Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/US-Tw7JCdxsl99BpWqtXyt5niM8.roa
File:                     US-Tw7JCdxsl99BpWqtXyt5niM8.roa (raw, json)
Hash identifier:          NUWQGBTWzgTgjVe+Pr4jUlEjqgBUmtOOBTqfHHd99Tg=
Subject key identifier:   51:2F:93:C3:B2:42:77:1B:25:F7:D0:69:5A:AB:57:CA:DE:67:88:CF
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       18620A6F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/US-Tw7JCdxsl99BpWqtXyt5niM8.roa
Signing time:             Tue 19 Apr 2022 06:21:57 +0000
ROA not before:           Tue 19 Apr 2022 06:21:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     139328
IP address blocks:        2a06:a005:520::/44 maxlen: 48
                          2a06:a005:540::/44 maxlen: 48
                          2a06:a005:530::/44 maxlen: 48
                          2a06:a005:550::/44 maxlen: 48
                          2a06:a005:4c0::/44 maxlen: 48
                          2a06:a005:510::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409078383 (0x18620a6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 19 06:21:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=512f93c3b242771b25f7d0695aab57cade6788cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:32:9f:d6:54:66:da:05:0a:09:1c:70:9f:
                    73:b9:88:fa:53:26:42:23:dc:21:85:64:60:a4:ea:
                    26:e3:e5:ee:c2:20:03:ce:48:bb:14:3b:ec:bb:7a:
                    b8:ca:75:f9:dc:46:68:84:32:e2:e3:af:33:d4:f6:
                    b8:b3:32:4d:81:ac:6f:ba:e0:d6:e2:0e:ca:c5:16:
                    95:6b:1f:ec:72:0f:34:f6:75:3b:5c:f4:d8:c3:ed:
                    25:b1:15:3a:e5:38:cf:7d:ed:be:d3:32:5c:86:1a:
                    34:52:ca:73:24:a4:53:35:0e:89:9a:d5:db:71:bb:
                    a7:49:72:30:6c:aa:ac:0d:08:49:f1:37:19:79:1f:
                    e5:d4:af:0f:79:2d:c5:b2:a6:fe:00:22:fa:e6:4e:
                    34:2e:f7:dd:6d:a0:9b:5c:a9:9f:6b:8e:7e:fd:a1:
                    fb:24:01:6d:d5:20:e6:24:71:5f:c5:da:09:dc:06:
                    23:cd:36:45:5d:97:9a:58:9f:d1:44:2e:9b:f4:89:
                    00:11:da:ef:61:63:07:de:02:1d:ab:b1:0c:f5:13:
                    76:ce:cb:38:c5:ee:da:a4:7b:d9:37:c7:1b:14:ed:
                    3f:f6:53:b1:d0:11:cf:36:a8:61:1f:dc:7a:80:35:
                    05:a3:9e:3f:41:94:7f:9b:f1:d7:18:f6:cc:5b:c2:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2F:93:C3:B2:42:77:1B:25:F7:D0:69:5A:AB:57:CA:DE:67:88:CF
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/US-Tw7JCdxsl99BpWqtXyt5niM8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4c0::/44
                  2a06:a005:510::-2a06:a005:55f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         48:4f:49:4d:4b:56:38:c6:a3:bc:b6:c8:b8:1a:39:13:9b:87:
         1b:57:74:c4:1f:36:b1:bb:bb:4b:01:e0:fb:df:bb:49:c9:c7:
         be:90:8a:5b:1b:e1:87:c0:1a:2d:0a:bd:87:09:91:47:c5:be:
         d0:fa:2f:f0:bf:cb:75:b7:34:c6:0d:5b:99:98:5d:ad:b1:f1:
         13:ff:dd:11:55:80:e0:be:f5:5b:12:09:e5:ac:06:ab:2e:c8:
         c0:a6:f0:32:8f:9f:83:06:c2:b6:05:58:cd:88:3d:4f:a8:9e:
         37:9f:9b:c9:93:cd:0f:b0:66:3e:bf:9b:ba:9e:27:67:05:16:
         1e:de:1b:c9:e0:c0:2c:b4:82:09:04:51:9b:44:9d:c9:58:c5:
         b3:03:4f:aa:c3:a2:d0:e3:29:ee:a3:28:25:2f:a9:f1:a9:1f:
         7f:e1:55:ce:e2:47:0c:2f:92:63:f8:33:b6:54:a9:d3:39:be:
         dd:dc:a2:90:cd:0c:01:b1:07:36:33:6d:b5:77:18:0d:bb:85:
         c5:04:22:98:83:47:92:a6:bc:1c:d8:e3:b9:54:22:16:00:00:
         94:dd:a6:9e:7b:72:e0:5f:41:56:70:20:48:10:3a:79:e6:f6:
         4c:9d:68:b2:23:03:f0:20:16:3c:db:83:bd:db:18:e8:81:c0:
         41:ad:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----