Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SXp_qWITFA_EmhDDYXhoNm-niV8.roa
File:                     SXp_qWITFA_EmhDDYXhoNm-niV8.roa (raw, json)
Hash identifier:          5z5/ZfmnnzjGNd7hv3HZ54cUpibkMYtWtznALWI1ajs=
Subject key identifier:   49:7A:7F:A9:62:13:14:0F:C4:9A:10:C3:61:78:68:36:6F:A7:89:5F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19A2202B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SXp_qWITFA_EmhDDYXhoNm-niV8.roa
Signing time:             Mon 09 May 2022 06:00:30 +0000
ROA not before:           Mon 09 May 2022 06:00:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     139328
IP address blocks:        2a06:a005:520::/44 maxlen: 48
                          2a06:a005:540::/44 maxlen: 48
                          2a06:a005:530::/44 maxlen: 48
                          2a06:a005:550::/44 maxlen: 48
                          2a06:a005:4c0::/44 maxlen: 48
                          2a06:a005:510::/44 maxlen: 48
                          2a06:a005:660::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430055467 (0x19a2202b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  9 06:00:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=497a7fa96213140fc49a10c3617868366fa7895f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c5:ec:32:0a:0f:dc:b4:d2:1e:8d:de:cd:38:
                    b2:47:a0:89:dc:f4:c1:85:b2:3c:6e:29:de:8a:2f:
                    b2:8b:b0:a0:4f:9c:7c:4b:86:12:47:9b:6b:cb:36:
                    58:39:5a:d1:74:97:ac:97:77:ff:0d:31:95:5d:13:
                    70:0f:75:18:80:6d:5c:86:46:72:b7:eb:c4:45:7d:
                    0f:b5:e1:08:e8:5d:b5:d6:6a:b3:11:46:03:2e:1d:
                    22:b5:af:da:c4:40:a7:f3:f2:cb:6a:9b:f6:ef:6a:
                    0f:e4:99:5e:b3:38:cd:d1:32:9e:75:24:00:58:12:
                    d1:b3:d2:a3:63:20:3f:a1:b7:bd:36:10:e5:6a:56:
                    5b:ad:00:ae:3f:5e:a7:8a:94:83:5f:9f:41:0b:e9:
                    c8:d8:d6:a1:8c:c3:6a:59:b5:65:0c:20:52:2b:e6:
                    7a:2b:c8:53:0f:d2:6d:02:4f:00:a3:a9:37:db:0f:
                    15:72:ff:16:fc:1d:37:58:b0:24:3a:d9:56:4c:7e:
                    ca:4a:d4:26:f1:0f:db:a2:0c:16:b2:a8:fa:b7:0c:
                    5d:b7:9f:f8:fe:1d:a3:f5:0a:46:3e:b5:04:82:67:
                    64:9d:1b:32:2f:af:47:b3:d6:92:a7:3f:12:e4:34:
                    f2:78:06:49:3d:fa:2c:2e:38:87:da:98:ae:b1:d7:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7A:7F:A9:62:13:14:0F:C4:9A:10:C3:61:78:68:36:6F:A7:89:5F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/SXp_qWITFA_EmhDDYXhoNm-niV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4c0::/44
                  2a06:a005:510::-2a06:a005:55f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:660::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:14:77:bd:3f:49:09:88:5f:cd:1a:cd:26:1c:6f:ba:15:7d:
         f2:bf:94:8e:82:e1:f1:f1:c3:9d:92:cb:54:ec:98:66:20:be:
         f1:09:b6:0f:c5:22:09:61:3c:54:ad:14:3e:cb:d2:8b:d2:38:
         4e:aa:56:4e:b5:e9:29:a6:80:33:a9:ed:ee:92:57:4a:7f:15:
         5e:60:d5:e0:d8:b3:e2:29:28:7d:16:56:37:05:f3:99:57:5f:
         f5:4d:14:ee:b5:13:c2:a9:89:a5:da:92:d7:59:0a:72:8b:35:
         a1:ff:62:a0:be:87:21:a3:0e:54:bc:ce:3a:28:a6:51:0c:80:
         52:02:85:d0:b9:ef:39:b2:44:26:73:17:52:ac:79:cb:49:df:
         d7:21:93:a5:92:6e:34:96:41:7d:a4:10:c6:0b:1d:17:59:f4:
         3b:e8:6d:0c:06:ca:01:c4:bc:32:77:ad:28:da:90:6e:90:3e:
         74:18:46:12:50:e6:aa:d1:f3:fd:cf:d3:9b:67:e9:4f:8d:5a:
         94:20:9b:ae:8a:cc:73:3a:15:ee:93:0e:83:f3:c0:da:e3:c2:
         a8:0e:d5:0e:b1:07:89:56:ff:60:1c:c5:8c:a5:b4:43:71:50:
         32:d7:b5:5a:da:4f:13:08:49:f1:44:25:b7:0f:04:59:7c:22:
         bf:d9:3d:72
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIEGaIgKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUw
OTA2MDAzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDk3YTdmYTk2MjEz
MTQwZmM0OWExMGMzNjE3ODY4MzY2ZmE3ODk1ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJHF7DIKD9y00h6N3s04skegidz0wYWyPG4p3oovsouwoE+c
fEuGEkeba8s2WDla0XSXrJd3/w0xlV0TcA91GIBtXIZGcrfrxEV9D7XhCOhdtdZq
sxFGAy4dIrWv2sRAp/Pyy2qb9u9qD+SZXrM4zdEynnUkAFgS0bPSo2MgP6G3vTYQ
5WpWW60Arj9ep4qUg1+fQQvpyNjWoYzDalm1ZQwgUivmeivIUw/SbQJPAKOpN9sP
FXL/FvwdN1iwJDrZVkx+ykrUJvEP26IMFrKo+rcMXbef+P4do/UKRj61BIJnZJ0b
Mi+vR7PWkqc/EuQ08ngGST36LC44h9qYrrHX9M8CAwEAAaOCAikwggIlMB0GA1Ud
DgQWBBRJen+pYhMUD8SaEMNheGg2b6eJXzAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L1NYcF9xV0lURkFfRW1oRERZWGhvTm0tbmlWOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/
BggrBgEFBQcBBwEB/wQwMC4wLAQCAAIwJgMHBCoGoAUEwDASAwcEKgagBQUQAwcF
KgagBQVAAwcEKgagBQZgMA0GCSqGSIb3DQEBCwUAA4IBAQBgFHe9P0kJiF/NGs0m
HG+6FX3yv5SOguHx8cOdkstU7JhmIL7xCbYPxSIJYTxUrRQ+y9KL0jhOqlZOtekp
poAzqe3ukldKfxVeYNXg2LPiKSh9FlY3BfOZV1/1TRTutRPCqYml2pLXWQpyizWh
/2Kgvochow5UvM46KKZRDIBSAoXQue85skQmcxdSrHnLSd/XIZOlkm40lkF9pBDG
Cx0XWfQ76G0MBsoBxLwyd60o2pBukD50GEYSUOaq0fP9z9ObZ+lPjVqUIJuuisxz
OhXukw6D88Da48KoDtUOsQeJVv9gHMWMpbRDcVAy17Va2k8TCEnxRCW3DwRZfCK/
2T1y
-----END CERTIFICATE-----