Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WDEO8gJkJybBbhlBox1xGm70z8w.roa
File:                     WDEO8gJkJybBbhlBox1xGm70z8w.roa (raw, json)
Hash identifier:          0O43oOntDT9TJ56/yeMETxu/ZfIurQP8HDW0T2/govk=
Subject key identifier:   58:31:0E:F2:02:64:27:26:C1:6E:19:41:A3:1D:71:1A:6E:F4:CF:CC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       179C018C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WDEO8gJkJybBbhlBox1xGm70z8w.roa
Signing time:             Sat 02 Apr 2022 15:41:23 +0000
ROA not before:           Sat 02 Apr 2022 15:41:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60438
IP address blocks:        2a06:a005:1::/48 maxlen: 48
                          2a06:a005:350::/44 maxlen: 48
                          2a06:a005:18::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396099980 (0x179c018c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr  2 15:41:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58310ef202642726c16e1941a31d711a6ef4cfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:c7:e6:2c:c7:8a:55:d3:e3:be:93:d9:14:
                    7c:8c:c7:15:82:18:46:5b:e2:29:3f:12:9e:78:9e:
                    3e:15:08:32:f4:81:a3:73:36:d7:b7:42:b7:7c:69:
                    79:08:21:b6:1a:fb:1c:43:a8:1c:de:f7:7b:c3:95:
                    b3:8c:aa:84:35:6c:fc:05:fa:10:a5:96:db:99:5d:
                    dd:b6:8e:2b:85:04:ed:88:19:11:32:59:cb:db:51:
                    f2:fd:75:2f:71:7c:75:2c:72:a3:02:2a:b4:a7:9b:
                    0f:40:16:de:02:f1:42:27:b9:d3:53:d7:6e:3c:de:
                    7b:77:77:ac:b9:f8:18:d0:28:f0:e4:b5:12:c3:cb:
                    5a:51:02:fb:62:09:ea:cd:9b:51:ca:46:89:14:eb:
                    bc:0a:ed:b4:17:11:33:44:cc:0d:85:a2:38:ea:f3:
                    e0:39:2a:49:19:c5:52:f7:52:80:60:ae:7a:65:d0:
                    6f:0d:72:9b:d7:78:1f:c0:a6:17:28:36:5f:9c:4b:
                    d3:5e:8c:57:b5:eb:ae:18:fa:65:86:21:6a:cc:ee:
                    51:45:9e:21:b7:6c:17:63:c5:fa:4f:c4:f3:d7:4c:
                    28:1b:a5:f4:64:7b:ad:41:5a:2d:c1:d4:ad:db:0b:
                    8f:ea:1c:38:fa:83:6a:d2:66:75:85:4d:ef:a1:ec:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:31:0E:F2:02:64:27:26:C1:6E:19:41:A3:1D:71:1A:6E:F4:CF:CC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WDEO8gJkJybBbhlBox1xGm70z8w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1::/48
                  2a06:a005:18::/46
                  2a06:a005:350::/44

    Signature Algorithm: sha256WithRSAEncryption
         34:f7:85:c0:f4:09:53:f3:c1:74:c4:a9:a1:b7:69:56:49:82:
         74:ca:50:1d:94:50:a0:50:54:c0:06:0b:81:57:49:9a:ae:c9:
         6d:b3:d5:a6:63:df:db:91:e1:8c:91:4d:15:b5:d7:05:ee:0a:
         cb:21:1c:a9:de:20:99:75:41:71:19:ab:78:d2:83:ed:ff:09:
         5d:b1:ef:f7:2e:83:cf:72:b9:34:c0:2f:06:a9:1e:f0:1c:73:
         be:7d:44:29:b8:bf:86:9a:33:2f:e8:bd:73:41:f4:aa:29:53:
         b9:3a:a5:03:87:72:b4:c6:48:18:b2:52:1b:f8:31:b3:26:01:
         97:34:64:a1:a2:f7:fc:0c:93:3d:82:97:5a:6d:50:98:0f:95:
         95:dd:23:68:fd:78:5c:b1:e4:cd:b1:d4:0e:61:49:2d:56:04:
         ae:bb:cf:92:7c:ad:d3:dd:ab:b0:e9:76:60:3f:cd:08:bb:9a:
         fa:17:45:e7:67:e5:28:e6:3a:45:fc:49:b3:90:c0:07:7b:b6:
         be:36:3d:1b:27:61:c5:6c:7a:5e:bc:bd:10:ac:a2:1b:59:a3:
         e6:f5:f9:42:ef:49:ca:16:d3:a3:e9:d0:ca:7b:7f:d6:0d:01:
         d1:68:bb:6d:47:27:25:27:35:6d:55:f4:36:71:5e:95:79:d5:
         ba:66:f7:59
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEF5wBjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDQw
MjE1NDEyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTgzMTBlZjIwMjY0
MjcyNmMxNmUxOTQxYTMxZDcxMWE2ZWY0Y2ZjYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMGhx+Ysx4pV0+O+k9kUfIzHFYIYRlviKT8SnniePhUIMvSB
o3M217dCt3xpeQghthr7HEOoHN73e8OVs4yqhDVs/AX6EKWW25ld3baOK4UE7YgZ
ETJZy9tR8v11L3F8dSxyowIqtKebD0AW3gLxQie501PXbjzee3d3rLn4GNAo8OS1
EsPLWlEC+2IJ6s2bUcpGiRTrvArttBcRM0TMDYWiOOrz4DkqSRnFUvdSgGCuemXQ
bw1ym9d4H8CmFyg2X5xL016MV7Xrrhj6ZYYhaszuUUWeIbdsF2PF+k/E89dMKBul
9GR7rUFaLcHUrdsLj+ocOPqDatJmdYVN76HsY+ECAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRYMQ7yAmQnJsFuGUGjHXEabvTPzDAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L1dERU84Z0prSnliQmJobEJveDF4R203MHo4dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwIQQCAAIwGwMHACoGoAUAAQMHAioGoAUAGAMHBCoG
oAUDUDANBgkqhkiG9w0BAQsFAAOCAQEANPeFwPQJU/PBdMSpobdpVkmCdMpQHZRQ
oFBUwAYLgVdJmq7JbbPVpmPf25HhjJFNFbXXBe4KyyEcqd4gmXVBcRmreNKD7f8J
XbHv9y6Dz3K5NMAvBqke8Bxzvn1EKbi/hpozL+i9c0H0qilTuTqlA4dytMZIGLJS
G/gxsyYBlzRkoaL3/AyTPYKXWm1QmA+Vld0jaP14XLHkzbHUDmFJLVYErrvPknyt
092rsOl2YD/NCLua+hdF52flKOY6RfxJs5DAB3u2vjY9GydhxWx6Xry9EKyiG1mj
5vX5Qu9JyhbTo+nQynt/1g0B0Wi7bUcnJSc1bVX0NnFelXnVumb3WQ==
-----END CERTIFICATE-----