Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fifDMw13sw1aXdYf0JmoImcNz6c.roa
File:                     fifDMw13sw1aXdYf0JmoImcNz6c.roa (raw, json)
Hash identifier:          pUSOmJhSjF5+m6V7gXbSgoY1CZ9owGHPTk/qypfSOs8=
Subject key identifier:   7E:27:C3:33:0D:77:B3:0D:5A:5D:D6:1F:D0:99:A8:22:67:0D:CF:A7
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018433FC8D3D454F5ECE1C59B6C3E1E6BF75
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fifDMw13sw1aXdYf0JmoImcNz6c.roa
Signing time:             Tue 01 Nov 2022 16:18:19 +0000
ROA not before:           Tue 01 Nov 2022 16:18:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212294
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:2220::/44 maxlen: 48
                          2a06:a005:1c40::/44 maxlen: 48
                          2a06:a005:1620::/44 maxlen: 48
                          2a06:a005:1f60::/44 maxlen: 48
                          2a06:a005:1800::/44 maxlen: 48
                          2a06:a005:19e0::/44 maxlen: 48
                          2a06:a005:1f80::/44 maxlen: 48
                          2a06:a005:2200::/44 maxlen: 48
                          2a06:a005:1f40::/44 maxlen: 48
                          2a06:a005:1630::/44 maxlen: 48
                          2a06:a005:1f70::/44 maxlen: 48
                          2a06:a005:1c30::/44 maxlen: 48
                          2a06:a005:18d0::/44 maxlen: 48
                          2a06:a005:2210::/44 maxlen: 48
                          2a06:a005:1610::/44 maxlen: 48
                          2a06:a005:1f50::/44 maxlen: 48
                          2a05:dfc7:8100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:33:fc:8d:3d:45:4f:5e:ce:1c:59:b6:c3:e1:e6:bf:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov  1 16:18:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e27c3330d77b30d5a5dd61fd099a822670dcfa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:27:52:99:73:ca:cd:e0:0f:0d:51:e5:73:
                    cd:99:55:53:d6:e9:cb:59:4d:29:3f:d6:1b:71:b9:
                    0a:a7:dd:24:b0:d4:c6:66:f6:80:93:86:e9:2b:f7:
                    a0:97:b0:1e:51:c9:f4:e0:36:f5:b5:75:02:8a:f3:
                    d6:cf:20:a4:9d:96:5a:5a:5b:fb:8e:91:b2:ff:1f:
                    55:d6:ae:d8:31:08:af:db:d1:c9:ad:de:a3:ee:c2:
                    f4:b6:1b:39:ea:58:e6:ac:1b:ce:c5:78:3a:ea:e0:
                    a4:dc:b7:6b:30:60:94:fa:5f:89:c5:40:b2:7f:81:
                    42:31:cb:bf:3b:c9:49:7c:bf:83:85:8c:68:dc:59:
                    ad:f3:01:52:81:0f:fb:16:4b:79:0b:1f:ce:15:60:
                    c6:17:24:7b:40:2c:12:d3:58:d9:ce:cc:58:5d:54:
                    aa:b9:82:1e:47:10:8a:ce:65:d4:65:f9:62:06:9a:
                    6f:59:c9:eb:d6:0a:05:c8:e5:6a:11:10:14:e0:d9:
                    d9:52:a9:70:59:21:1b:1b:47:9e:63:06:68:a9:18:
                    d8:b4:fa:5e:54:22:d9:7c:45:ca:ed:3e:d0:65:ae:
                    1b:29:46:71:74:a4:b9:70:06:95:f2:9a:26:79:be:
                    12:ba:16:7a:28:e1:e8:71:cb:a9:0a:da:7c:df:3c:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:27:C3:33:0D:77:B3:0D:5A:5D:D6:1F:D0:99:A8:22:67:0D:CF:A7
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/fifDMw13sw1aXdYf0JmoImcNz6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8100::/40
                  2a06:a005:1610::-2a06:a005:163f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1800::/44
                  2a06:a005:18d0::/44
                  2a06:a005:19e0::/44
                  2a06:a005:1c30::-2a06:a005:1c4f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1f40::-2a06:a005:1f8f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:2200::-2a06:a005:222f:ffff:ffff:ffff:ffff:ffff
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:6c:fb:30:4f:dd:40:4f:db:54:6a:aa:8d:2f:f2:7c:a6:
         d3:b5:50:15:e5:17:48:e5:5f:81:5d:48:f7:71:b7:b0:15:5f:
         8d:c1:2a:39:f0:14:82:94:44:4f:db:db:2e:ae:a3:d3:a9:e2:
         42:b4:74:42:49:b4:7c:3a:a9:a1:e8:7a:b2:98:ee:49:d1:6c:
         aa:7e:62:ae:74:eb:99:f1:ab:35:96:78:7d:da:bd:66:2e:98:
         ff:18:d8:5b:e5:cb:e0:47:9e:8f:00:4d:a6:44:93:b0:0f:d0:
         61:08:ad:e6:4e:1e:a5:c6:43:43:1c:d5:03:98:ae:5b:12:ef:
         c6:f6:9a:83:74:c2:56:f8:f2:4a:f2:3c:4b:6f:50:0c:8b:1b:
         9d:4d:0e:46:c4:64:21:94:72:f8:ce:fa:be:ff:d7:e2:db:57:
         e4:e9:30:82:3d:01:ed:36:38:bf:87:3b:4d:da:75:c5:27:da:
         aa:17:91:82:19:f3:5e:34:4c:cb:e1:f6:0b:e8:37:bd:49:c0:
         4a:19:4c:66:ed:c3:64:ed:a3:76:fe:d1:68:cc:9c:61:cc:92:
         34:e3:32:6d:85:8a:6f:7c:1c:e2:e7:75:fb:c9:eb:4b:02:2a:
         25:b1:b2:51:1c:ae:5e:4a:fa:09:6d:ff:27:40:bf:50:d0:3d:
         03:4f:3d:00
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgISAYQz/I09RU9ezhxZtsPh5r91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIxMTAxMTYxODE5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTI3YzMzMzBkNzdiMzBkNWE1ZGQ2MWZkMDk5YTgyMjY3MGRjZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr54nUplzys3gDw1R5XPNmVVT1unL
WU0pP9YbcbkKp90ksNTGZvaAk4bpK/egl7AeUcn04Db1tXUCivPWzyCknZZaWlv7
jpGy/x9V1q7YMQiv29HJrd6j7sL0ths56ljmrBvOxXg66uCk3LdrMGCU+l+JxUCy
f4FCMcu/O8lJfL+DhYxo3Fmt8wFSgQ/7Fkt5Cx/OFWDGFyR7QCwS01jZzsxYXVSq
uYIeRxCKzmXUZfliBppvWcnr1goFyOVqERAU4NnZUqlwWSEbG0eeYwZoqRjYtPpe
VCLZfEXK7T7QZa4bKUZxdKS5cAaV8pomeb4SuhZ6KOHoccupCtp83zztLwIDAQAB
o4ICgjCCAn4wHQYDVR0OBBYEFH4nwzMNd7MNWl3WH9CZqCJnDc+nMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvZmlmRE13MTNzdzFhWGRZZjBKbW9JbWNOejZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGXBggrBgEFBQcBBwEB/wSBhzCBhDCBgQQCAAIwewMGACoF
38eBMBIDBwQqBqAFFhADBwYqBqAFFgADBwQqBqAFGAADBwQqBqAFGNADBwQqBqAF
GeAwEgMHBCoGoAUcMAMHBCoGoAUcQDASAwcGKgagBR9AAwcEKgagBR+AMBEDBgEq
BqAFIgMHBCoGoAUiIAMHACoHVMKwCzANBgkqhkiG9w0BAQsFAAOCAQEAoYds+zBP
3UBP21Rqqo0v8nym07VQFeUXSOVfgV1I93G3sBVfjcEqOfAUgpRET9vbLq6j06ni
QrR0Qkm0fDqpoeh6spjuSdFsqn5irnTrmfGrNZZ4fdq9Zi6Y/xjYW+XL4EeejwBN
pkSTsA/QYQit5k4epcZDQxzVA5iuWxLvxvaag3TCVvjySvI8S29QDIsbnU0ORsRk
IZRy+M76vv/X4ttX5Okwgj0B7TY4v4c7Tdp1xSfaqheRghnzXjRMy+H2C+g3vUnA
ShlMZu3DZO2jdv7RaMycYcySNOMybYWKb3wc4ud1+8nrSwIqJbGyURyuXkr6CW3/
J0C/UNA9A089AA==
-----END CERTIFICATE-----