Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IPnFHD1XnQXKRqvcH2VTabr8o8s.roa
File:                     IPnFHD1XnQXKRqvcH2VTabr8o8s.roa (raw, json)
Hash identifier:          WmBTXfMoCklHMZtUscZUd9EPXJa4zKLpmIFJLkv7Tao=
Subject key identifier:   20:F9:C5:1C:3D:57:9D:05:CA:46:AB:DC:1F:65:53:69:BA:FC:A3:CB
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A4AC15C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IPnFHD1XnQXKRqvcH2VTabr8o8s.roa
Signing time:             Mon 30 May 2022 12:05:15 +0000
ROA not before:           Mon 30 May 2022 12:05:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211360
IP address blocks:        2a06:a005:1f::/48 maxlen: 48
                          2a06:a005:aa0::/44 maxlen: 48
                          2a06:a005:ab0::/44 maxlen: 48
                          2a06:a005:ac0::/44 maxlen: 48
                          2a06:a005:a90::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441106780 (0x1a4ac15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 30 12:05:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=20f9c51c3d579d05ca46abdc1f655369bafca3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:e4:bf:80:ed:b3:92:ce:c4:12:3e:f3:e2:
                    9e:4d:d6:49:79:08:29:1c:d2:50:d4:02:60:10:af:
                    d5:a4:e1:81:0b:b1:6a:f3:4a:77:63:a8:3e:51:71:
                    cf:a5:77:9c:56:ff:34:82:de:fb:ac:95:71:9c:3c:
                    97:ae:a8:4e:19:80:cb:c7:84:c4:af:98:39:51:c8:
                    2c:7b:95:c0:9a:ae:cd:ec:d1:c3:6c:21:40:9d:0f:
                    40:d5:7a:f4:f0:c4:38:f2:8e:90:2d:0a:b6:aa:5c:
                    c7:6e:f8:54:12:07:80:00:5a:9b:e3:cf:25:c9:e8:
                    01:7d:0a:be:38:8c:7a:43:ef:2e:95:b1:ee:de:97:
                    bb:9a:d5:7f:05:bd:49:9a:06:59:b5:f0:0f:ed:f6:
                    7f:8a:3c:64:eb:e6:a4:e1:b7:fb:f5:f7:b4:96:18:
                    d9:67:ac:37:df:5b:09:32:a7:d4:39:e3:32:f7:60:
                    16:8b:5b:14:49:b3:58:4c:07:59:30:35:c6:64:9c:
                    fc:93:1b:dd:35:cf:47:90:1a:1f:39:c5:8e:04:dc:
                    1b:ae:98:1a:70:c7:90:c0:bf:43:b8:b1:f5:a1:ab:
                    0d:0d:65:44:e8:14:e4:9b:0e:69:4e:ef:dd:7e:01:
                    26:8d:b4:70:f1:21:8e:47:66:09:26:7d:a4:0c:d8:
                    ec:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F9:C5:1C:3D:57:9D:05:CA:46:AB:DC:1F:65:53:69:BA:FC:A3:CB
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/IPnFHD1XnQXKRqvcH2VTabr8o8s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1f::/48
                  2a06:a005:a90::-2a06:a005:acf:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         84:1f:38:71:25:43:c3:28:48:11:3e:f9:65:76:98:d2:61:f2:
         08:a0:3b:e7:56:e8:17:c4:49:05:aa:d7:aa:a1:b8:44:d3:a4:
         a0:23:38:e8:e5:be:ba:bd:a3:e4:24:fa:0e:09:15:77:b1:67:
         5f:6b:3c:f7:df:af:9d:8f:8e:b2:5c:98:b1:12:a4:1c:52:75:
         77:3a:38:72:4f:c4:7c:c6:47:e0:67:f8:8a:b2:79:22:fe:8f:
         f2:22:74:02:d6:54:3c:73:01:76:be:5b:33:11:21:fc:59:66:
         98:1d:c3:66:96:9d:03:09:53:22:a6:79:83:66:2c:74:47:c0:
         ea:a8:d2:d5:15:40:5a:44:0f:41:26:ef:8d:ee:f3:b0:88:61:
         17:28:58:a2:c8:c2:0f:d7:d9:23:0f:0b:89:ee:3e:cd:df:0c:
         21:c0:6f:da:0a:9e:64:1c:6e:ad:1f:65:5d:f7:a2:4d:40:7d:
         3a:75:88:75:46:c4:74:58:63:0d:85:92:56:02:b6:7f:33:65:
         87:8a:1e:ee:6c:42:f6:21:ad:02:a1:49:6d:6c:ef:17:93:ba:
         16:18:a2:ee:51:94:59:67:a2:32:82:ad:cf:c0:b4:03:1d:9e:
         5f:b6:78:01:b9:c8:af:c0:22:97:15:26:6b:10:00:ac:43:37:
         bf:db:51:d6
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEGkrBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUz
MDEyMDUxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjBmOWM1MWMzZDU3
OWQwNWNhNDZhYmRjMWY2NTUzNjliYWZjYTNjYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJM85L+A7bOSzsQSPvPink3WSXkIKRzSUNQCYBCv1aThgQux
avNKd2OoPlFxz6V3nFb/NILe+6yVcZw8l66oThmAy8eExK+YOVHILHuVwJquzezR
w2whQJ0PQNV69PDEOPKOkC0Ktqpcx274VBIHgABam+PPJcnoAX0KvjiMekPvLpWx
7t6Xu5rVfwW9SZoGWbXwD+32f4o8ZOvmpOG3+/X3tJYY2WesN99bCTKn1DnjMvdg
FotbFEmzWEwHWTA1xmSc/JMb3TXPR5AaHznFjgTcG66YGnDHkMC/Q7ix9aGrDQ1l
ROgU5JsOaU7v3X4BJo20cPEhjkdmCSZ9pAzY7NECAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBQg+cUcPVedBcpGq9wfZVNpuvyjyzAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L0lQbkZIRDFYblFYS1JxdmNIMlZUYWJyOG84cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwIwQCAAIwHQMHACoGoAUAHzASAwcEKgagBQqQAwcE
KgagBQrAMA0GCSqGSIb3DQEBCwUAA4IBAQCEHzhxJUPDKEgRPvlldpjSYfIIoDvn
VugXxEkFqteqobhE06SgIzjo5b66vaPkJPoOCRV3sWdfazz336+dj46yXJixEqQc
UnV3OjhyT8R8xkfgZ/iKsnki/o/yInQC1lQ8cwF2vlszESH8WWaYHcNmlp0DCVMi
pnmDZix0R8DqqNLVFUBaRA9BJu+N7vOwiGEXKFiiyMIP19kjDwuJ7j7N3wwhwG/a
Cp5kHG6tH2Vd96JNQH06dYh1RsR0WGMNhZJWArZ/M2WHih7ubEL2Ia0CoUltbO8X
k7oWGKLuUZRZZ6Iygq3PwLQDHZ5ftngBucivwCKXFSZrEACsQze/21HW
-----END CERTIFICATE-----