Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7JypcQzKvXSoWeE63YynrkV7nHY.roa
File:                     7JypcQzKvXSoWeE63YynrkV7nHY.roa (raw, json)
Hash identifier:          w1/q1+yZKKyHfHOmoe3IsWP22TlvceYdy0pe71owF98=
Subject key identifier:   EC:9C:A9:71:0C:CA:BD:74:A8:59:E1:3A:DD:8C:A7:AE:45:7B:9C:76
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F7CD0BCF3B244DD81CA915C438AB8BB87
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7JypcQzKvXSoWeE63YynrkV7nHY.roa
Signing time:             Wed 15 May 2024 15:13:25 +0000
ROA not before:           Wed 15 May 2024 15:13:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7c:d0:bc:f3:b2:44:dd:81:ca:91:5c:43:8a:b8:bb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 15 15:13:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ec9ca9710ccabd74a859e13add8ca7ae457b9c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:3c:f6:b1:ae:29:04:bf:33:5e:44:8e:9c:
                    8f:b5:0e:fd:81:c1:13:7d:bd:83:19:f6:93:36:b1:
                    81:b1:6d:f0:18:1b:75:70:38:7e:f0:fa:36:d4:9a:
                    67:27:ca:71:cf:48:b5:05:e9:9b:9c:50:12:83:54:
                    af:9b:0f:32:96:9e:a4:b5:39:f7:b3:16:13:5c:0d:
                    a2:ee:c6:95:df:fc:48:18:24:ed:32:53:4e:19:65:
                    bb:db:af:14:15:fc:97:84:22:cf:f4:41:54:fd:b5:
                    18:0c:ab:53:db:c1:88:06:ca:b5:46:58:9a:d2:09:
                    5e:6b:a3:e2:60:7b:b9:48:21:5b:a8:63:dc:57:ad:
                    9f:c1:d7:cb:fb:1b:ce:98:5c:dd:40:a3:1e:f7:84:
                    4d:ba:6d:0e:1d:53:c2:e0:eb:04:8f:24:43:e6:db:
                    39:42:80:6d:8f:99:79:cf:73:ea:ca:46:00:c4:06:
                    1d:e6:61:85:c9:cd:1f:3c:59:14:b9:77:24:93:48:
                    eb:5c:b0:df:cf:09:39:4f:28:bf:cf:db:da:8a:5b:
                    ab:ec:82:ba:d8:5d:5e:84:8a:9a:94:b5:2a:d2:ae:
                    85:bc:dd:86:3d:ba:fb:1f:b3:19:cb:1c:e7:e4:d4:
                    1c:ea:d4:4a:cc:aa:ac:cf:0c:32:93:30:25:dd:f4:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9C:A9:71:0C:CA:BD:74:A8:59:E1:3A:DD:8C:A7:AE:45:7B:9C:76
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/7JypcQzKvXSoWeE63YynrkV7nHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:dc:71:97:f1:bb:3e:20:f9:3b:c2:c3:5c:74:74:fc:ba:
         11:b1:ea:46:7b:77:a2:7b:87:de:ba:0b:b5:fc:52:01:c1:de:
         71:09:df:78:43:5c:2b:cc:d6:2e:17:5b:90:e4:8d:1c:51:bf:
         e8:17:09:58:52:e4:24:a1:21:f1:48:4f:f8:83:7b:c9:a7:83:
         a7:42:d6:74:0b:51:f9:69:8c:e3:35:ec:e2:c7:5e:f2:02:54:
         5c:6a:25:3d:33:62:8e:cf:b4:df:85:e5:32:dc:59:25:3b:67:
         a0:7d:a3:da:21:a5:a3:15:c2:15:40:76:ed:3c:2f:f4:6e:ec:
         5f:2f:e6:ae:c7:17:dd:59:42:08:65:54:e1:18:5c:e1:dc:16:
         d6:08:8d:fc:e9:95:66:24:d8:db:47:b1:c6:f5:0f:03:6f:9a:
         fc:80:df:64:04:27:a9:10:dd:4a:a6:9a:cc:db:75:81:e9:f2:
         55:e0:53:ec:b3:19:78:65:46:d8:78:a7:b4:85:04:47:27:56:
         1b:09:86:35:f3:ab:60:05:12:4b:9b:2c:71:67:41:35:5a:94:
         7a:1b:65:dc:15:09:d5:95:52:ff:b2:03:48:ab:72:1a:57:94:
         d7:27:a2:6f:10:0b:d0:14:d2:46:88:0d:eb:3d:8a:51:a1:2e:
         88:b3:06:bc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY980LzzskTdgcqRXEOKuLuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTE1MTUxMzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzljYTk3MTBjY2FiZDc0YTg1OWUxM2FkZDhjYTdhZTQ1N2I5Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ac89rGuKQS/M15EjpyPtQ79gcET
fb2DGfaTNrGBsW3wGBt1cDh+8Po21JpnJ8pxz0i1BembnFASg1Svmw8ylp6ktTn3
sxYTXA2i7saV3/xIGCTtMlNOGWW7268UFfyXhCLP9EFU/bUYDKtT28GIBsq1Rlia
0glea6PiYHu5SCFbqGPcV62fwdfL+xvOmFzdQKMe94RNum0OHVPC4OsEjyRD5ts5
QoBtj5l5z3PqykYAxAYd5mGFyc0fPFkUuXckk0jrXLDfzwk5Tyi/z9vailur7IK6
2F1ehIqalLUq0q6FvN2GPbr7H7MZyxzn5NQc6tRKzKqszwwykzAl3fSguwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOycqXEMyr10qFnhOt2Mp65Fe5x2MB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvN0p5cGNRekt2WFNvV2VFNjNZeW5ya1Y3bkhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADl+3HGX8bs+IPk7wsNc
dHT8uhGx6kZ7d6J7h966C7X8UgHB3nEJ33hDXCvM1i4XW5DkjRxRv+gXCVhS5CSh
IfFIT/iDe8mng6dC1nQLUflpjOM17OLHXvICVFxqJT0zYo7PtN+F5TLcWSU7Z6B9
o9ohpaMVwhVAdu08L/Ru7F8v5q7HF91ZQghlVOEYXOHcFtYIjfzplWYk2NtHscb1
DwNvmvyA32QEJ6kQ3UqmmszbdYHp8lXgU+yzGXhlRth4p7SFBEcnVhsJhjXzq2AF
EkubLHFnQTValHobZdwVCdWVUv+yA0irchpXlNcnom8QC9AU0kaIDes9ilGhLoiz
Brw=
-----END CERTIFICATE-----