Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ymZh6w-ER_8Rzfwvu33Ri3p1XQI.roa
File:                     ymZh6w-ER_8Rzfwvu33Ri3p1XQI.roa (raw, json)
Hash identifier:          SsFvCJSLHTomHCVqkZBbzZrMOo4wcj9Zu5qnFay9d2w=
Subject key identifier:   CA:66:61:EB:0F:84:47:FF:11:CD:FC:2F:BB:7D:D1:8B:7A:75:5D:02
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01846548DA65D174F3F62AE3B35B0F36D74A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ymZh6w-ER_8Rzfwvu33Ri3p1XQI.roa
Signing time:             Fri 11 Nov 2022 06:03:04 +0000
ROA not before:           Fri 11 Nov 2022 06:03:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58015
IP address blocks:        2a06:a005:4dc::/48 maxlen: 48
                          2a06:a005:4dd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:65:48:da:65:d1:74:f3:f6:2a:e3:b3:5b:0f:36:d7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 11 06:03:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ca6661eb0f8447ff11cdfc2fbb7dd18b7a755d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:3c:17:44:4f:47:3f:d3:de:5e:ec:8b:f6:
                    a9:0b:46:b1:46:02:52:ae:d2:5a:75:60:ed:34:f7:
                    ce:d5:bc:87:c1:bb:29:ae:ef:69:9c:8f:32:1a:1d:
                    98:d5:c4:d2:ae:1e:15:4a:4b:76:a5:e5:e3:f6:86:
                    ba:39:ad:c5:85:3d:fc:4c:0d:e0:19:4b:2c:59:5a:
                    02:d4:df:24:18:40:a7:25:a5:4d:7a:eb:04:a9:b4:
                    9c:1a:a0:71:b9:e0:a9:07:6e:db:68:b7:58:7f:3e:
                    b6:d7:5c:cb:90:9e:da:bf:c2:26:01:55:75:73:f4:
                    b0:90:b7:eb:b6:45:33:65:8e:0e:8f:1f:bf:35:51:
                    8a:9f:9c:98:9e:00:71:54:e7:e3:00:f7:aa:3d:a1:
                    18:25:78:7f:51:ea:9a:0b:79:81:eb:7b:21:9b:af:
                    e0:69:bc:b3:65:3a:6d:bc:08:05:d3:c9:47:28:1f:
                    77:c1:be:46:a4:e6:73:d5:61:7e:c8:fd:3a:2b:f6:
                    1b:f4:95:11:c9:54:45:b5:05:40:1f:c1:b7:35:b0:
                    8d:fd:24:fe:18:59:d9:20:a1:59:d4:e1:18:25:a9:
                    86:da:9e:74:98:53:63:ee:ad:22:00:18:ff:1c:2d:
                    bf:d6:ac:17:9e:e3:c0:ff:d2:75:e7:18:17:4a:67:
                    5e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:66:61:EB:0F:84:47:FF:11:CD:FC:2F:BB:7D:D1:8B:7A:75:5D:02
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ymZh6w-ER_8Rzfwvu33Ri3p1XQI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4dc::/47

    Signature Algorithm: sha256WithRSAEncryption
         09:b8:58:18:4a:90:ed:c5:99:40:61:74:2e:0d:a8:fc:dc:ac:
         bf:d7:06:57:c2:44:ae:3d:92:1a:1d:e2:8e:fc:05:8d:21:e7:
         65:d1:dc:09:a9:a7:e2:02:23:ac:3b:82:7e:f1:59:a1:f2:9a:
         83:2d:87:12:c3:77:d2:88:9d:b8:17:de:7e:dc:ad:49:be:03:
         02:aa:33:54:f7:b9:cc:db:70:b8:ef:9a:7e:4a:11:d9:a4:37:
         d1:90:fc:9e:18:24:5e:8a:27:de:80:36:cd:58:75:10:bf:f0:
         e1:99:43:9b:97:d4:1e:7d:0b:ec:47:b7:8c:6e:9c:31:32:79:
         0e:24:ff:12:e1:7e:e4:67:cc:9e:ea:fd:69:22:f7:52:dc:ea:
         40:8d:0d:11:81:d3:15:7f:99:4a:46:aa:dd:2a:75:98:e9:ac:
         4c:32:a8:43:4c:bc:c6:aa:b0:14:5d:35:bf:05:e4:38:1d:09:
         ec:d6:ce:48:f6:f0:42:34:83:f1:23:6d:97:e5:07:f5:55:cd:
         11:ad:72:e1:db:fb:30:fb:fb:16:7c:a9:6d:f2:19:ad:d1:e2:
         91:26:2a:1d:6d:bf:cd:11:03:84:e8:3c:47:39:c4:51:db:aa:
         57:30:41:80:de:04:fb:db:d4:de:db:6c:42:3a:08:f2:8f:17:
         bf:ba:fd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----