Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ID94FFYagUSXxzdFYM-PYMB8GaQ.roa
File:                     ID94FFYagUSXxzdFYM-PYMB8GaQ.roa (raw, json)
Hash identifier:          3XuKY5AZY7u5fbbvAYuICNg72dhqmhOEKeIR8UdmgFw=
Subject key identifier:   20:3F:78:14:56:1A:81:44:97:C7:37:45:60:CF:8F:60:C0:7C:19:A4
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01845E922127F488EE1C3F3E7CA989C343FD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ID94FFYagUSXxzdFYM-PYMB8GaQ.roa
Signing time:             Wed 09 Nov 2022 22:45:45 +0000
ROA not before:           Wed 09 Nov 2022 22:45:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62485
IP address blocks:        2a06:a005:150e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5e:92:21:27:f4:88:ee:1c:3f:3e:7c:a9:89:c3:43:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov  9 22:45:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=203f7814561a814497c7374560cf8f60c07c19a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6c:45:3c:09:ef:b4:01:47:b7:da:30:fc:0a:
                    ed:78:39:d4:33:79:72:42:a0:43:37:f7:99:e6:2b:
                    02:2a:16:c3:0c:cd:c4:aa:40:69:bd:d5:c8:2b:ef:
                    b7:d8:8d:8e:1d:74:b5:10:5b:e2:eb:ce:03:79:d6:
                    17:d2:53:2d:97:09:89:cd:81:19:f4:04:ad:21:7a:
                    5c:1d:47:10:d4:e2:ba:24:18:52:2d:cf:8e:dc:01:
                    e2:97:19:95:8b:4f:e6:7a:fe:be:d9:9b:0a:b0:27:
                    e8:42:96:43:77:41:9f:aa:8b:13:70:65:0f:c5:06:
                    19:ea:b6:61:90:ff:6c:10:b3:50:5c:aa:97:f9:b2:
                    27:1a:cd:17:2a:4a:cf:0b:3a:2c:2d:86:e9:67:e0:
                    b9:b2:07:b3:09:f4:a5:2c:c9:5b:b3:9a:66:f5:d6:
                    7f:f2:fe:12:53:63:6e:f3:68:3d:03:ba:14:77:0e:
                    35:56:b0:84:3f:6a:1b:b2:dd:18:d3:23:10:f4:87:
                    dc:cc:ea:e7:a4:b0:35:9f:cb:b0:42:c3:9d:d5:70:
                    07:9f:79:63:06:16:c1:16:27:6f:83:6a:73:e4:a5:
                    a0:6d:47:fa:98:e8:e4:18:30:b0:90:31:0c:0c:48:
                    78:13:fd:f1:42:98:e9:a9:5c:d5:dd:74:75:53:bc:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3F:78:14:56:1A:81:44:97:C7:37:45:60:CF:8F:60:C0:7C:19:A4
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ID94FFYagUSXxzdFYM-PYMB8GaQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:150e::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:30:e8:82:e0:6f:92:d3:59:21:7b:36:ba:08:8f:3d:0c:
         8d:5f:c7:91:79:9b:f8:fe:c6:01:2f:1f:dc:64:ea:33:2b:e0:
         bc:a4:88:2a:31:70:ff:1a:78:81:1d:8d:76:cc:57:27:7c:7e:
         77:93:11:eb:c1:08:f9:c9:e2:2c:ec:9b:38:a4:f7:ba:1a:05:
         8b:89:47:7e:58:bd:fa:ad:be:d1:d5:40:58:3a:53:83:4c:1a:
         b2:39:8e:1d:cf:a2:bc:a4:d9:2f:5d:aa:3e:64:d7:fd:c9:2a:
         6a:d8:a4:72:35:0f:d5:26:e5:ae:59:f4:b7:44:29:2f:8e:c0:
         6e:12:0c:b0:e7:4f:72:96:d7:e9:35:5e:15:1d:c6:0f:88:18:
         f7:1a:d6:65:0e:00:f4:f4:c0:3b:48:1a:93:2e:bd:3c:13:04:
         96:fe:4e:f7:9d:3a:58:b2:6a:21:f0:c7:2d:26:a6:b1:3c:79:
         3c:5b:f2:fe:5a:ce:7f:3d:29:b9:9c:c2:9f:ba:bd:92:e5:25:
         31:70:38:7f:20:c4:3c:bd:e8:01:38:48:f2:14:98:6d:9d:8f:
         dc:78:0d:80:c4:22:8a:3e:ad:c0:2f:8e:8d:3d:fc:38:b5:cb:
         89:31:95:3f:71:be:13:4b:dc:a6:35:05:0b:30:43:35:e6:e7:
         b8:af:c9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----