Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WBsRO7XxOUN9vxqb0oUKp70R-Tc.roa
File:                     WBsRO7XxOUN9vxqb0oUKp70R-Tc.roa (raw, json)
Hash identifier:          WXGvMmoZ20M7UKxqTKpnY9jeFi8A3M4At5jQnNhQlQU=
Subject key identifier:   58:1B:11:3B:B5:F1:39:43:7D:BF:1A:9B:D2:85:0A:A7:BD:11:F9:37
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A2388C1
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WBsRO7XxOUN9vxqb0oUKp70R-Tc.roa
Signing time:             Thu 26 May 2022 23:15:15 +0000
ROA not before:           Thu 26 May 2022 23:15:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210905
IP address blocks:        2a06:a005:2d1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438536385 (0x1a2388c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 26 23:15:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=581b113bb5f139437dbf1a9bd2850aa7bd11f937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:d8:1f:98:b0:f8:f5:9b:0e:05:30:29:01:
                    47:fd:31:9a:ba:ee:d8:36:b2:7d:d8:ad:f9:8e:5f:
                    94:45:31:65:92:26:f3:4d:4c:19:1c:1c:22:ac:01:
                    78:43:ee:d5:af:f7:63:2b:6d:8f:22:e3:90:86:df:
                    59:f0:a2:1a:f6:0b:7e:85:d2:a3:06:db:7c:ee:7b:
                    08:74:89:41:f5:a5:42:1d:7e:f8:0c:d7:03:ac:e9:
                    d1:89:ae:64:7e:33:38:9e:f4:68:98:30:41:ce:83:
                    7a:7e:fe:7d:a9:0a:22:34:b9:bf:8a:6c:d0:50:53:
                    76:b4:92:f7:03:3f:f1:d3:4e:8c:bd:6a:a3:51:fd:
                    7d:1f:9f:2c:6d:1a:96:d1:b3:1d:56:df:c2:7e:2c:
                    f3:35:70:76:2d:f8:cf:10:5d:67:e0:29:71:3a:c9:
                    e4:69:1d:34:71:fc:58:58:43:3b:87:c3:73:75:e8:
                    34:96:6d:b9:54:c5:08:c2:73:52:f6:2f:08:35:79:
                    18:aa:48:73:4b:13:7c:67:06:bd:0c:94:e5:9c:30:
                    bb:63:d4:69:a6:3f:5d:8a:56:9e:50:2e:88:d8:71:
                    d1:cf:ea:79:25:ac:b9:a1:40:b5:46:3b:63:67:20:
                    90:61:69:f0:78:c3:fc:cf:7f:90:46:20:77:d0:d7:
                    ac:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1B:11:3B:B5:F1:39:43:7D:BF:1A:9B:D2:85:0A:A7:BD:11:F9:37
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/WBsRO7XxOUN9vxqb0oUKp70R-Tc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2d1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:6c:15:fa:1c:29:21:52:22:6c:2c:6a:7c:7e:75:73:f6:12:
         d9:9e:e7:85:6f:e5:31:a0:ed:41:58:2b:a2:e4:5b:d3:b2:5d:
         39:25:a5:10:51:c4:e8:d0:d5:ba:00:6e:85:99:ef:ca:25:29:
         26:41:6d:f8:58:e0:88:f9:3a:d3:1d:24:0f:e2:ee:17:eb:6d:
         05:2d:72:fc:21:e3:4b:02:b0:7f:27:97:ea:17:cb:94:38:de:
         8f:bb:27:e5:11:24:87:73:87:42:05:05:1c:aa:eb:db:1c:36:
         ef:3f:21:8c:e6:60:11:08:31:e3:8d:1b:e9:70:03:b1:b6:d6:
         e6:2a:ce:f8:2f:91:0b:3e:cb:67:50:94:1f:be:db:4e:18:7c:
         d0:16:0b:12:01:b7:50:9a:88:42:16:8a:a5:38:66:b1:30:5b:
         37:f1:1b:42:c7:63:bf:4c:a4:45:c4:96:20:9a:bd:9e:21:5f:
         fd:27:a7:2a:fd:e7:09:1c:fc:b8:e4:7d:de:dc:36:11:e6:99:
         24:82:9f:97:11:3e:6e:d5:fa:de:8c:6a:06:ae:73:64:7b:5a:
         5e:ab:e6:68:a5:4c:a8:ca:6c:5e:f3:3c:bb:de:48:dc:67:c0:
         00:bb:a0:52:d8:74:a0:db:10:2f:66:ab:74:ef:a7:c1:74:49:
         e1:ee:4a:a7
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEGiOIwTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDUy
NjIzMTUxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTgxYjExM2JiNWYx
Mzk0MzdkYmYxYTliZDI4NTBhYTdiZDExZjkzNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALsv2B+YsPj1mw4FMCkBR/0xmrru2Dayfdit+Y5flEUxZZIm
801MGRwcIqwBeEPu1a/3YyttjyLjkIbfWfCiGvYLfoXSowbbfO57CHSJQfWlQh1+
+AzXA6zp0YmuZH4zOJ70aJgwQc6Den7+fakKIjS5v4ps0FBTdrSS9wM/8dNOjL1q
o1H9fR+fLG0altGzHVbfwn4s8zVwdi34zxBdZ+ApcTrJ5GkdNHH8WFhDO4fDc3Xo
NJZtuVTFCMJzUvYvCDV5GKpIc0sTfGcGvQyU5Zwwu2PUaaY/XYpWnlAuiNhx0c/q
eSWsuaFAtUY7Y2cgkGFp8HjD/M9/kEYgd9DXrIcCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRYGxE7tfE5Q32/GpvShQqnvRH5NzAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L1dCc1JPN1h4T1VOOXZ4cWIwb1VLcDcwUi1UYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGoAUC0TANBgkqhkiG9w0BAQsF
AAOCAQEAf2wV+hwpIVIibCxqfH51c/YS2Z7nhW/lMaDtQVgrouRb07JdOSWlEFHE
6NDVugBuhZnvyiUpJkFt+FjgiPk60x0kD+LuF+ttBS1y/CHjSwKwfyeX6hfLlDje
j7sn5REkh3OHQgUFHKrr2xw27z8hjOZgEQgx440b6XADsbbW5irO+C+RCz7LZ1CU
H77bThh80BYLEgG3UJqIQhaKpThmsTBbN/EbQsdjv0ykRcSWIJq9niFf/SenKv3n
CRz8uOR93tw2EeaZJIKflxE+btX63oxqBq5zZHtaXqvmaKVMqMpsXvM8u95I3GfA
ALugUth0oNsQL2ardO+nwXRJ4e5Kpw==
-----END CERTIFICATE-----