Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9OKJE-jghF-F8usFRrYFtVw8GXw.roa
File:                     9OKJE-jghF-F8usFRrYFtVw8GXw.roa (raw, json)
Hash identifier:          evNp2YdTikZjbR5Zj86qgow0csiY0D7aMe4iOjbwU2E=
Subject key identifier:   F4:E2:89:13:E8:E0:84:5F:85:F2:EB:05:46:B6:05:B5:5C:3C:19:7C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19AAB82F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9OKJE-jghF-F8usFRrYFtVw8GXw.roa
Signing time:             Tue 10 May 2022 05:09:01 +0000
ROA not before:           Tue 10 May 2022 05:09:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203857
IP address blocks:        2a06:a005:5ec::/48 maxlen: 48
                          2a06:a005:851::/48 maxlen: 48
                          2a06:a005:4d2::/48 maxlen: 48
                          2a06:a005:4d7::/48 maxlen: 48
                          2a06:a005:850::/48 maxlen: 48
                          2a06:a005:4d5::/48 maxlen: 48
                          2a06:a005:856::/48 maxlen: 48
                          2a06:a005:4d6::/48 maxlen: 48
                          2a06:a005:5eb::/48 maxlen: 48
                          2a06:a005:4d4::/48 maxlen: 48
                          2a06:a005:5e9::/48 maxlen: 48
                          2a06:a005:5ea::/48 maxlen: 48
                          2a06:a005:5ef::/48 maxlen: 48
                          2a06:a005:5e8::/48 maxlen: 48
                          2a06:a005:5ed::/48 maxlen: 48
                          2a06:a005:5ee::/48 maxlen: 48
                          2a06:a005:5e3::/48 maxlen: 48
                          2a06:a005:4d3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430618671 (0x19aab82f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 10 05:09:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f4e28913e8e0845f85f2eb0546b605b55c3c197c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:f6:18:ee:8d:07:94:d8:2d:aa:8e:5b:c3:
                    cf:88:fc:0f:c4:75:27:16:0d:37:d5:68:96:6e:6f:
                    34:34:b6:e7:1f:4a:0d:c5:eb:38:d6:5e:24:38:37:
                    27:4b:ba:1a:9d:8c:e1:f0:91:87:cc:2d:cd:4f:66:
                    3b:96:52:52:f1:74:3c:f9:84:24:6a:dc:b3:43:ce:
                    29:43:7e:f0:31:f6:c5:16:47:4d:58:2e:a8:60:ca:
                    f4:4b:ff:05:8d:49:d7:91:ce:4a:79:b7:3f:33:1c:
                    d8:be:5c:12:83:4c:b3:76:c2:05:d3:ba:21:f7:af:
                    1a:94:e6:c3:ae:ec:e6:94:62:91:37:93:cf:b2:48:
                    98:a4:78:b5:33:2a:47:61:59:ee:2d:ea:13:19:3b:
                    cc:93:1f:50:a6:05:96:23:41:76:3b:62:c9:9a:ba:
                    3d:86:90:29:b7:e3:7e:37:ed:54:1d:2b:19:9f:85:
                    7e:a0:53:47:28:a1:3e:2a:bd:3a:65:1c:bd:00:50:
                    a8:3d:7c:31:c0:f5:14:03:a1:48:58:db:8c:8e:bc:
                    fd:f5:3d:f8:d2:69:46:8b:8e:8e:dd:4c:61:48:ec:
                    ad:db:46:51:28:d3:ef:6b:01:69:8b:fe:5f:eb:a9:
                    65:44:28:e4:8a:34:c4:62:b9:31:13:13:be:ab:e7:
                    7a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E2:89:13:E8:E0:84:5F:85:F2:EB:05:46:B6:05:B5:5C:3C:19:7C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9OKJE-jghF-F8usFRrYFtVw8GXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:5e3::/48
                  2a06:a005:5e8::/45
                  2a06:a005:850::/47
                  2a06:a005:856::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:21:c1:9a:b1:e0:37:5a:69:b5:bd:8b:8e:07:e0:5f:ff:0d:
         65:a5:cc:62:2f:65:10:44:21:e8:9a:b1:37:17:ef:a2:0a:06:
         bf:9e:89:9a:43:c1:56:3a:45:ae:ef:03:bc:93:51:79:d8:ef:
         96:8a:a5:53:4e:0a:9b:b2:3c:72:5c:72:35:b7:01:3d:9a:35:
         52:ac:6b:25:c2:0b:b3:86:df:e2:db:3a:b1:31:90:9f:36:44:
         c0:26:79:27:a8:20:b5:c2:a2:a7:50:07:0d:d5:8d:5a:d9:1f:
         6b:8d:b0:7d:44:a9:21:35:91:f7:00:28:24:2b:3b:13:42:e6:
         7b:16:b4:fa:2c:95:11:a2:c9:c4:9d:6c:27:07:1e:e5:f8:53:
         68:39:25:46:6a:0e:6f:0a:8e:e1:d8:4f:ec:a7:3f:ce:89:b5:
         d2:54:1d:bf:ba:f0:9e:b5:2c:9c:67:d8:8c:cd:c0:5d:36:66:
         f9:86:c1:f8:38:f7:b4:23:56:12:72:1e:b8:4d:8a:23:b5:92:
         33:a3:58:71:19:c5:1b:c1:c5:f9:56:22:17:84:26:68:bb:44:
         c0:dc:b1:9c:f3:a9:76:10:a0:69:77:c1:ce:79:31:ac:dd:cd:
         23:7d:b4:b2:2c:86:a5:67:5e:45:75:4b:6e:65:32:d0:d0:06:
         a4:94:17:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----