Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sPVOuASsQ8zDvqMydRDzVOqdHoE.roa
File:                     sPVOuASsQ8zDvqMydRDzVOqdHoE.roa (raw, json)
Hash identifier:          1ttmfwh+r28KYVqO6Vs9UXB1mZ4dFcKpZ74HuWgLJlE=
Subject key identifier:   B0:F5:4E:B8:04:AC:43:CC:C3:BE:A3:32:75:10:F3:54:EA:9D:1E:81
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1855D36F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sPVOuASsQ8zDvqMydRDzVOqdHoE.roa
Signing time:             Mon 18 Apr 2022 23:56:09 +0000
ROA not before:           Mon 18 Apr 2022 23:56:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200681
IP address blocks:        2a06:a005:18::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408277871 (0x1855d36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 18 23:56:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b0f54eb804ac43ccc3bea3327510f354ea9d1e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:66:6c:32:7b:66:65:b5:7b:10:54:4d:72:
                    34:ce:5b:af:0d:38:a5:2b:20:e0:2c:d3:99:0c:fc:
                    9d:16:1d:1d:95:dc:4a:6f:6d:2c:82:c8:99:ce:08:
                    21:a0:1d:74:11:c6:d3:df:83:35:8a:f5:90:ea:c8:
                    1c:d9:b2:ce:2c:32:7d:c6:c0:64:9e:83:be:8f:80:
                    4c:bc:36:53:ef:87:9f:a0:e2:81:50:c0:44:61:2e:
                    92:34:84:ea:e8:db:ea:24:11:cc:bf:61:2b:d3:a9:
                    58:e1:1f:4c:67:5f:d4:e8:9a:a2:be:83:5c:09:af:
                    48:ec:8c:a6:5e:22:67:6c:e1:ce:23:03:df:1a:97:
                    8d:33:3b:0b:99:74:16:2c:ff:df:6a:3f:50:6f:7f:
                    b4:39:1a:fc:af:8a:f9:aa:f3:20:6e:e8:7e:c9:ed:
                    e7:14:19:42:33:12:11:b1:1f:3d:ee:de:7b:ee:96:
                    11:f1:7d:1d:0c:1c:6c:b2:5a:52:f0:85:f4:ab:9b:
                    12:71:8e:67:ae:bd:7b:40:b9:e8:91:0f:48:d4:d6:
                    d5:cc:03:0d:ea:2c:c6:e1:d4:ca:36:da:7b:07:19:
                    de:9e:41:28:6e:d8:82:e4:b0:89:7a:e1:b5:52:28:
                    eb:d9:23:72:c6:ff:e5:1a:31:7f:0c:9e:af:72:0f:
                    1b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F5:4E:B8:04:AC:43:CC:C3:BE:A3:32:75:10:F3:54:EA:9D:1E:81
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/sPVOuASsQ8zDvqMydRDzVOqdHoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18::/46

    Signature Algorithm: sha256WithRSAEncryption
         50:6d:53:c4:e0:e6:c4:fa:d0:6a:88:cc:3d:77:93:80:8d:fe:
         95:e5:c9:2f:8d:2b:38:8c:52:79:47:f4:95:0c:c9:ad:4d:06:
         f9:80:94:8f:f0:2c:06:aa:af:ed:f0:5b:6d:4e:36:ab:94:b5:
         96:08:df:3a:7c:32:38:93:ca:6d:73:f2:67:fb:0f:53:36:e9:
         60:63:59:ed:34:a6:49:59:32:72:ab:f6:d4:a2:a7:79:25:dc:
         b8:c8:6c:d0:48:d6:eb:0b:36:dd:fe:c0:a2:9f:4c:f0:dc:a5:
         85:63:eb:59:3d:4a:20:b9:a4:c1:4a:01:ac:4f:22:0e:38:13:
         b2:df:40:7c:cc:cf:83:e8:a7:5d:35:a9:78:a4:21:26:78:02:
         40:be:76:92:1c:74:50:ab:cc:71:d3:da:b0:d6:fd:91:f2:58:
         7c:45:10:fb:95:96:3a:82:9e:1b:79:2f:74:4f:69:67:c2:d4:
         ea:50:3b:e3:d2:2b:2c:5a:ba:9a:3b:c7:31:3a:f9:0b:00:30:
         04:be:fc:76:4d:81:b3:b2:e8:42:41:7e:fe:8c:d9:cf:40:15:
         be:6d:4b:63:d0:1f:df:4e:44:49:b6:4e:7d:31:71:b3:36:04:
         97:74:91:36:12:ba:78:28:0d:23:28:dc:ba:b5:73:48:c4:1e:
         56:c8:df:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----