Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tdv2YCyWiHpfm5nirG6hUMp9iPw.roa
File:                     tdv2YCyWiHpfm5nirG6hUMp9iPw.roa (raw, json)
Hash identifier:          EC4ms/YVJV8LRA1egwNhAVhYfZaN58/FCTUYG7DgamI=
Subject key identifier:   B5:DB:F6:60:2C:96:88:7A:5F:9B:99:E2:AC:6E:A1:50:CA:7D:88:FC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       180E8D83
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tdv2YCyWiHpfm5nirG6hUMp9iPw.roa
Signing time:             Tue 12 Apr 2022 19:45:49 +0000
ROA not before:           Tue 12 Apr 2022 19:45:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44570
IP address blocks:        2a06:a004::/32 maxlen: 48
                          2a06:1280:1000::/36 maxlen: 48
                          2a06:a005::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403606915 (0x180e8d83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 12 19:45:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5dbf6602c96887a5f9b99e2ac6ea150ca7d88fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:c7:63:6c:67:bc:ff:0a:31:b1:06:2a:ae:
                    2b:95:32:ee:ae:df:b8:a4:0c:bb:c2:a3:de:53:91:
                    6c:58:8b:60:1d:ea:24:9b:0d:27:60:e5:f7:c6:df:
                    b1:13:6f:c2:6c:58:c3:c8:90:a5:63:45:5b:5b:70:
                    d8:dd:4c:8e:48:c6:dc:1b:f4:e6:88:fc:3d:0b:73:
                    b0:47:17:0e:17:9b:1f:5a:67:a5:0f:b8:88:75:db:
                    e2:db:50:d5:3f:62:9b:23:f4:d2:68:92:5e:33:6d:
                    6b:88:8d:c7:e6:a1:3b:29:20:53:5d:d8:5b:48:c2:
                    54:c9:64:96:42:d1:b6:90:4f:d2:6e:fc:ac:f7:9c:
                    9b:7b:e5:94:7d:b8:e2:fb:0b:5b:ea:7e:de:0a:72:
                    2e:9c:db:92:4c:06:3f:56:fc:69:9d:62:2d:9a:dc:
                    db:ad:cd:8c:12:ec:72:34:6a:f8:79:b2:cd:a7:14:
                    46:e2:7a:f7:79:53:d7:57:eb:58:3c:b5:e2:94:10:
                    cf:f6:54:b4:9f:64:a6:6e:22:65:56:66:fc:d0:f3:
                    06:67:f2:3c:68:b6:fd:cf:cf:ba:36:b0:dc:28:e7:
                    03:82:b8:bb:69:dc:88:63:b0:b5:ed:8f:8e:f8:5c:
                    13:94:7e:e5:89:46:a5:e9:1b:4c:7a:e7:1c:8e:e6:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DB:F6:60:2C:96:88:7A:5F:9B:99:E2:AC:6E:A1:50:CA:7D:88:FC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tdv2YCyWiHpfm5nirG6hUMp9iPw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1280:1000::/36
                  2a06:a004::/31

    Signature Algorithm: sha256WithRSAEncryption
         0d:c5:ce:c8:9c:2e:ae:12:1b:1e:cd:2e:55:5e:e2:db:10:16:
         61:c0:85:19:3e:fc:74:a5:6b:a1:c1:5f:18:2e:9c:72:fc:64:
         1f:70:2b:1c:cd:2c:7c:f5:c8:f6:9e:bf:48:a9:eb:f1:ec:b5:
         a6:68:6a:72:03:68:00:4c:42:a2:c9:8a:0b:77:e9:63:b4:37:
         05:73:50:78:38:6f:52:c7:55:bc:98:18:63:90:03:b3:5e:b5:
         72:ca:55:88:c3:38:42:73:bc:f0:b2:91:e3:08:b8:2f:38:10:
         8c:dd:48:d4:13:8c:3b:1f:97:a5:8f:a4:95:f7:c3:87:3d:f1:
         72:af:ae:c7:a9:6d:72:23:c0:86:3c:15:d2:5c:28:90:82:0a:
         9f:12:d8:5a:9a:05:d3:7c:c3:34:ea:f9:b5:68:e0:7a:d3:9a:
         89:f7:c8:5f:16:ff:53:52:b0:d7:9a:6c:2d:06:eb:56:64:05:
         0a:54:ba:08:77:bc:40:8a:bc:86:39:95:64:74:06:dd:e1:a9:
         5b:92:b5:6f:5d:96:7b:d0:89:31:23:dd:22:ac:c2:16:7e:06:
         76:b3:73:2e:1e:97:25:8b:8a:0a:03:75:e8:2f:40:c4:56:42:
         44:99:c7:1d:df:8f:a6:3c:ee:bf:37:c4:a1:75:d1:97:10:76:
         37:15:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----