08:dd:47:95:3d:
         49:23:fa:8c:d5:13:a2:84:2c:92:66:cf:29:e6:a0:2d:59:60:
         82:e7:42:74:31:32:bf:cc:14:5c:48:88:77:18:9c:47:23:b5:
         66:f1:47:cf:b7:c7:8a:22:fb:26:a6:97:5d:0e:99:4a:df:bd:
         81:93:ca:96:82:41:ef:ab:f6:f4:19:a2:e4:0f:22:26:5b:13:
         dc:a3:2b:c4:5e:0f:48:53:81:bc:84:e1:45:e3:66:ca:31:63:
         77:ce:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----