Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9e494d-91ae-4ae0-b698-d190dfd9b43c/1/aZhIhH5DWApqVq_0Z-kFQVU8SQc.roa
File:                     aZhIhH5DWApqVq_0Z-kFQVU8SQc.roa (raw, json)
Hash identifier:          NKOxxCxEVQIfodfy9cJ2E2aKSKIUBbjqJh/+RZqOpSM=
Subject key identifier:   69:98:48:84:7E:43:58:0A:6A:56:AF:F4:67:E9:05:41:55:3C:49:07
Certificate issuer:       /CN=d499946c6ce8f4aff191f63eeabe95fa44acc89a
Certificate serial:       05336E31
Authority key identifier: D4:99:94:6C:6C:E8:F4:AF:F1:91:F6:3E:EA:BE:95:FA:44:AC:C8:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1JmUbGzo9K_xkfY-6r6V-kSsyJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/9e494d-91ae-4ae0-b698-d190dfd9b43c/1/aZhIhH5DWApqVq_0Z-kFQVU8SQc.roa
Signing time:             Sat 01 Jan 2022 06:59:53 +0000
ROA not before:           Sat 01 Jan 2022 06:59:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34907
IP address blocks:        2a0a:3680::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87256625 (0x5336e31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d499946c6ce8f4aff191f63eeabe95fa44acc89a
        Validity
            Not Before: Jan  1 06:59:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=699848847e43580a6a56aff467e90541553c4907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c2:4d:dd:99:bf:3f:36:81:22:c2:70:22:d4:
                    dc:0e:c3:e1:26:80:70:4f:d8:6d:92:d6:ba:63:ed:
                    7c:d9:a5:6c:fa:6d:6e:7a:ce:99:e0:ad:d2:ca:ba:
                    8b:d6:6f:98:04:4e:21:a4:d0:66:db:a2:47:a9:99:
                    7f:ee:c8:90:e7:d2:95:83:1a:ac:bb:11:7b:be:09:
                    4c:f1:36:25:c8:6d:f3:c2:93:28:5a:de:b5:c0:30:
                    36:a2:44:f5:bf:a8:16:e7:d9:99:22:4b:c5:be:d7:
                    67:79:c2:0f:d4:de:b8:09:a7:59:3e:68:83:67:05:
                    81:4f:f4:38:d6:ef:97:e1:d8:da:f4:49:54:e9:e8:
                    11:7d:70:52:4c:9c:49:ac:6f:f0:1e:fa:49:a5:20:
                    26:ec:d7:c3:b2:4b:cb:cb:98:86:98:8c:93:31:56:
                    ef:0a:8a:3a:1e:52:47:3c:f4:64:a1:c6:9c:97:12:
                    2c:cf:10:ca:a8:0b:8c:89:1d:2f:63:31:1c:2c:ff:
                    fb:c2:58:d4:8c:3e:cf:b4:9f:16:9f:9b:b1:3b:e4:
                    42:d0:b2:19:62:16:03:08:a2:76:35:be:a4:72:70:
                    5c:1b:0f:6f:a8:51:65:67:10:38:90:9b:ae:4e:0c:
                    28:73:40:c7:81:28:3e:5b:b8:18:25:ae:61:bd:eb:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:98:48:84:7E:43:58:0A:6A:56:AF:F4:67:E9:05:41:55:3C:49:07
            X509v3 Authority Key Identifier:
                keyid:D4:99:94:6C:6C:E8:F4:AF:F1:91:F6:3E:EA:BE:95:FA:44:AC:C8:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1JmUbGzo9K_xkfY-6r6V-kSsyJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9e494d-91ae-4ae0-b698-d190dfd9b43c/1/aZhIhH5DWApqVq_0Z-kFQVU8SQc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9e494d-91ae-4ae0-b698-d190dfd9b43c/1/1JmUbGzo9K_xkfY-6r6V-kSsyJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:3680::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:f5:85:2b:ca:7c:fa:65:92:de:99:34:41:df:1a:f8:90:55:
         fd:77:c4:9d:8a:6d:58:9f:5b:08:37:9c:b4:5d:7a:8f:52:43:
         43:79:1b:6d:a8:04:18:bd:66:ad:37:a1:19:6f:b6:32:a0:29:
         18:27:af:63:36:d7:c7:81:9f:3a:62:25:15:e6:39:70:3b:65:
         1b:60:db:ab:86:de:44:46:8f:e3:98:41:60:e5:ba:91:36:93:
         9b:20:92:1c:a1:53:67:1b:a3:27:2e:e6:83:e6:f9:f5:8a:c3:
         0b:4b:6a:3f:f1:cc:fd:9f:2d:58:45:fc:78:e3:c3:2d:40:fe:
         2e:8e:4c:7b:31:20:de:19:0c:6c:70:a9:84:1e:1d:75:3e:4f:
         5e:d4:e1:21:49:db:6f:4f:a9:91:bf:d3:60:e4:e1:10:c2:9b:
         94:55:57:39:6c:c3:a8:c2:76:f9:24:b2:98:90:e3:ff:a4:b9:
         db:b9:e2:35:99:cb:cb:f1:b6:50:68:57:05:7c:06:31:65:79:
         c5:53:7c:e0:ff:c5:32:f6:58:eb:5a:ac:c6:a9:4c:86:c6:ce:
         05:fa:e7:8b:d2:07:95:98:4f:ca:e7:bc:45:3c:ac:92:9e:78:
         e8:00:49:bc:1b:fc:30:1b:04:fd:9a:30:78:88:0d:b3:e3:67:
         d2:89:01:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----