Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/E5kWFE9MHGYhOlZoARsX7Cr2cAA.roa
File:                     E5kWFE9MHGYhOlZoARsX7Cr2cAA.roa (raw, json)
Hash identifier:          sxUOOxufDGsEZqXQOwV/dcoTYRKnZ9F1rrtVApskIFs=
Subject key identifier:   13:99:16:14:4F:4C:1C:66:21:3A:56:68:01:1B:17:EC:2A:F6:70:00
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018F78EBBA7DD5631E312123004306516A25
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/E5kWFE9MHGYhOlZoARsX7Cr2cAA.roa
Signing time:             Tue 14 May 2024 21:04:25 +0000
ROA not before:           Tue 14 May 2024 21:04:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:78eb:91f9/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:78:eb:ba:7d:d5:63:1e:31:21:23:00:43:06:51:6a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 14 21:04:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=139916144f4c1c66213a5668011b17ec2af67000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:04:ff:36:96:93:77:51:18:8c:7d:07:47:
                    5c:b1:62:40:e9:9e:da:ad:7a:ef:61:ed:f0:e4:dc:
                    35:10:89:4d:80:61:2a:93:41:cf:18:a9:be:df:7e:
                    c8:d8:80:5b:89:cd:49:cf:c7:33:80:b2:b7:3a:58:
                    1e:f9:0d:2a:7d:54:db:8c:70:9d:a5:09:8b:a4:30:
                    ec:4e:21:aa:bf:65:fd:ee:a7:ab:9b:e2:10:06:9c:
                    7d:25:d8:92:77:d8:b2:59:c9:a2:76:37:cb:33:f8:
                    61:66:a2:99:65:61:07:4f:7f:59:4b:c0:a0:d7:a6:
                    19:83:e6:0d:05:10:0e:55:0e:c1:9a:17:27:99:a2:
                    32:34:ff:25:77:9a:af:17:75:f0:d7:35:f2:1e:cc:
                    42:88:7f:fa:a0:e7:01:5b:9a:54:52:54:ed:5e:63:
                    77:fd:c2:cd:f5:6a:17:49:20:1e:50:42:fb:63:e8:
                    6a:6c:0d:a8:3e:00:e2:9e:81:29:82:8f:df:2e:d1:
                    4a:1c:04:37:09:f1:89:2c:ed:ea:99:41:54:59:fb:
                    2d:b1:85:52:d2:a0:70:41:bf:82:f4:9a:04:3c:52:
                    1b:fc:9b:19:15:ce:f4:97:6f:5e:83:9f:93:09:d1:
                    78:4c:93:82:45:e9:f7:18:e4:ff:42:91:71:e8:41:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:99:16:14:4F:4C:1C:66:21:3A:56:68:01:1B:17:EC:2A:F6:70:00
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/E5kWFE9MHGYhOlZoARsX7Cr2cAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:44:39:03:8c:f1:b5:bd:3a:05:45:6b:54:63:4c:f1:4d:33:
         ca:d0:3b:c4:cd:0a:eb:00:21:41:d4:3b:c9:53:dc:23:3d:a3:
         2e:84:47:a7:fc:35:4e:5a:ab:67:7e:1c:72:1c:c6:e2:ef:c3:
         cf:3e:16:05:51:af:29:a8:8a:2a:64:fa:5a:fe:3b:3e:62:ca:
         fd:18:c4:33:50:7a:09:56:1f:8b:b4:78:e7:89:cc:47:c5:09:
         1f:b3:90:67:b0:63:10:c6:1e:75:70:90:58:6f:8c:16:e0:2c:
         d9:3f:8e:ce:63:d3:12:03:a9:11:1b:53:da:50:8a:7e:e9:9a:
         e2:74:43:57:70:76:dc:a2:9f:ab:31:e4:cf:d1:2e:44:65:64:
         f2:e9:94:20:8f:1f:7b:3a:b8:2e:57:3a:ec:73:23:54:df:d0:
         b1:67:80:b4:9b:0f:27:8f:a8:9f:2c:f0:7a:ff:14:57:e1:53:
         f2:70:1a:61:68:35:d5:d8:bb:33:30:6c:2e:28:31:47:c0:96:
         9a:86:c7:f4:03:61:51:11:06:2e:bc:8c:57:5d:88:f4:09:93:
         a3:db:eb:36:5b:29:a2:b6:aa:68:90:96:14:b5:31:ae:b7:05:
         70:35:e8:1a:93:c5:15:ea:61:b8:29:35:6b:aa:09:ee:b9:ff:
         15:ec:be:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----