Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/17d918-6831-4d1c-aa01-f3e02a82a9de/1/IhlADnXoATv47OgZ9ZY8PXVgTH0.roa
File:                     IhlADnXoATv47OgZ9ZY8PXVgTH0.roa (raw, json)
Hash identifier:          36HobKrUhXC4xTcvnqlASg6UVJyZvLn720q9S8tlmMs=
Subject key identifier:   22:19:40:0E:75:E8:01:3B:F8:EC:E8:19:F5:96:3C:3D:75:60:4C:7D
Certificate issuer:       /CN=b1376dc434ab3a479dec0913f52b2f12579a1ac4
Certificate serial:       010F28F5
Authority key identifier: B1:37:6D:C4:34:AB:3A:47:9D:EC:09:13:F5:2B:2F:12:57:9A:1A:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTdtxDSrOked7AkT9SsvEleaGsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/17d918-6831-4d1c-aa01-f3e02a82a9de/1/IhlADnXoATv47OgZ9ZY8PXVgTH0.roa
Signing time:             Sat 01 Jan 2022 06:56:29 +0000
ROA not before:           Sat 01 Jan 2022 06:56:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399587
IP address blocks:        45.95.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17770741 (0x10f28f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1376dc434ab3a479dec0913f52b2f12579a1ac4
        Validity
            Not Before: Jan  1 06:56:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2219400e75e8013bf8ece819f5963c3d75604c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:6e:a3:2b:fb:33:ff:d0:c8:cf:50:fb:0d:
                    2b:ed:f2:17:09:ff:a5:1a:a5:88:a1:20:4b:56:d8:
                    b6:2f:62:cb:27:4f:e7:1f:2f:c4:cf:ab:59:97:ec:
                    24:bc:d9:c1:17:0e:31:70:00:d3:7c:a2:ef:c9:b2:
                    43:ae:ad:27:f1:03:08:9d:0e:9e:c1:74:53:d0:8a:
                    98:5a:07:5d:b8:2f:18:eb:2a:3b:d9:e9:90:7a:9f:
                    71:da:4c:82:fc:e2:3c:06:2a:54:d0:bf:14:1a:bb:
                    26:6b:93:6d:60:26:75:d2:3c:f1:a4:07:d5:03:fa:
                    2a:f8:44:b9:93:b5:07:98:60:bc:8d:a3:d1:e3:34:
                    f3:1a:d3:c2:73:ba:3b:b9:86:3a:bb:0c:80:0e:f1:
                    1d:1b:a2:10:c2:c8:25:1c:cd:7a:4f:b6:ce:a9:5a:
                    1b:00:c6:2d:6d:f4:20:2e:f3:a3:36:1b:de:33:8b:
                    96:0e:c0:6b:6c:45:10:b4:e4:ba:b4:83:6d:67:ab:
                    d6:c4:31:b1:70:86:94:5c:27:cd:7b:6f:e5:b7:44:
                    f3:4e:cf:75:47:41:50:f9:e6:b3:95:be:97:9f:cf:
                    25:d3:1e:f8:6c:68:f3:93:0c:32:ff:a3:cb:03:bb:
                    02:3a:12:35:09:3d:71:4b:eb:55:9e:57:d3:d7:4e:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:19:40:0E:75:E8:01:3B:F8:EC:E8:19:F5:96:3C:3D:75:60:4C:7D
            X509v3 Authority Key Identifier:
                keyid:B1:37:6D:C4:34:AB:3A:47:9D:EC:09:13:F5:2B:2F:12:57:9A:1A:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTdtxDSrOked7AkT9SsvEleaGsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/17d918-6831-4d1c-aa01-f3e02a82a9de/1/IhlADnXoATv47OgZ9ZY8PXVgTH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/17d918-6831-4d1c-aa01-f3e02a82a9de/1/sTdtxDSrOked7AkT9SsvEleaGsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:60:d9:61:53:12:63:06:aa:13:3a:63:88:41:af:20:9e:f6:
         5a:7b:12:a4:a9:3c:b4:a5:1d:59:39:17:77:79:d5:4f:14:12:
         70:18:62:23:e7:db:00:95:9d:13:97:03:ad:c7:10:95:30:49:
         53:37:9c:4c:3f:b2:a2:88:81:50:86:4d:de:2c:39:49:c0:42:
         9c:84:ef:52:94:6a:57:86:73:94:f3:f9:33:4a:a1:6d:fe:ee:
         61:05:bb:40:60:91:46:3e:49:0e:3c:a3:b9:84:be:84:c8:32:
         1b:6e:74:a2:c8:b0:24:7d:91:7d:a2:21:98:eb:0b:fe:c4:59:
         b7:9b:2a:68:5d:e0:0f:30:ce:c9:84:2b:51:ee:52:7b:f0:fd:
         bf:3e:d9:bf:82:f0:69:d3:5e:3a:58:14:56:d2:f8:f5:8b:a1:
         50:eb:c7:ba:e1:5f:f7:95:11:53:77:b4:47:da:e7:fa:49:49:
         c5:43:a1:a2:fa:76:4e:f2:f9:ca:11:ad:36:03:da:ae:0a:71:
         4c:41:be:d5:79:a4:18:eb:c8:31:e3:9c:b7:11:20:c3:5a:96:
         20:ee:ca:22:8c:b0:f8:1e:dd:cb:60:39:88:ab:cc:d9:68:5f:
         13:08:ba:c3:b3:bf:05:39:9f:e8:17:01:13:f9:63:97:29:8d:
         d2:62:4b:40
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQ8o9TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTM3NmRjNDM0YWIzYTQ3OWRlYzA5MTNmNTJiMmYxMjU3OWExYWM0MB4XDTIyMDEw
MTA2NTYyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjIxOTQwMGU3NWU4
MDEzYmY4ZWNlODE5ZjU5NjNjM2Q3NTYwNGM3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKGdbqMr+zP/0MjPUPsNK+3yFwn/pRqliKEgS1bYti9iyydP
5x8vxM+rWZfsJLzZwRcOMXAA03yi78myQ66tJ/EDCJ0OnsF0U9CKmFoHXbgvGOsq
O9npkHqfcdpMgvziPAYqVNC/FBq7JmuTbWAmddI88aQH1QP6KvhEuZO1B5hgvI2j
0eM08xrTwnO6O7mGOrsMgA7xHRuiEMLIJRzNek+2zqlaGwDGLW30IC7zozYb3jOL
lg7Aa2xFELTkurSDbWer1sQxsXCGlFwnzXtv5bdE807PdUdBUPnms5W+l5/PJdMe
+Gxo85MMMv+jywO7AjoSNQk9cUvrVZ5X09dO3+8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQiGUAOdegBO/js6Bn1ljw9dWBMfTAfBgNVHSMEGDAWgBSxN23ENKs6R53s
CRP1Ky8SV5oaxDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NUZHR4RFNyT2tlZDdBa1Q5U3N2RWxlYUdzUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTAvMTdkOTE4LTY4MzEtNGQxYy1hYTAxLWYzZTAyYTgyYTlkZS8x
L0lobEFEblhvQVR2NDdPZ1o5Wlk4UFhWZ1RIMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAv
MTdkOTE4LTY4MzEtNGQxYy1hYTAxLWYzZTAyYTgyYTlkZS8xL3NUZHR4RFNyT2tl
ZDdBa1Q5U3N2RWxlYUdzUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1fADANBgkqhkiG9w0BAQsFAAOC
AQEASWDZYVMSYwaqEzpjiEGvIJ72WnsSpKk8tKUdWTkXd3nVTxQScBhiI+fbAJWd
E5cDrccQlTBJUzecTD+yooiBUIZN3iw5ScBCnITvUpRqV4ZzlPP5M0qhbf7uYQW7
QGCRRj5JDjyjuYS+hMgyG250osiwJH2RfaIhmOsL/sRZt5sqaF3gDzDOyYQrUe5S
e/D9vz7Zv4LwadNeOlgUVtL49YuhUOvHuuFf95URU3e0R9rn+klJxUOhovp2TvL5
yhGtNgPargpxTEG+1XmkGOvIMeOctxEgw1qWIO7KIoyw+B7dy2A5iKvM2WhfEwi6
w7O/BTmf6BcBE/ljlymN0mJLQA==
-----END CERTIFICATE-----