Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/_mFZdhtEJYrTv19wVkPMDAWWuhU.roa
File:                     _mFZdhtEJYrTv19wVkPMDAWWuhU.roa (raw, json)
Hash identifier:          SCWKQYkowE7GD+AXJwx8NsqdNANMrHonv+V2nibtjcU=
Subject key identifier:   FE:61:59:76:1B:44:25:8A:D3:BF:5F:70:56:43:CC:0C:05:96:BA:15
Certificate issuer:       /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial:       018FA370B09C8DC9FB4C9930535556558EE6
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/_mFZdhtEJYrTv19wVkPMDAWWuhU.roa
Signing time:             Thu 23 May 2024 03:13:42 +0000
ROA not before:           Thu 23 May 2024 03:13:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a3:70:b0:9c:8d:c9:fb:4c:99:30:53:55:56:55:8e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
        Validity
            Not Before: May 23 03:13:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fe6159761b44258ad3bf5f705643cc0c0596ba15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:dd:2e:50:67:5a:88:60:9b:e4:6f:b0:d7:
                    87:6b:ff:ac:fa:ee:87:eb:ce:34:e6:90:46:69:8a:
                    69:16:9b:5d:78:69:98:8e:a7:98:a6:12:43:7e:ef:
                    75:5d:3e:a1:00:63:9a:18:2a:2b:d3:a1:33:db:60:
                    59:3d:09:7e:96:00:69:38:94:1d:d2:95:ae:7c:96:
                    c5:88:6b:67:0d:a2:fd:ad:55:d4:1f:e1:c3:47:3f:
                    bf:93:26:4e:d6:13:85:25:b6:30:0f:02:94:5d:e0:
                    1b:cf:bc:9b:83:49:5d:ac:04:3d:35:c7:f2:7d:3f:
                    b5:35:65:ea:bc:18:f0:6f:54:83:d0:d9:6a:2e:d0:
                    42:dd:96:28:03:38:b5:e9:13:b2:2d:52:bb:d4:0f:
                    80:72:83:a2:f9:86:8c:83:e7:09:3f:69:4a:fe:4f:
                    4a:01:fe:b2:01:a5:96:a2:6a:70:6e:62:ce:af:f1:
                    14:b8:fd:cf:20:47:9b:13:c2:8e:20:c3:89:f2:1f:
                    10:67:17:c9:78:f6:f7:48:ae:29:ac:2d:64:38:cc:
                    d5:2e:cb:af:0d:a1:b9:63:a7:48:bc:34:36:0f:ae:
                    d4:2b:2d:79:a1:b1:b6:a2:68:b9:18:40:23:4e:0b:
                    5a:08:3b:f9:db:f9:ce:94:59:c4:f0:85:a9:a8:35:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:61:59:76:1B:44:25:8A:D3:BF:5F:70:56:43:CC:0C:05:96:BA:15
            X509v3 Authority Key Identifier:
                keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/_mFZdhtEJYrTv19wVkPMDAWWuhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:35:f2:e9:7a:97:09:fd:23:d2:14:0f:a2:98:45:e0:4d:2b:
         a3:74:47:e6:10:b5:fc:aa:9f:33:ae:62:5b:71:d4:8d:b8:bb:
         ef:dc:6f:5a:de:c7:7c:a6:54:49:82:0d:ee:d2:cd:8a:39:aa:
         b2:a2:47:00:1a:d3:a7:0c:21:79:30:92:29:69:71:62:2c:27:
         8e:b7:9a:2e:0b:3f:2e:8e:8f:62:5f:e0:09:a1:d2:f2:d8:0d:
         39:a2:fd:8c:dc:9b:2a:b6:67:74:26:ad:c6:7c:dd:1a:59:f3:
         90:08:ac:4d:82:81:8c:e0:95:c5:c1:b0:ed:59:8e:31:7b:00:
         38:ee:6f:eb:5e:fc:40:8a:d5:cf:07:5c:19:f9:e9:54:6f:74:
         b3:9d:21:3f:44:4d:7f:4c:38:bb:04:63:bb:ba:82:93:6e:cd:
         63:35:3c:45:89:35:04:90:e2:82:b9:a9:f6:55:fe:d0:9d:2c:
         66:6f:58:75:d7:a9:f9:4f:99:64:40:4e:8a:50:b9:84:ee:86:
         31:2f:bb:9c:16:bc:10:73:b7:0e:74:c7:92:56:86:cc:3f:34:
         7c:03:42:a5:c1:2a:72:d0:d0:b7:63:90:1f:f4:71:24:00:a8:
         38:92:13:21:71:1c:4d:6d:58:96:9b:cd:10:82:69:e7:28:18:
         c3:7f:82:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----