Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-iMROZ0U-Am_Y1Funys0Kb5RofU.roa
File:                     1-iMROZ0U-Am_Y1Funys0Kb5RofU.roa (raw, json)
Hash identifier:          K5UM20bPF3s1ZxN9nZn3svqh9giaKiVyHM4tqEvnQGA=
Subject key identifier:   FA:23:11:39:9D:14:F8:09:BF:63:51:6E:9F:2B:34:29:BE:51:A1:F5
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181D3AEFB61DBA32E8FF2200BDFD237713F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-iMROZ0U-Am_Y1Funys0Kb5RofU.roa
Signing time:             Wed 06 Jul 2022 13:24:29 +0000
ROA not before:           Wed 06 Jul 2022 13:24:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7118
IP address blocks:        2a06:a005:d40::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d3:ae:fb:61:db:a3:2e:8f:f2:20:0b:df:d2:37:71:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  6 13:24:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa2311399d14f809bf63516e9f2b3429be51a1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:dd:52:82:b4:4e:ce:81:78:40:94:fa:d1:
                    9a:6b:ff:6c:b3:68:68:07:68:f4:fc:25:14:96:7f:
                    54:17:a3:27:b4:a3:aa:f3:e9:ec:d6:8a:ab:de:69:
                    32:3a:38:18:d7:f3:a8:b9:42:8a:fa:42:f1:43:52:
                    8c:d6:36:15:19:06:85:a0:76:69:24:3b:c7:9a:93:
                    8d:50:b9:b2:0a:b3:fa:b3:e4:c0:4c:09:ab:d2:38:
                    84:53:fe:fe:89:03:cb:e4:52:72:da:8e:68:71:c1:
                    80:9f:e4:bf:4a:6d:13:89:62:d8:e4:1d:0d:e4:16:
                    14:e4:7c:b9:3e:b5:d0:05:ac:be:8f:bf:84:50:f2:
                    1b:bd:b8:a0:00:a7:2c:12:df:27:75:72:49:b9:b3:
                    36:40:60:7c:c5:e9:54:57:f2:c2:d6:e9:ab:90:a4:
                    fc:40:dd:02:7f:38:f8:34:a0:70:dd:69:f6:c7:22:
                    8d:7a:96:92:2f:f9:ec:1e:84:8b:e1:a5:36:82:21:
                    b7:c2:c2:05:10:db:c6:52:44:db:3a:3b:68:57:6b:
                    5e:30:94:c1:a0:63:0b:e9:a5:02:01:92:05:b7:87:
                    a7:22:5d:73:b4:8c:a4:c4:2d:7c:1e:d2:1d:39:09:
                    7b:e3:ae:72:ad:88:f9:e1:d9:4b:f7:a8:53:64:49:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:23:11:39:9D:14:F8:09:BF:63:51:6E:9F:2B:34:29:BE:51:A1:F5
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-iMROZ0U-Am_Y1Funys0Kb5RofU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:d40::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:9d:b7:f5:c6:87:91:97:cf:0f:34:76:2d:13:b1:0e:1b:
         50:48:86:db:9b:6c:56:ca:d7:c2:2d:9b:f0:72:68:72:eb:e7:
         73:c0:5c:3d:0c:84:1f:21:d5:6e:73:43:da:22:17:fa:6d:55:
         ae:ef:75:a1:b1:d5:e0:b3:37:3c:9f:61:1a:5d:28:c7:42:2c:
         eb:a9:df:d0:10:be:ae:b0:e2:d8:6f:e6:83:55:39:31:37:8b:
         a6:62:4f:8a:85:f0:3e:f5:78:d6:11:1d:15:e6:15:f0:ff:a2:
         d3:63:e3:80:7d:6e:ec:ba:b7:c3:52:4a:ac:6e:d9:a2:60:a2:
         46:d2:42:3c:3b:e8:4a:e9:9a:36:98:3a:34:62:0d:80:7c:22:
         01:e1:4e:dd:c7:34:36:bc:48:4a:21:45:4a:e5:98:ad:4a:a2:
         2b:8a:ae:cb:03:e7:60:01:65:26:2a:a9:46:40:0d:14:07:3a:
         ad:68:be:a4:98:27:a6:c3:ed:7a:5e:9f:4b:fe:1d:a7:92:9f:
         da:bf:27:da:df:19:88:00:0c:dd:0b:78:49:48:0c:03:ec:b4:
         98:35:52:37:af:07:b8:7c:2a:33:cf:2b:ec:08:9f:d0:ba:31:
         85:50:ae:68:b7:a6:f3:6f:37:61:bc:98:d1:e1:34:ba:dc:c8:
         d8:69:24:68
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYHTrvth26Muj/IgC9/SN3E/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzA2MTMyNDI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTIzMTEzOTlkMTRmODA5YmY2MzUxNmU5ZjJiMzQyOWJlNTFhMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocHdUoK0Ts6BeECU+tGaa/9ss2ho
B2j0/CUUln9UF6MntKOq8+ns1oqr3mkyOjgY1/OouUKK+kLxQ1KM1jYVGQaFoHZp
JDvHmpONULmyCrP6s+TATAmr0jiEU/7+iQPL5FJy2o5occGAn+S/Sm0TiWLY5B0N
5BYU5Hy5PrXQBay+j7+EUPIbvbigAKcsEt8ndXJJubM2QGB8xelUV/LC1umrkKT8
QN0Cfzj4NKBw3Wn2xyKNepaSL/nsHoSL4aU2giG3wsIFENvGUkTbOjtoV2teMJTB
oGML6aUCAZIFt4enIl1ztIykxC18HtIdOQl7465yrYj54dlL96hTZEkRKwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPojETmdFPgJv2NRbp8rNCm+UaH1MB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvMS1pTVJPWjBVLUFtX1kxRnVueXMwS2I1Um9mVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUz
Ny8xL1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoGoAUN
QDANBgkqhkiG9w0BAQsFAAOCAQEAe5mdt/XGh5GXzw80di0TsQ4bUEiG25tsVsrX
wi2b8HJocuvnc8BcPQyEHyHVbnND2iIX+m1Vru91obHV4LM3PJ9hGl0ox0Is66nf
0BC+rrDi2G/mg1U5MTeLpmJPioXwPvV41hEdFeYV8P+i02PjgH1u7Lq3w1JKrG7Z
omCiRtJCPDvoSumaNpg6NGINgHwiAeFO3cc0NrxISiFFSuWYrUqiK4quywPnYAFl
JiqpRkANFAc6rWi+pJgnpsPtel6fS/4dp5Kf2r8n2t8ZiAAM3Qt4SUgMA+y0mDVS
N68HuHwqM88r7Aif0LoxhVCuaLem8283YbyY0eE0utzI2GkkaA==
-----END CERTIFICATE-----